Privacy Policy
Last updated
!LOL learns what makes you laugh. That takes some data, so here is exactly what we collect and why. The big promises: mic, camera and motion sensing are off unless you turn them on, raw audio and video of you never leave your device (except a laugh-back you choose to send), and we don’t sell your data.
Who we are
!LOL is run by Jyvin Company ([[legal entity name and address]]), which is responsible for your data under this policy. Questions or requests: legal@notlol.com.
What we collect and why
- Account
- Your email (to sign you in and contact you), your handle, and optionally a display name, avatar and bio. We also keep records of avatar uploads and replacements until account deletion, so an older upload cannot replace a newer photo by mistake. Your handle, display name, avatar, bio and simple counts (Shots posted, laughs caused) are visible to other invited alpha members and our moderation staff.
- Age
- Your birthdate, kept private. We use it only to check you are 13+ and whether you can see 18+ edge content.
- Invites
- Which invite code let you in (so we know who invited you and which alpha wave you are in), the personal invite codes we give you and whether they were used, and the codes you try (to stop code guessing). Only our staff see this.
- Region
- Your country or U.S. state (for example “US-IL”), worked out on our server, never typed by you. We use it to switch features on or off where local law requires (for example, camera-based sensing in Illinois).
- Content you post
- Targets, Shots and Chasers (text, images, GIFs, audio, video), captions, the humor tags you add, and whether AI was involved. Live content is visible to invited alpha members. Only you and our moderation staff can see your warming-up content before approval. When you post audio or video, we automatically transcribe the speech in it while it is being processed. The transcript is shown as captions to people who play it and helps us sort and screen Pieces; it is deleted with the Piece.
- Reactions
- Your Laugh Meter level (Nah to !LOL), “Too far”, and “what kind of funny?” tags on each Piece.
- Play streaks and Sharpshooter
- When these features are on, we work out once a day how many days in a row you played (your current and best streak, and your last play day); only you see it, and we never send reminders about it. If your recent Shots consistently land on the Laugh Meter, we mark you as a Sharpshooter with your rank and how many of your Shots landed, and other members see that badge on your profile.
- Laugh Vault
- The Pieces you save to your Laugh Vault, when, and whether you saved them or they were auto-saved at the Laugh Meter level you chose (auto-save is off unless you turn it on). Only you can see your vault. You can remove anything from it at any time.
- Blocks, mutes and laugh-back settings
- The people you block or mute, and whether you take laugh-backs from everyone or nobody. Only you can see them, and the people you block or mute aren’t told.
- Notifications and email choices
- What happened that you should know about (someone followed you, sent you a laugh-back, a Shot went live, a Daily result, an invite was used) and whether you read it. Which notifications you want in the app, and whether we may email you (off unless you turn it on). Every email has a one-click unsubscribe link.
- Viewing activity
- Sessions (when you open and close the feed, which mode, the device type) and impressions: what you saw, how long you stayed (dwell), whether you skipped or replayed. This is how we avoid repeats and learn your taste.
- Reports
- If you report something, we keep the report, your reason and details, and a snapshot of the reported content for review.
- AI tool use
- When you use an AI feature (for example a punch-up or a voice effect), we log the request, the provider and the result so we can label it and keep costs in check. We also keep daily attempt counts for AI tools; failed attempts count toward your allowance. The optional AI humor chat is the exception: we log only that a call happened, the provider and its cost. We don’t store what you wrote; the scores it produces go into your Humor Profile.
- Technical data
- IP address, browser and device details, and security logs our hosting providers collect to keep the service running and safe. We use essential cookies to keep you signed in; we don’t use advertising cookies.
Your Humor Profile
Your Humor Profile is a set of scores (0 to 1) across humor “genes” like sarcasm, absurd or dark, plus your settings (pace, human-only mode, Mercy Mode). It’s built from:
- the calibration quiz you take when you start (you can skip it);
- your reactions, skips, replays and dwell time as you use the feed;
- any changes you make in settings.
It’s private to you. Other people can’t see it. We use it to pick what to show you next and, in combined form, to rank content for everyone.
Laugh sensing (mic, camera, motion)
Off by default. Each sensor — microphone, camera and motion — has its own switch and asks for your consent first. You can turn any of them off at any time.
- Processed on your device. Laugh detection runs in your browser or phone. What leaves the device is only a score from 0 to 1, how long it lasted, and which kind of signal it was (laugh, smile, shake).
- Never audio or video. We don’t receive, store or listen to recordings of you or your surroundings, and we don’t store face images or face geometry.
- If you haven’t given consent for a sensor, the server rejects its scores.
- Camera-based sensing may be unavailable in some places (for example Illinois) while we review local biometric laws.
The one exception: laugh-backs. A laugh-back is a recording of your laugh, up to 3 seconds, that you choose to send to a creator. It needs its own consent, asked the first time you send one and separate from laugh sensing (allowing it never turns the microphone on while you watch). It’s only recorded while you hold the button, and only you and that creator can access it. Creators can choose to take laugh-backs from nobody, and can block or mute people. Laugh-backs are deleted after 90 days, and you can delete yours sooner.
Consent records. We keep a record of each consent you give or withdraw (which sensor, which version of the wording, when, and your region) so we can prove we asked.
What we don’t do
- We don’t sell your personal data or share it for cross-site advertising.
- We don’t let third parties train AI models on your raw content, reactions or Humor Profile.
- We don’t receive raw audio or video from sensing.
- We don’t show your Humor Profile, birthdate or region to other users.
Who we share it with
We use a few service providers (“processors”) that handle data for us under contract and only to run the service:
- Supabase
- database, sign-in and file storage.
- Vercel
- web hosting and serving the app.
- Sentry
- error monitoring. When something breaks, it gets a technical report: the kind of error, where in our code it happened, which page or API call, and a request id. We strip account details, cookies, message bodies, your IP address and anything that looks like a secret or an email before it is sent; from your browser we don’t even send the error message, only its type.
- Cloudflare
- DNS, network security and content delivery.
- Anthropic
- the AI that estimates the humor style of posted pieces (it sees the piece, not who posted it) and runs the optional humor chat (it gets your chat messages, not your account details).
- ElevenLabs
- voice skins: an AI voice reading a Shot’s words aloud (it gets the text you ask it to read, not your account details), and transcribing audio and video you post (so Pieces have captions and can be screened). Never sensing data.
- GIPHY / KLIPY
- GIF search. Your search terms go through our server, so the provider doesn’t get your account details. The GIF images themselves load from the provider’s servers, which can see your IP address.
We also share data when the law requires it, to protect people’s safety (for example reports to NCMEC), or as part of a merger or sale of the business (we’d tell you first).
Where providers process data and how international transfers are protected: [[confirm full processor list, locations and transfer mechanism]].
How long we keep it
- Account, profile, Humor Profile
- until you delete your account.
- Content you post
- until you delete it or your account, unless we must keep it for a legal reason.
- Reactions, sessions, impressions, laugh scores
- [[retention period]]
- Laugh-backs
- 90 days, or sooner if you delete them.
- Consent records and moderation records
- [[retention period]] (kept longer so we can show what was agreed and decided).
- Backups and logs
- [[retention period]]
During the alpha we may also reset data entirely; see the Terms.
Your choices and rights
You can:
- turn sensors on or off at any time;
- switch to a human-only feed;
- access a copy of your data, export it, correct it, or delete your account and data.
To get a copy of your data, use Download my data in Settings → Your data: one JSON file with everything we hold about you, plus links to your own media that stop working after a while. You can download it once a day. Reports other people filed about you and our moderators’ notes aren’t in it.
To delete your account, use Delete my account in Settings → Your data. We first ask you to confirm it’s you (a recent sign-in or a code we email you). Your account is then hidden from everyone at once and erased 30 days later; until then you can cancel there and everything comes back. Targets other people replied to stay as “Target removed”.
During the alpha, other data requests (such as correction) go by email to legal@notlol.com from the address on your account. We’ll answer within [[response time, e.g. 30 days]]. Depending on where you live (for example California, or the EU/UK) you may have further rights, including to object or complain to a regulator. [[region-specific rights wording, pending decision on EU/UK alpha users]]
Kids
!LOL is for people 13 and older. We don’t knowingly collect data from children under 13. If we learn an account belongs to someone under 13, we delete it and its data. If you think a child under 13 is using the service, tell us at legal@notlol.com.
Research data
Someday we may offer an anonymized humor dataset to researchers. Being part of it will be opt-in only, with its own consent switch. It is not active in the alpha, and nothing about you is shared for research today.
Security
Data is encrypted in transit, and database access is locked down so each person can only read their own private data. No system is perfect; if something goes wrong that affects you, we’ll tell you as the law requires.
Changes
We’ll update this policy as features ship. Material changes will be announced in the app or by email before they apply, and the “Last updated” date will change. New sensing features always ask for fresh consent.
Contact
Privacy questions or requests: legal@notlol.com.