Draft. This policy is a draft for Tia to finalise before release. Bracketed items are open.
Socialish ("the app") and this website are run by Iron Code Studios ("we", "us"). This policy says what the app and the website collect, and what we do with it. We wrote it to be read.
The short version
- The app keeps what you tell it on your iPhone. We do not run an account server for it, and we cannot see your answers, scores, notes or progress.
- The app has no analytics, no advertising, and no third-party tracking.
- Payments go through Apple. We never see your card.
- The website collects only what you type into its forms.
1. What the app stores on your device
When you use onboarding and the lessons, the app saves this on your iPhone only:
- Your first name, and optionally your gender, and how you heard about the app.
- Your goals: what brought you here, what you want to improve, what you have tried, what moment you are preparing for.
- Your daily time goal and reminder time.
- Your answers to the check-in questions, your scores and your profile type, with dates.
- Lessons you finish, insights you save, and reflections you write.
- Your streak, which a home-screen widget reads through an app group shared only between the app and its widget.
This stays in the app's storage on your device. It leaves your phone only if your device backup (for example iCloud Backup) includes app data, which is controlled by you and Apple.
2. Sign in with Apple (optional)
You do not need an account. If you choose Sign in with Apple, Apple gives the app a user identifier, which the app stores on your device to link your progress to your Apple Account. If you choose to share your name or email, the app does not send it to us. Apple's own terms and privacy policy govern the sign-in.
3. Subscriptions and purchases
Subscriptions use Apple's StoreKit. Apple handles payment, billing and receipts. The app asks Apple whether your Apple Account has an active subscription, and unlocks Pro if so. We do not receive your name, card or billing details. Apple may share aggregate sales and subscription figures with us.
4. Notifications
If you allow them, the app schedules a daily reminder as a local notification on your phone. It is not sent from a server and we do not receive a notification token.
5. Microphone and speech (not in this version)
The current version does not use your microphone or speech recognition. Voice practice is planned. Before it ships we will update this policy, ask for your permission through the iPhone prompt, and say what audio is sent where and how long it is kept.
6. What we do not collect in the app
No advertising identifier, no location, no contacts, no photos, no analytics or crash-reporting SDKs, and no data sold or shared for advertising.
7. The website
Forms. When you subscribe or contact us, our shared mail service stores the details you enter (email, and name, subject and message if you give them), the page you were on, the date and time, your IP address, the country your IP is in, and your browser's user-agent. We keep these to answer you, prevent abuse and send what you asked for. Contact messages may be emailed to us.
Newsletter. We use double opt-in: you get one email asking you to confirm, and nothing is sent until you click. Every email has an unsubscribe link.
Hosting. The site is served by Cloudflare, which processes technical request data (such as IP address) to deliver pages and block attacks. The site sets no cookies and runs no analytics or advertising scripts.
8. Who we share data with
| Who | Why |
|---|---|
| Apple | Sign in, purchases, device backup, App Store. |
| Cloudflare | Hosts the website and form service. |
| Purelymail | Sends our email, including confirmations and replies. |
We do not sell your data. We may disclose information if the law requires it.
9. How long we keep it
On your device: until you delete it (see Delete your account) or delete the app. Website form data: [retention period, for example 24 months, to confirm]. Newsletter email: until you unsubscribe, then kept only as a suppression record so we do not email you again.
10. Your choices and rights
You can access, correct or delete your information, withdraw consent, unsubscribe, and ask questions at hello@socialish.app. We answer within 30 days. Depending on where you live (for example under the Australian Privacy Act 1988, the GDPR or the CCPA) you may have further rights, including to complain to a regulator: [regulator wording for Tia].
11. Children
The app is not for children under 13 [age to confirm]. We do not knowingly collect data from them. If you think a child has written to us, email us and we will delete it.
12. Health and sensitive information
The app asks about confidence and social anxiety to personalise lessons. That information stays on your device. It is not a medical record and the app does not diagnose.
13. Security
Data in the app is protected by your device's own protections (passcode, encryption at rest). Website traffic uses HTTPS. No system is perfectly secure.
14. Changes
If we change this policy we will update the date above, and tell you in the app if the change is material.
15. Contact
Iron Code Studios, hello@socialish.app. [Postal address and ABN to add.]