Sod Privacy Policy

Updated October 25, 2026. Contact Sod at privacy@sodmobile.com about this policy or your data.

What we collect and why

Sod stores your chosen name, account identifier, verified email address or phone number, home country, language edition and region history to provide your account and daily prompts. Your birth date is used on your device and during signup to check your eligibility; Sod does not save it in your profile.

We store the stories, photos, private “Thinking of you” messages and reactions you choose to share, circle memberships and invitations, blocks, prompt-wording suggestions and support requests. We store story-open activity to show you which stories are new, and device notification tokens and delivery records to send notifications you allow. Service activity is used to calculate aggregate usage and safety statistics.

Reports, moderation decisions, support correspondence and restricted incident evidence are used to investigate abuse, enforce community guidelines, prevent repeat abuse and respond to lawful requests. Staff access is limited by role and logged.

Who can see your information

Circle stories are shared with eligible members of the circles you select. Your personal archive is for you. Private messages are for the sender and recipient, subject to blocks and moderation. Authorized Sod staff may access content as needed for safety review, support and legal obligations. Sod does not sell personal data or use it for advertising or cross-app tracking.

When you share an invitation link, link-preview services may receive the inviter’s display name and circle name. Recipients may save their own copies of shared content outside Sod.

Providers and security

With your explicit agreement in the composer, Sod sends the text and any photo you submit, including private messages and text detected within photos, to Google Cloud Natural Language and Vision for automated safety screening before sharing. These systems make predictions and may make mistakes. Flagged content is not shared or sent for manual review; you can change it and try again. If screening is unavailable, nothing is shared and you can try again later. Sharing requires screening; you can choose not to submit the content.

Sod uses Google Firebase and Google Cloud for authentication, storage, hosting, backend processing and push delivery. Phone numbers used for Firebase phone authentication are sent to and stored by Google to improve spam and abuse prevention across Google services. Mailgun processes support email and email delivery; Twilio processes SMS data-export links when SMS delivery is configured. Apple and Google process push delivery on their platforms. These providers process information needed for their services under applicable data-protection agreements; they must protect it consistently with this policy and applicable law.

We transmit personal information over encrypted connections, restrict database and file access, and use time-limited links for private photos and downloads. Data may be processed outside your country. No service can guarantee absolute security.

Retention and deletion

Stories disappear from shared circles when they expire, but remain in the author’s personal archive until deleted. Private messages remain until deleted under the app’s controls. A recipient hiding a message removes it from their view; the sender can remove it for both people.

Account deletion removes your live profile, stories and photos, sent and received private messages, reactions, memberships, invitations, blocks and data exports. Deleted copies in our configured backups age out within 7 days. Data-export links expire after 24 hours.

Safety exceptions: incident evidence and records needed to enforce a ban may remain after account or content deletion. Evidence may include reported content, photos, account details and the reporter’s details. Incidents remain until dismissed; incidents referred to authorities are preserved under restricted access for legal handling. Banned-contact records are retained to prevent repeat abuse. Audit entries are kept for up to one year; identifiers are removed on deletion except where linked to a ban or incident. Ordinary support correspondence is removed on account deletion unless retained in an incident; otherwise closed correspondence is kept for up to one year and spam for up to 30 days. Contact us about retained data and applicable legal restrictions.

Your choices and rights

You can choose photos through the system picker, decline camera or notification access, block people, delete stories and messages, download your data and delete your account in You → Settings. Notification access can also be changed in your device settings. Sod remains usable without notifications or camera access.

Request deletion without installing Sod at Delete your Sod account. Email privacy@sodmobile.com to request access, correction, deletion, withdrawal of consent or other rights available where you live. We may need to verify ownership before acting. You may also have the right to contact your local data protection authority.

Age eligibility and changes

Sod checks the minimum age for the home country selected at signup and does not knowingly allow accounts below that minimum. Contact us if you believe an ineligible child has an account. We will update this policy when practices change and provide additional notice or seek consent where required.