Privacy Policy

Last updated: October 2026

This policy explains what information StoryGram ("we", "us") collects when you use the StoryGram app and website, why, and the choices you have. Questions: support@storygramapp.com.

Information we collect

You give us

• Phone number — to create your account and sign you in with a one-time code.
• Profile — username, and optionally a bio and profile photo.
• Content — photos, videos, captions and music choices you post as stories.
• Activity — likes, ratings, comments, follows and views.
• Messages — direct messages and reactions you send, and stories you share in chats.
• Reports — details you provide when you report content or accounts.

Contacts (only if you allow it)

If you choose "Find my friends", the app reads phone numbers from your contacts, converts each one into a one-way scrambled code (a SHA-256 hash) on your phone, and sends only those codes to check which friends are already on StoryGram. We do not store your contacts or their codes. Inviting a contact opens your own Messages app — we never send messages to your contacts ourselves.

Collected automatically

• Device push token — to send notifications you can turn off in iOS Settings.
• Technical data — IP address, app version and error/crash reports, used to keep the service secure (e.g. stopping spam) and fix problems.

We do not sell your personal information and we do not show ads.

How we use information

• Provide the service: accounts, stories, feeds, ratings, messaging and notifications.
• Keep StoryGram safe: verify phone numbers, prevent abuse, review reports, enforce our Terms.
• Fix bugs and improve performance.

Who can see your content

Stories, your username, profile photo, bio, follower counts and average rating are visible to other StoryGram users. Messages are visible only to you and the person you are chatting with. Blocking someone prevents them from messaging you or finding you in search.

Service providers

We use trusted providers to run StoryGram, who process data only on our behalf:

• Supabase — database hosting
• Cloudflare — storage and delivery of photos and videos
• Railway — application servers
• Twilio — sending verification codes by SMS
• Apple — push notifications
• Sentry — crash and error reports (if enabled)

These providers may process data in countries other than yours, with appropriate safeguards.

Retention and deletion

We keep your information while your account is active. Stories with an expiry time are removed when they expire. You can delete individual stories at any time, and you can delete your whole account in the app under Profile → Settings → Delete Account, which removes your profile, stories, likes, ratings, comments, follows, notifications and messages you sent. Some records may remain for a short time in backups or where required by law.

Your choices and rights

• Edit your profile, delete stories or delete your account in the app.
• Turn off notifications or contacts access in iOS Settings.
• Block, restrict or report other users.
• Depending on where you live, you may have rights to access, correct, or delete your data, or object to processing. Contact us to make a request.

Children

StoryGram is not intended for children under 13 (or the minimum age required in your country). We do not knowingly collect information from them; if you believe a child has an account, contact us and we will remove it.

Security

We use encryption in transit (HTTPS), restricted database access, and hashed contact matching. No system is perfectly secure, so please keep your phone and account safe.

Changes

We'll update this page if our practices change and, for significant changes, let you know in the app.