Your information

Privacy Policy

This policy explains what information Joyful Flock uses, why we use it, who may receive it, and the choices and rights available to you.

Last updated: 15 August 2026

1. Who we are

Joyful Flock is a community platform operated by TSA Systems Limited in the United Kingdom. It helps churches, charities, clubs, workplaces and other organisations manage celebrations, community updates, direct conversations and collaborative greeting cards across web and mobile apps.

For privacy questions or requests, email support@joyfulflock.com with the subject “Joyful Flock privacy request”.

2. Information we collect

Account and profile information

Your name, email address, phone number and country code, password in protected form, profile photograph, biography, town or city, organisation memberships, roles, account status and verification details.

Dates and celebrations

Dates of birth, birthdays, anniversaries and other celebration dates that you or an authorised organisation administrator add. Depending on your settings, the year may be hidden from other members.

Community content and communications

Posts, comments, reactions, greeting-card messages and signatures, direct messages, and related delivery or read information. This also includes images, GIFs, short videos, documents and other files you upload or share.

Notifications and preferences

Push-notification device identifiers and tokens, browser notification subscriptions, delivery status, quiet hours, and your email, SMS, WhatsApp and push communication preferences and consent records.

Technical, security and audit information

IP address, device and browser information, app version, sign-in and session records, timestamps, diagnostic information, moderation actions, administrative activity and other records needed to protect accounts, investigate misuse and maintain an audit trail.

3. How we receive information

We receive information directly from you, automatically when you use Joyful Flock, and from an organisation administrator or another member when they invite you, add an authorised celebration, mention you, message you or contribute to shared community content. Your organisation may have its own privacy responsibilities for information it adds or manages.

4. Why we use information

  • To create, verify and secure your account and let you join and switch between organisations.
  • To show profiles, celebration dates, posts, comments, messages and greeting cards to the intended community members.
  • To send reminders, service messages and communications you have chosen to receive.
  • To deliver, maintain, troubleshoot and improve the web and mobile services.
  • To moderate content, prevent abuse, investigate incidents, keep audit records and enforce our Terms and Community Guidelines.
  • To comply with law, respond to valid legal requests and establish or defend legal claims.

Depending on the activity, we process information to perform our contract with you, pursue legitimate interests in operating a safe and reliable service, meet legal obligations, or act on your consent. Where consent applies, you can withdraw it through your settings or by contacting us.

5. Who receives information

Information is visible to the people and administrators in the organisation or conversation for which it was shared, according to roles and privacy settings. Organisation owners and authorised managers may manage membership, celebrations, content and moderation records.

We use service providers to operate Joyful Flock, including hosting and infrastructure, database and storage, email delivery, web and mobile push notifications, security, monitoring, backups and—where an organisation enables it—WhatsApp delivery. These providers process information only to provide their contracted service and are subject to appropriate safeguards. Current integrations may include Cloudflare, Resend, Expo, Apple Push Notification service, Firebase Cloud Messaging and Meta’s WhatsApp Cloud API.

We may also disclose information where required by law, to protect people or the service, in connection with a business reorganisation, or when you direct us to do so. We do not sell personal information.

6. International transfers

Some service providers may process information outside the United Kingdom. Where required, we use recognised safeguards such as adequacy regulations or approved contractual protections.

7. Security

We use access controls, organisation separation, protected credentials, encrypted transport, verified accounts, revocable sessions, restricted administrative permissions, monitoring, backups and audit records. No online service can guarantee absolute security, so please use a strong, unique password and report suspected misuse promptly.

8. Retention and deletion

Account and profile information is normally kept while your account is active. Community content is kept while needed to provide the relevant workspace or conversation. Notification tokens are kept only while registered and usable; expired or invalid tokens are removed. Security, audit, consent and support records are retained only for as long as reasonably necessary for security, accountability, disputes and legal obligations.

When an account is deleted, we delete or irreversibly anonymise associated personal information unless limited retention is required by law, security or the rights of others. Residual copies may remain temporarily in encrypted backups until they are replaced through the normal backup cycle. See our Account Deletion page for the public request process.

9. Your choices and rights

You can update profile details, celebration visibility and communication preferences in Joyful Flock. Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent at any time. You also have the right to object to processing based on legitimate interests.

Contact support@joyfulflock.com. We may need to verify your identity. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

10. Children

Joyful Flock is intended for use by organisations and their authorised communities. Organisations must obtain any permissions required before adding information about children and must use suitable privacy settings. If you believe a child’s information has been added without appropriate authority, contact us.

11. Changes to this policy

We may update this policy as Joyful Flock develops or legal requirements change. We will change the date above and provide additional notice where a change materially affects how information is used.