isM / LEGAL
Privacy Policy
Last updated 2026-11-08
1. Information requested at registration
We do not ask for your personal email address or phone number at registration. We handle your account ID, nickname, chosen icon, and any optional profile photo. The authentication service uses a random value combined with ism.invalid as an internal identifier. It is not treated as your personal email address.
2. Information stored on the server
We store posts, stories, letters, leaves, follows, blocks, reports, moderation records, subscription status, and related data to provide the service. Letter text is stored in plaintext on the server and can be accessed by the operator. This is not an end-to-end encrypted messaging service. Before accepting a request, the recipient can see the first 20 characters of the first message; after accepting, they can read the full text. Follow and block relationships are stored as connections within the service. We do not read your device’s contacts or address book. Follow relationships also personalize your Following feed and select posts from people you do not follow for Discover.
3. Profile photos and visibility
Profile photos are resized and converted to JPEG on your device before upload, without carrying over original metadata such as the location where the photo was taken. Photos are served through public URLs, and people who know a URL may be able to view the photo. Do not include information you wish to keep private in your icon or posts. Access controls apply to viewing posts and other service content. Leaf and follow counts are not displayed to other users. Deleted or replaced photos may remain in device or delivery-service caches, or in copies saved by other users. We cannot immediately recall every such copy.
4. Device and connection information
We use Apple’s App Attest and DeviceCheck to enforce one account per device and address abuse. The authentication service manages authentication information such as passkey public keys. Passkey private keys are not sent to the server. A hashed IP address is used to limit registration attempts. Infrastructure logs may record connection information such as IP addresses.
5. External services and purchases
Our backend uses Supabase’s Tokyo region. Purchases, renewals, and cancellations use Apple’s App Store. We manage subscription status by checking signed transaction information against the account ID. isM does not receive payment details such as your card number. The operator website uses OpenAI Sites and Cloudflare delivery infrastructure. When you visit, connection information such as your IP address and browser may be processed for delivery and abuse prevention, and infrastructure cookies may be used. These are not intended for in-app advertising tracking. Our policy is to review the providers’ contractual and management conditions and safeguards and limit the data provided to what service operation requires.
6. Advertising and analytics
We do not show ads or perform advertising tracking. We do not include analytics SDKs such as Firebase Analytics. We do not sell user information. External services needed to operate isM may process information, and information may be handled as required by law.
7. Retention and deletion
Deleting your account in settings deletes posts, leaves, follows, blocks, letters including the other person’s copy, photos, server-registered passkey credentials, and related account data. Remove any remaining passkeys from your device or iCloud Keychain yourself. Reports and moderation records are retained to address abuse for 180 days after the report is resolved, and are then deleted. Unresolved reports are kept until they are resolved. References to your account are removed when the account is deleted. Expired posts are deleted roughly every 10 minutes, and registration-attempt records older than 24 hours are deleted periodically. Retention periods for backups and infrastructure logs depend on the infrastructure settings, and will be disclosed once confirmed.
8. Contact and changes
If you use “Share link” on a post, anyone with that link can read the post’s text, nickname, and date without using the app. Disappearing posts and stories cannot be shared by link. Deleting a post also removes it from the link. Contact details and information you provide in an inquiry are used to respond to that inquiry. The operator is Taro Essence. Contact: support@ismsocial.com. This policy takes effect on November 10, 2026. Deleted information may remain for a limited period in backups and infrastructure logs, according to the retention settings of our infrastructure provider, and is then erased. Important changes will be announced through the service.