Privacy Policy
Hummory is built for honest stories, so we collect as little as we can and never sell your data. This explains what we keep, why, and your choices.
What we collect
- Account: a sign-in identifier from Apple or Google (we don’t receive your password), your @handle, display name, bio, and profile photo if you add one, and when you agreed to these policies.
- What you share: your stories, lyric lines, the moment and year you attach, paper color, and edits.
- What you do: stories you felt (“I felt this too”), people you follow, people you block, and reports you send.
- Technical: your IP address and request details in short-lived server logs and in memory for rate limiting (to stop bots), and the songs you search for, which we send to Apple’s music catalog to find results.
We don’t collect your location, contacts, or advertising identifiers, and we don’t show ads.
What’s public
Your @handle, display name, bio, photo, stories, and follower counts are public in the app. What you felt is private: only you can see your Felt list. The author of a story can see who felt it; everyone else sees only how many people did. Blocks and reports are private too.
How we use it
- To run Hummory: show stories, profiles, and songs; keep one story a day; let you edit and delete.
- To keep it safe: rate limits, spam and duplicate checks, review of reported content, and enforcing our Community Guidelines.
- To improve it: simple, aggregate measures like how many stories are shared each week.
Who we share it with
We don’t sell or rent your personal information. We use service providers who process it for us under contract: Google Firebase (sign-in), our hosting and database provider, our photo storage provider, Apple (song search and previews), and, if needed, content-moderation providers that check reported or uploaded content. We may disclose information when the law requires it or to protect people from harm.
Keeping and deleting
We keep your information while your account is open. Delete your account in the app (Profile → Edit profile → Delete account) and we delete your profile, stories, photos, and activity right away; copies in backups are removed within 30 days. Reports about other people may be kept as needed to keep Hummory safe. A few safety records outlive an account: if an account was banned, or had strikes for breaking the Community Guidelines, we keep a note tied to its sign-in (bans until lifted, strikes for 1 year) so that deleting the account and joining again doesn’t reset them. A story that was waiting for a moderator’s review when its account was deleted is kept for up to 90 days so the review can finish, or longer where the law requires us to report it.
Your rights
You can see and edit most of your information in the app, and delete it by deleting your account. Depending on where you live (for example, California or the EU), you may also have rights to request a copy of your data or ask us to correct or delete it. Email us and we’ll respond within 30 days. We don’t sell or share personal information for cross-context behavioral advertising.
Children
Hummory is not for children under 13, and we don’t knowingly collect their information. If you believe a child under 13 has an account, tell us and we’ll delete it.
Security
Data is encrypted in transit, access is limited to people who need it, and photos are stored under random, unguessable names. No system is perfectly secure, but we work to protect yours.
Changes
If we change this policy in a way that matters, we’ll tell you in the app first.