Privacy & security

JoyCart is a private 1:1 chat product. There is no public user directory — contacts are added only by exact email match.

Messages travel Client → WebSocket → Durable Object SQLite on the hot path for low latency. D1 holds accounts, contacts, and an async search replica — not the critical send path.

You can export or delete your account from Settings. Sessions can be revoked remotely. Attachments are stored in R2 with plan-based size limits.