| What | Why | When you delete your account |
|---|
| An Apple account identifier, and the email address Apple gives us — which is the
private relay address if you chose "Hide My Email" |
To recognise you when you sign in again | Deleted |
| Your name and @handle | Shown as the author of matchups you post | Deleted |
| Your device's name, e.g. "Sam's iPhone" | Labels the sign-in so you can tell sessions apart | Deleted |
| Photos you upload, and the question and labels you write | They are the matchup | Deleted |
| Your votes | To count the result, keep results hidden until you've voted, and stop the same person voting twice | Deleted — see the note below on votes cast before you signed in |
| A random identifier the app generates on your device | So a vote cast without an account is counted once. It is not your device's advertising ID, and Likogram is the only place it is sent | Kept — see below |
| Groups you create or join: the group's name, who is in it, and which matchups were
posted to it. Members who joined without an account appear as "Guest", identified only by the
random identifier below | So a group's matchups are shown to its members and no one else in
the app | Groups you own are deleted with their matchups; your memberships are removed |
| Reports you file, and who you block | Moderation | Blocks deleted; reports kept — see below |
| Share pages only: whether a matchup page on likogram.com was opened, whether a
vote was cast from it, and whether its App Store link was tapped — tied to the same random
identifier as the vote | So we can tell whether sharing a matchup actually works. Counted
by us, sent to nobody else, and never joined to an account | Not tied to an account;
deleted after 90 days regardless |
What we never collect
No location, no contacts, no advertising identifier, no browsing activity outside the app.
The app asks for no tracking permission because it does no tracking. Photos are re-encoded on
your device before upload, which removes the embedded camera data — including GPS coordinates —
so location attached to a photo never leaves your phone.
Your birth date is in this list too. The app asks for it once, when you first open it, to
check you're old enough to use Likogram — but the check happens on your phone, and the date
itself is never stored and never sent to us. Only the outcome is kept.
Who else can see it
Two companies handle data on our behalf, and no one else:
- Cloudflare hosts the service, the database and the photo storage, and keeps
short-term operational logs of requests.
- Apple provides Sign in with Apple. Verifying your sign-in involves downloading
Apple's public keys — no information about you is sent to Apple in that step.
We do not sell personal information, and we do not share it for advertising.
Who can see your matchups
A public matchup appears in the app's feed for anyone.
A private matchup is unlisted, not access-controlled: it never appears in the feed,
but anyone holding its link can open it, vote, and see the photos — that is what makes it
shareable with friends who don't have the app. Links contain a long random identifier that
cannot realistically be guessed, so a private matchup stays between you and the people you
send it to. Treat the link itself as the key, and don't post it anywhere public.
When a link is shared into a messaging app or social network, that service will usually
fetch a preview image showing the photos and the question.
Deleting your account
Settings → Delete account removes your profile, your matchups, their photos, your votes,
your sign-ins and your block list. It is immediate and permanent — there is no recovery.
Four things do not go, and you should know about them. Reports you filed
about other people's content are kept, so that moderation decisions can still be reviewed —
they hold the reason you gave and any note you wrote. Votes you cast anonymously before
you ever signed in stay counted, because they were never attached to your account.
Cloudflare's short-term request logs are outside our deletion process; they contain no
photos, emails or tokens. And if your account was banned for breaking the rules, we keep a
one-way hash of your Apple identifier so that deleting the account isn't a way to come
straight back — see below.
What else deletion doesn't reach
Copies of a photo may survive briefly in the caches of your device or an intermediate
network. Photos you picked in the composer but never actually posted aren't attached to
anything, so the deletion sweep can't find them by owner — they are removed by a separate
clean-up rather than immediately. And where your vote has already been counted into a
matchup's totals, deleting your account removes your vote record but doesn't rewrite a
tally other people have already seen.
If your account was banned
A ban has to survive account deletion, or it means nothing: delete, sign up again, carry
on. So when an account is banned — or is deleted while reports about it are still open — we
store a keyed one-way hash of the identifier Apple gives us for you. Never the
identifier itself, never your email or name. Because the hash is computed with a secret only
we hold, it cannot be reversed and cannot be recomputed or matched by anyone else, even
someone who already knows your Apple identifier. The only question it can answer is "has this
Apple ID been banned here".
If you sign in again the ban is re-applied rather than the sign-in refused, so you can
still read, and you can still write to us to appeal. Lifting a ban deletes the hash. If your
account was never banned and had no unresolved reports against it, nothing is kept under this
section.
Voting without an account
You can browse and vote without signing in. In that case we hold no name or email for you —
only the random identifier described above, attached to your votes.
How it's kept
Everything travels over HTTPS. The token that keeps you signed in is stored in your
device's Keychain, and only a one-way hash of it is stored on the server, so the token itself
cannot be read out of our database.
Children
Likogram is not for children under 13. The app asks your date of birth before showing any
content and does not admit anyone under 13; the date is checked on your device and never sent
to us. We do not knowingly collect anything from children — if you believe a child has given
us information, write to us and we will delete it.
Your rights
You can see and edit your profile in Settings, and delete everything from the same screen.
For anything else — a copy of your data, a correction, a question about this policy — email
support@likogram.com.
Changes
If this policy changes in a way that matters, the date at the top changes and the app will
say so.