Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how the Sammy iOS application ("Sammy", "the App", "we", "us") collects, uses, stores, and protects information about you when you use the App.

Sammy is a social media app for iOS. Sammy publishes posts and content; users view and interact through comments, likes, votes, and other features.

This policy applies to all users of the App. By using the App, you agree to the practices described here. If you do not agree, please stop using the App and use the reset option in Settings to remove your stored data.

2. Information We Collect and Do Not Collect

What we collect

Anonymous device identifier. When you first open the App, a random identifier is generated on your device. It is stored locally and sent to our servers to record your interactions. It contains no information about you, your device hardware, or your identity.

Push notification token. If you grant notification permission, your push notification token is stored on our servers and used to send you notifications about new posts. If you deny or revoke permission, we stop sending notifications to your device.

Device ban enforcement. If you are banned, the ban stays in effect even if you reinstall the App. We do not use this for tracking or advertising.

Optional comment profile. Commenting requires a profile with a username you choose. You can also upload a profile picture. Both are stored on our servers and visible to other users.

Interaction data. We record your interactions using your anonymous identifier: post likes, comment likes, poll votes, and similar actions. Your interaction state is also stored locally on your device.

What we do not collect

• Your name, email, or phone number
• Your location
• Your contacts or browsing history
• Any hardware identifier tied to your identity
• Biometric data
• Payment information (the App is free)

3. How We Use Your Information

• App experience. Your anonymous identifier lets us show your interaction state correctly, such as which posts you liked or how you voted.
• Push notifications. Your push notification token is used to send you notifications about new posts and comment interactions. You can opt out at any time.
• Content moderation. Comments go through automated moderation to detect rule-violating content. Results are stored internally and not shared externally.
• Image safety scanning. User-uploaded images are scanned for known child sexual abuse material (CSAM). See Section 8 for details.
• Ban enforcement. If you are banned, we ensure the ban stays in effect even if you reinstall the App.
• Abuse prevention. We use automated moderation to prevent spam and harassment.

We do not use your information for advertising or sell it to third parties.

4. Data Storage and Security

All data is encrypted in transit and at rest. Only authorized personnel can access our systems. Your preferences and interaction state are stored locally on your device and never leave it.

5. Third-Party Services

• Google (Firebase). Used to deliver push notifications. Your push notification token is sent to Google for this purpose. Google's privacy policy: policies.google.com/privacy.
• Apple. Used for push notification delivery and device-level ban enforcement. Apple's privacy policy: apple.com/legal/privacy.
• Cloudflare. Our infrastructure provider for hosting, storage, and content moderation including CSAM scanning. Cloudflare's privacy policy: cloudflare.com/privacypolicy.
• Supabase. Our database provider. Supabase's privacy policy: supabase.com/privacy.
• National Center for Missing & Exploited Children (NCMEC). Confirmed CSAM matches are reported to NCMEC. No personal user data is shared beyond what the report requires.

We do not share your data with advertisers, data brokers, or any other parties beyond those listed above.

6. Data Retention

• Anonymous identifier and push token. Kept until you reset the App in Settings. Resetting removes your record from our servers and clears all local data from your device.
• Comment profile and comments. Kept until you delete your profile in Settings. Deleting permanently removes your username, avatar, and all your comments from our systems.
• CSAM-quarantined content. Kept for 90 days as required by law, then permanently deleted.
• Local interaction data. Likes, votes, and similar state stored on your device are cleared when you reset the App.

7. User Privacy Rights

You can manage your data directly in the App:

• Delete your profile. In Settings, you can permanently delete your username, avatar, and all comments you have posted. This cannot be undone.
• Reset the App. In Settings, resetting the App removes your record from our servers and wipes all data stored locally on your device. You will start fresh on the next launch.
• Notifications. You can turn post notifications and comment notifications on or off at any time in Settings. You can also revoke permission from iOS Settings.
• Edit your profile. You can change your username or update your profile picture at any time in Settings.
• Delete comments. You can delete any comment or reply you posted by long-pressing it.

If you are in the EU/EEA or California: we do not sell personal data or use it for behavioral advertising. The in-app controls above are how you exercise your rights.

8. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect information from children under 13. If we learn we have done so, we will delete it promptly.

All user-uploaded images are scanned for known child sexual abuse material (CSAM). Matched content is immediately blocked, quarantined, reported to NCMEC, and the uploader is permanently banned.

If you have concerns about child safety content in the App, contact us at the address in Section 11.

9. International Data Transfers

Our infrastructure and third-party providers are based in the United States. If you are outside the US, your data is processed there.

10. Changes to This Policy

We may update this policy when our practices change or the law requires it. When we do, we will update the date at the top of this page. For significant changes, we may also post a notice in the App.

Continuing to use the App after changes means you accept the updated policy. The current version is always at privacy.sammyinpjs.com.

11. Contact Information

For questions about this policy or your data:

Email: dozendubs@gmail.com
Support form: Settings → Support in the App

We'll respond as quickly as we can. The App is run by one person, so response times may vary.