Ordinary Club · Effective October 12, 2026
Privacy Policy
1. Information we collect
Sign in with Apple provides a user identifier and, when you first sign in, the name you choose to share. We do not request your email address. Your account name, profile photo and sharing relationships are stored on our server.
In app versions using local storage, personal posts, photos, videos and magazines are stored on your device, separately for each account. When you start sharing, the selected posts and their attachments are uploaded to our server. Previously uploaded records and existing shared copies remain available.
We retain login sessions and encrypted Apple authentication tokens to keep you signed in and revoke Apple authorization when you delete your account.
2. Who can see your records
Records are private by default. They can be viewed by people you invite, people you select by connection code, or people who receive a sharing link you create.
Sharing links expire after seven days. You can end sharing at any time. We do not use your records for advertising or sell them to third parties.
3. Photo metadata
Original photo capture time and location metadata are not sent to our server. The app uses capture dates from your device's photo library when you browse photos by date. Uploaded photos are re-encoded to remove metadata, including location.
If you write a date or location in a post yourself, that text is uploaded and shared with the rest of the post when you share it.
4. Writing
You create posts by arranging photos, videos and text. This release does not include AI writing or connections to external AI providers.
5. Advertising on the free plan
Google AdMob ads may appear in the Stories tab and at the end of posts. We use non-personalized advertising and do not request advertising tracking permission.
Google may process device information, approximate location inferred from your IP address, ad impressions, clicks, and diagnostic or performance information to provide ads. Your post content is not used for advertising. Google's privacy policy applies to this processing: https://policies.google.com/privacy
Where required, a consent notice is shown before requesting ads. You can revisit available consent choices in Account > Ad privacy settings. A 2log Plus subscription removes ads.
6. Payments
Apple processes subscription payments. We do not receive card details. We store Apple-signed transaction information, such as the product, transaction identifier and expiry date, to verify your subscription.
7. Retention and deletion
Deleting your account removes that account's records in the app and your records, attachments and login information on our server, and revokes Sign in with Apple authorization. Exported backup files are not automatically deleted; manage them where you saved them.
Text and photos you contributed to shared records may remain in copies kept by the other participants.
Records stored only on your device may be lost if you delete the app or lose the device. Export and restore a file in Account > Device backup and restore. Starting with version 1.1.3, compatible apps and other accounts can also import backup files. Backups contain posts, photos and videos, so choose their storage location and recipients carefully.
Reports are retained for as long as needed for moderation.
8. Activity notifications
If you enable notifications, we associate your device push token, app installation identifier, notification preferences and app language with your account on our server. Notifications about shared activity are delivered through Apple Push Notification service (APNs).
Notifications do not include post titles, body text, photos or user names. You can turn off activity notifications in the app's Account screen or change notification permissions in iPhone Settings.
9. Service usage
For service operations and error monitoring, we aggregate API request counts, errors, response times and shared-page requests by hour and retain them for up to 90 days. Authenticated server activity dates and latest activity times are linked to your user identifier, retained for up to 90 days and deleted with your account. Offline activity and records kept only on your device are not collected.
These metrics do not store post content, photos, sharing links, search terms or IP addresses. Only authorized operators can view member information and metrics. Operator access is recorded in a security audit.
10. Contact
Operator: Ordinary Club (오디너리클럽). Privacy inquiries: odnrclub@gmail.com