Listory

Privacy Policy

Last updated: October 18, 2026

1. Introduction

This Privacy Policy sets out how Hironari Takahashi ("we," "us," or "our") handles user information in the Listory iOS application (the "App") that we provide. We comply with the Act on the Protection of Personal Information and other applicable laws of Japan, and handle user information in accordance with this Policy.

2. Information We Collect

2-1. Account Information

You sign in with an Apple or Google account, and authentication is handled using the authentication infrastructure of Clerk, Inc. The App has no passwords.

2-2. Content Created by Users

2-3. Preference Information

2-4. Information About the Paid Plan (Listory+)

Payments are processed by Apple. We do not receive payment information such as credit card numbers.

2-5. Device and Usage Information

We do not collect device location information (such as GPS), contacts, or health information. However, our analytics tool (PostHog) estimates and records your approximate region, at about the country and city level, from the IP address it receives.

Photos you upload are re-encoded on your device before they are sent, so they do not include metadata such as where they were taken. Videos in Moments are also exported with metadata that is unsuitable for sharing, such as where they were taken, removed before they are sent.

With your permission, the App uses your media library (Apple Music) only in the following cases:

2-6. If You Do Not Provide Information

If you do not enter the information required for registration, such as your date of birth, you cannot use the App. Permissions for the camera, microphone, photos, media library, and notifications are optional. You can use the App without granting them, but features that rely on a permission will not be available. You can change permissions at any time in iOS Settings.

2-7. Special Care-Required Personal Information

We do not aim to collect information that the law requires special care for, such as race, creed, or medical history ("special care-required personal information"). If you write such information in your posts, profile, or elsewhere yourself, we handle it only to the extent necessary to provide the App, such as displaying that content.

3. Purposes of Use

4. Third-Party Services We Use and External Transmission

We use the following external services to provide the App. As shown in the table below, the App sends information from your device to each provider. The "Recipient," "Purpose," and "Information sent" columns also serve as our public disclosure under Article 27-12 of Japan's Telecommunications Business Act (rules on external transmission).

Recipient Purpose Information sent Provider's country and data storage location
Clerk Authentication and account management Email address, name, profile photo, identifiers, and IP address and device information at sign-in United States
Neon (PostgreSQL) Database Account information, posts, follow relationships, and similar data U.S. provider; data is stored in Singapore
Google Cloud (Cloud Run) Application servers Processing of communications, and records of access to our servers (IP address, device and app information, date and time, and similar data) U.S. provider; processing runs in Singapore
Cloudflare R2 Image and video storage Uploaded images and videos U.S. provider; data is stored in the Asia-Pacific region (the country is chosen by the provider)
Apple (APNs push notifications) Delivering push notifications Device tokens and notification text (such as the other person's display name or an artist name; message text is never included) United States
Google AdMob Ad delivery (ads are shown only if you use the App for free) IP address, device, OS, and app information, ad impression and tap information, and device identifiers (such as the identifier for vendors). Because the ad system is prepared on every user's device when the App starts, the App may also communicate with Google at that time. Because we do not ask for tracking permission, the advertising identifier (IDFA) is not sent United States
PostHog Usage analytics App usage information (such as activity events, a summary of profile and settings status, and referral source), user identifiers, identifiers of posts and songs, device, OS, and app information, and IP address (the IP address is used only to estimate your region and is not stored; usernames, email addresses, and post text are not sent) United States
Sentry Problem detection Information about crashes and errors in the App or on our servers, operating environment details, and records of actions and network requests around the time of an error (users' email addresses are not sent, and identifiers in server records are masked) United States
RevenueCat Managing paid-plan subscription status User identifiers and App Store transaction information United States
Apple (App Store / Apple Music API) Payment processing and retrieving song information Transaction information and song search terms (including the title and artist name of the song that is playing or a song identified by "Identify") United States
Apple (media library and Apple Music playback) Getting the song that is playing and recently played songs, playing songs for Apple Music subscribers, and adding songs to playlists (only with your permission; your device connects to Apple directly) The operations you perform with your Apple Music account (such as the songs you play or add to a playlist) United States
Apple (artwork and preview audio delivery) Displaying album and artist artwork and playing 30-second previews (your device connects to the delivery servers directly) IP address, device and app information, and the URLs of the images and audio retrieved United States
Apple and Google (sign-in) Signing in with an Apple or Google account Information needed for sign-in (such as the result of authentication with that company's account) United States
Klipy Providing stickers Sticker search terms and a user identifier (our internal identifier) used to retrieve recently used stickers Georgia (also has a presence in the United States)
Clerk and Klipy (image delivery) Displaying the profile images of users who use their Google profile photo, and sticker images (your device connects to the delivery servers directly) IP address, device and app information, and the URLs of the images retrieved United States (Clerk), Georgia (Klipy)
Apple (ShazamKit / Shazam) Identifying songs (only when you use "Identify") Feature data for matching created on your device from the audio (the audio itself is not included) United States
Music news publishers (Natalie Music, BARKS, Real Sound, TOWER RECORDS ONLINE, Musicman) Retrieving headlines for the News tab (only publishers you subscribe to; your device connects directly to each publisher's public RSS feed) IP address and device and app information (such as the User-Agent). Your account information is not sent Japan
Spotify and Apple (destinations of shared song links) Retrieving the page to read the song title when you paste or share a Spotify or Apple Music song link (your device connects directly to the link destination) IP address, device and app information (such as the User-Agent), and the link URL. Your account information is not sent Sweden (Spotify), United States (Apple)

We entrust the handling of user information to the providers above (other than the music news publishers, the destinations of shared song links, image and preview audio delivery, sign-in, and the media library and Apple Music playback) to the extent necessary to provide the App. Because this means entrusting information to providers in countries outside Japan (the United States, Singapore, and Georgia; Cloudflare R2 stores data in a country in the Asia-Pacific region chosen by the provider, which we cannot specify and therefore cannot identify), we have confirmed through each provider's terms of service and data processing terms that they handle the entrusted information only within the scope of the purpose for which it was entrusted. Information about each country's personal information protection system is available in materials published by Japan's Personal Information Protection Commission. To request information about third parties in foreign countries, please contact us at the address in "16. Contact."

If we receive an inquiry or order based on law from investigative authorities, courts, or others (including a request for disclosure of sender information under Japan's Information Distribution Platform Act), we may provide information, after reviewing the request, only to the extent necessary.

If you share posts or songs to other apps or services through your own actions (such as sharing through the share sheet or adding songs to an Apple Music playlist), the receiving service handles the information in accordance with its own privacy policy.

In the News tab, your device retrieves the public RSS feeds of the publishers you subscribe to directly, and the App shows only each article's headline, publisher name, and date. Opening an article shows the publisher's web page. Each publisher handles information in accordance with its own privacy policy.

Except as described above, where required by law, where necessary to protect a person's life, body, or property and it is difficult to obtain the person's consent, in other cases permitted under the Act on the Protection of Personal Information, or in connection with the succession of our business through a merger, business transfer, or other event, we do not provide information that identifies individual users to third parties. We do not sell information that identifies individual users.

However, we may provide statistics created by aggregating users' posts, reactions, live event records, and similar data so that no individual can be identified to third parties such as artists, record labels, and event organizers. These statistics are daily counts of reactions, posts, favorites, and live event records for a song or artist, and the numbers of people involved. They do not include information that identifies individuals, such as usernames, post text, or photos. To prevent individuals from being inferred from small groups, we exclude any group that falls below a minimum number of users from what we provide. We do not attempt to identify individuals from statistics or from information processed so that individuals cannot be identified, and when we provide statistics, we require the recipient not to attempt to identify individuals either.

5. Advertising

The App displays ads from Google AdMob. Ads are shown if you use the App for free and are not shown while you subscribe to the paid Listory+ plan (the ad system is prepared on every user's device).

The App does not track users across other companies' apps or websites for advertising. Ads are always set to be delivered as non-personalized ads, so the App does not ask for App Tracking Transparency permission. Ads are set to be limited to content suitable for ages 13 and up.

6. Push Notifications

We store your device's push notification token to send notifications about follows, reactions, comments, messages, and similar activity, as well as the daily "What are you listening to?" prompt and notices of new songs from your favorite artists. You can turn notifications off in iOS Settings, or by notification type in the App's settings.

7. User Posts and Visibility

8. Reporting, Blocking, and Moderation

The App has features for reporting posts, comments, live event records, Moments, messages, posts in rooms, and users, and for blocking and muting users. Messages in Companion Talk cannot be reported in the App, so please report or block the sender from their profile, or contact us at the address in "16. Contact." We review reported content, and if we determine that it violates the Terms, we may delete the content or suspend the account.

We keep the content of reports and records of our responses to prevent recurrence and for investigations. However, if the user who made a report, or the user who posted the reported content, deletes their account, we delete the content of that report and keep only records of the actions taken by the operator (such as the date and time and the type of action).

When text such as posts, comments, live event records, Moments, messages, posts in rooms, prompts, and Companion Talk is sent, we automatically check whether it contains prohibited words or phrases (such as discriminatory expressions or threats), an excessive number of links, or excessive repetition of the same character, and if it does, the text is not accepted. This check is automated, and our staff do not read the content before it is sent.

9. Messages and Companion Talk

9-1. Messages

9-2. Companion Talk

10. Retention and Deletion

11. Age

The App is not intended for children under 13. If you are under 13, please do not use the App. If we learn that we have collected information from a child under 13, we will delete it promptly.

If you are under 18, please use the App with the consent of a parent or other legal guardian. If a person under 18 signs up, their account is set to a private account by default, and messages with people they do not follow are restricted (see "7. User Posts and Visibility" and "9-1. Messages").

12. Security Measures

We take the following measures to prevent the leakage, loss, or damage of user information.

However, we cannot guarantee absolute security for communications and storage over the internet.

13. Requests for disclosure, correction, suspension of use, and other actions

You may request that we notify you of the purposes of use of the information we hold about you, disclose it (including records of provision to third parties), correct, add to, or delete it, suspend its use or erase it, or stop providing it to third parties. Please send your request to the email address in "16. Contact." We will respond without delay after confirming your identity, and we will tell you how to confirm your identity depending on the request. If a request is made through an agent, we may ask for documents that confirm the agent's authority. We do not charge a fee for requests. Disclosure is, in principle, provided by email. You can delete your account yourself from "Settings" in the App, and posts and other content from each item's menu.

We also accept complaints and inquiries about the handling of personal information at the contact point in "16. Contact."

14. Trademarks and Third-Party Content

Apple, the Apple logo, Apple Music, and App Store are trademarks of Apple Inc. Other company names, service names, and logos mentioned are trademarks or registered trademarks of their respective owners. The song information, artwork, and stickers displayed by the App are obtained from the services that provide them.

15. Changes to This Policy

We may revise this Policy in response to changes in laws or the addition of features. If we make material changes, we will provide notice in advance in the App or on this page. If we change the purposes of use, we will do so only within a scope reasonably considered to be related to the purposes before the change, and will publish the changed purposes on this page. The revised Policy applies from the time it is posted on this page.

16. Contact

For inquiries about this Policy or the handling of user information, please contact us at:
[email protected]

Personal information handling business operator: Hironari Takahashi
The address will be disclosed without delay upon request.