Privacy Policy
Last updated: October 18, 2026
1. Introduction
This Privacy Policy sets out how Hironari Takahashi ("we," "us," or "our") handles user information in the Listory iOS application (the "App") that we provide. We comply with the Act on the Protection of Personal Information and other applicable laws of Japan, and handle user information in accordance with this Policy.
2. Information We Collect
2-1. Account Information
- The identifier, email address, name (first and last), and profile photo (if one is set on your Google account) that we receive from Apple or Google when you sign in with an Apple or Google account. You are never asked to enter an email address in the App. We use only your first name as the initial display name and your Google profile photo as the initial profile image (you can change both after signing up)
- Username and display name
- Profile image, profile background image, and biography
- Date of birth (entered at sign-up; never shown to other users)
You sign in with an Apple or Google account, and authentication is handled using the authentication infrastructure of Clerk, Inc. The App has no passwords.
2-2. Content Created by Users
- Post text and information about the linked song (such as the song title, artist name, and artwork reference)
- Comments, reactions, Reposts, and quotes
- Live event records (Diary entries: text, performance date and time, setlist, performers, venue, seat, ticket price, and uploaded photos)
- Information about Companions (groups of Companions who write a Diary together, invitations and responses, "Ask for thoughts" requests, and the text and talk name you send in Companion Talk; see "9. Messages and Companion Talk")
- Moments (posts that combine photos or videos and their audio, text, and stickers) and comments on Moments
- Messages (one-to-one text, songs, and stickers exchanged between users, and your setting for whether to receive message requests; see "9. Messages and Companion Talk")
- Posts in artist rooms, prompts you create and answers to prompts, answers about your song mood, songs you place on your profile, and songs you add to Listen Later
- Follow relationships, follow requests, and Fam (a relationship between two people formed by invitation and acceptance)
- Settings for visibility, notifications, and receiving messages, such as the private account setting
- Records of invitations made with invitation codes (who invited whom)
- Read status (how far you have viewed messages, Companion Talk, Moments, and notifications)
- The content of reports, and information about users you have blocked or muted
- Records of how many times you post or send content (used to limit large numbers of writes in a short time)
2-3. Preference Information
- Favorite artists, favorite genres, and your My One Song (the one song shown on your profile)
- The music streaming service you choose
- Your country or region (the Apple Music storefront country or region, used to display song information correctly)
2-4. Information About the Paid Plan (Listory+)
- Transaction identifiers issued by the App Store, the products purchased, expiration dates, whether automatic renewal is on, and subscription status
Payments are processed by Apple. We do not receive payment information such as credit card numbers.
2-5. Device and Usage Information
- Device tokens for sending push notifications (APNs device tokens)
- App usage information (such as activity events, a summary of profile and settings status, and the referral source of links that opened the App), along with device, OS, and app information and IP address (our analytics tool uses the IP address only to estimate your region and does not store it)
- Information about crashes and errors in the App or on our servers, operating environment details (such as OS version and device type), and records of actions and network requests around the time of an error
- Records of access to our servers (IP address, device and app information, date and time, and request details), used to prevent misuse (such as limiting large numbers of requests in a short time) and to investigate failures
- Information collected by advertising providers to display and deliver ads (see the table in "4. Third-Party Services We Use and External Transmission")
We do not collect device location information (such as GPS), contacts, or health information. However, our analytics tool (PostHog) estimates and records your approximate region, at about the country and city level, from the IP address it receives.
Photos you upload are re-encoded on your device before they are sent, so they do not include metadata such as where they were taken. Videos in Moments are also exported with metadata that is unsuitable for sharing, such as where they were taken, removed before they are sent.
- Photo library: Only when you add photos or videos to a Diary or a Moment does the App list the items you have allowed it to access in the picker, and it uploads only the items you select. For profile and background images, the App reads only the photo you choose in the iOS photo picker.
- Camera: Used only to take photos for Moments, Diaries, and profile images, and videos for Moments.
- Microphone: Used to record videos for Moments and to find out what song is playing nearby with "Identify" on screens such as the song picker. Identification uses Apple's ShazamKit: the audio is converted on your device into feature data for matching and matched by Apple's Shazam. The audio itself is not stored or sent to our servers. The song title and artist name identified by the match are sent to our servers to look up the song.
With your permission, the App uses your media library (Apple Music) only in the following cases:
- To show the song that is playing and recently played songs as suggestions on screens such as the song picker. For the song that is playing, the App looks up song information through our servers using the song title and artist name to show artwork and other details. Recently played songs are shown on your device. Only songs you attach to a post or other content are saved
- To show artists you often listen to as suggestions for favorite artists at sign-up (the suggestions are shown on your device, and only the artists you choose are sent)
- To play full songs instead of previews if you subscribe to Apple Music
- To add songs from Listen Later to an Apple Music playlist when you choose to do so (the App creates a playlist in your library or adds songs to an existing playlist)
- If you consent in Settings to its use for calculating Music Mate compatibility. The App counts the artists you often listen to from your recently played songs and sends the top artists (Apple Music artist IDs and names, up to 30) to our servers when you consent and then at most once a day, for use in calculating compatibility. Song titles and listening times are not sent. The list of artists sent is never shown to other users. If you withdraw consent, the list already sent is deleted.
2-6. If You Do Not Provide Information
If you do not enter the information required for registration, such as your date of birth, you cannot use the App. Permissions for the camera, microphone, photos, media library, and notifications are optional. You can use the App without granting them, but features that rely on a permission will not be available. You can change permissions at any time in iOS Settings.
2-7. Special Care-Required Personal Information
We do not aim to collect information that the law requires special care for, such as race, creed, or medical history ("special care-required personal information"). If you write such information in your posts, profile, or elsewhere yourself, we handle it only to the extent necessary to provide the App, such as displaying that content.
3. Purposes of Use
- Providing the App, managing accounts, and authenticating users
- Displaying posts, generating feeds, and providing features for interaction between users
- Automatically analyzing posts, reactions, songs chosen in prompts, songs placed on your profile, songs saved to Listen Later, performers at live events you attended, favorite artists and genres, and, if you consent, artists you often listen to, in order to show songs, posts, and users suggested for your preferences and to calculate musical compatibility (Music Mate)
- Checking age based on date of birth (to prevent use by children under 13, and, for users under 18, to restrict messages and to make their accounts private accounts by default at sign-up)
- Determining paid-plan entitlements and managing subscription status
- Sending push notifications
- Responding to inappropriate content, processing reports, investigating violations of the Terms, detecting and preventing spam and misuse (including automated checks and review by the operator), and protecting the life and physical safety of users and others
- Investigating problems, improving quality and features, and developing and testing new features
- Displaying advertisements
- Creating statistics aggregated so that no individual can be identified (such as daily counts of reactions, posts, favorites, and live event records for each song or artist, and the numbers of people involved), and providing those statistics to third parties
- Responding to inquiries and contacting you for purposes such as identity verification
4. Third-Party Services We Use and External Transmission
We use the following external services to provide the App. As shown in the table below, the App sends information from your device to each provider. The "Recipient," "Purpose," and "Information sent" columns also serve as our public disclosure under Article 27-12 of Japan's Telecommunications Business Act (rules on external transmission).
| Recipient | Purpose | Information sent | Provider's country and data storage location |
|---|---|---|---|
| Clerk | Authentication and account management | Email address, name, profile photo, identifiers, and IP address and device information at sign-in | United States |
| Neon (PostgreSQL) | Database | Account information, posts, follow relationships, and similar data | U.S. provider; data is stored in Singapore |
| Google Cloud (Cloud Run) | Application servers | Processing of communications, and records of access to our servers (IP address, device and app information, date and time, and similar data) | U.S. provider; processing runs in Singapore |
| Cloudflare R2 | Image and video storage | Uploaded images and videos | U.S. provider; data is stored in the Asia-Pacific region (the country is chosen by the provider) |
| Apple (APNs push notifications) | Delivering push notifications | Device tokens and notification text (such as the other person's display name or an artist name; message text is never included) | United States |
| Google AdMob | Ad delivery (ads are shown only if you use the App for free) | IP address, device, OS, and app information, ad impression and tap information, and device identifiers (such as the identifier for vendors). Because the ad system is prepared on every user's device when the App starts, the App may also communicate with Google at that time. Because we do not ask for tracking permission, the advertising identifier (IDFA) is not sent | United States |
| PostHog | Usage analytics | App usage information (such as activity events, a summary of profile and settings status, and referral source), user identifiers, identifiers of posts and songs, device, OS, and app information, and IP address (the IP address is used only to estimate your region and is not stored; usernames, email addresses, and post text are not sent) | United States |
| Sentry | Problem detection | Information about crashes and errors in the App or on our servers, operating environment details, and records of actions and network requests around the time of an error (users' email addresses are not sent, and identifiers in server records are masked) | United States |
| RevenueCat | Managing paid-plan subscription status | User identifiers and App Store transaction information | United States |
| Apple (App Store / Apple Music API) | Payment processing and retrieving song information | Transaction information and song search terms (including the title and artist name of the song that is playing or a song identified by "Identify") | United States |
| Apple (media library and Apple Music playback) | Getting the song that is playing and recently played songs, playing songs for Apple Music subscribers, and adding songs to playlists (only with your permission; your device connects to Apple directly) | The operations you perform with your Apple Music account (such as the songs you play or add to a playlist) | United States |
| Apple (artwork and preview audio delivery) | Displaying album and artist artwork and playing 30-second previews (your device connects to the delivery servers directly) | IP address, device and app information, and the URLs of the images and audio retrieved | United States |
| Apple and Google (sign-in) | Signing in with an Apple or Google account | Information needed for sign-in (such as the result of authentication with that company's account) | United States |
| Klipy | Providing stickers | Sticker search terms and a user identifier (our internal identifier) used to retrieve recently used stickers | Georgia (also has a presence in the United States) |
| Clerk and Klipy (image delivery) | Displaying the profile images of users who use their Google profile photo, and sticker images (your device connects to the delivery servers directly) | IP address, device and app information, and the URLs of the images retrieved | United States (Clerk), Georgia (Klipy) |
| Apple (ShazamKit / Shazam) | Identifying songs (only when you use "Identify") | Feature data for matching created on your device from the audio (the audio itself is not included) | United States |
| Music news publishers (Natalie Music, BARKS, Real Sound, TOWER RECORDS ONLINE, Musicman) | Retrieving headlines for the News tab (only publishers you subscribe to; your device connects directly to each publisher's public RSS feed) | IP address and device and app information (such as the User-Agent). Your account information is not sent | Japan |
| Spotify and Apple (destinations of shared song links) | Retrieving the page to read the song title when you paste or share a Spotify or Apple Music song link (your device connects directly to the link destination) | IP address, device and app information (such as the User-Agent), and the link URL. Your account information is not sent | Sweden (Spotify), United States (Apple) |
We entrust the handling of user information to the providers above (other than the music news publishers, the destinations of shared song links, image and preview audio delivery, sign-in, and the media library and Apple Music playback) to the extent necessary to provide the App. Because this means entrusting information to providers in countries outside Japan (the United States, Singapore, and Georgia; Cloudflare R2 stores data in a country in the Asia-Pacific region chosen by the provider, which we cannot specify and therefore cannot identify), we have confirmed through each provider's terms of service and data processing terms that they handle the entrusted information only within the scope of the purpose for which it was entrusted. Information about each country's personal information protection system is available in materials published by Japan's Personal Information Protection Commission. To request information about third parties in foreign countries, please contact us at the address in "16. Contact."
If we receive an inquiry or order based on law from investigative authorities, courts, or others (including a request for disclosure of sender information under Japan's Information Distribution Platform Act), we may provide information, after reviewing the request, only to the extent necessary.
If you share posts or songs to other apps or services through your own actions (such as sharing through the share sheet or adding songs to an Apple Music playlist), the receiving service handles the information in accordance with its own privacy policy.
In the News tab, your device retrieves the public RSS feeds of the publishers you subscribe to directly, and the App shows only each article's headline, publisher name, and date. Opening an article shows the publisher's web page. Each publisher handles information in accordance with its own privacy policy.
Except as described above, where required by law, where necessary to protect a person's life, body, or property and it is difficult to obtain the person's consent, in other cases permitted under the Act on the Protection of Personal Information, or in connection with the succession of our business through a merger, business transfer, or other event, we do not provide information that identifies individual users to third parties. We do not sell information that identifies individual users.
However, we may provide statistics created by aggregating users' posts, reactions, live event records, and similar data so that no individual can be identified to third parties such as artists, record labels, and event organizers. These statistics are daily counts of reactions, posts, favorites, and live event records for a song or artist, and the numbers of people involved. They do not include information that identifies individuals, such as usernames, post text, or photos. To prevent individuals from being inferred from small groups, we exclude any group that falls below a minimum number of users from what we provide. We do not attempt to identify individuals from statistics or from information processed so that individuals cannot be identified, and when we provide statistics, we require the recipient not to attempt to identify individuals either.
5. Advertising
The App displays ads from Google AdMob. Ads are shown if you use the App for free and are not shown while you subscribe to the paid Listory+ plan (the ad system is prepared on every user's device).
The App does not track users across other companies' apps or websites for advertising. Ads are always set to be delivered as non-personalized ads, so the App does not ask for App Tracking Transparency permission. Ads are set to be limited to content suitable for ages 13 and up.
6. Push Notifications
We store your device's push notification token to send notifications about follows, reactions, comments, messages, and similar activity, as well as the daily "What are you listening to?" prompt and notices of new songs from your favorite artists. You can turn notifications off in iOS Settings, or by notification type in the App's settings.
7. User Posts and Visibility
- Posts (Track Notes) can be viewed by anyone who uses the App. However, while your account is a private account, they are shown only to followers you have approved and to you. Posts for which you chose "Followers Only" or "Private" in an earlier version continue to be shown with that visibility.
- Comments and reactions on other users' posts, posts in rooms, and answers to prompts are shown to anyone who can view the place where they appear (this also applies to private accounts).
- If you make your account a private account, follows require your approval, and your posts, live event records, Vibes (the list of posts you reacted to), Moments, Music Mate compatibility, and following and follower lists are not shown to anyone other than followers you have approved. Your account is also not shown in suggestions or compatibility results for users who do not follow you. If you turn off your private account, all pending follow requests are approved. If a person aged 13 or older but under 18 signs up, their account is set to a private account by default (they can turn this off in Settings).
- For live event records, you can choose "Public" or "Only Me" as the visibility. In a group of Companions, the visibility is shared by the group, and the owner chooses "Public" or "Companions only." Group members can view each other's live event records regardless of visibility, and people who have not yet responded to an invitation can view the owner's live event record.
- Moments taken in camera mode (Fresh) default to "Fam," and Moments chosen from your camera roll (Throwback) default to "Public"; both can be switched to "Private." "Fam" Moments are shown only to you and your Fam, and "Private" Moments are shown only to you. "Public" Moments are also shown only to followers you have approved and to you while your account is a private account. Moments appear in feeds for 24 hours, but until you delete them, people allowed by their visibility can still view them from your profile.
- Live event records and Moments for which you chose "Followers Only" in an earlier version continue to be shown with that visibility.
- Your profile (the items on your profile, such as your username, display name, profile image, background image, biography, numbers of people you follow and followers, favorite genres, and favorite artists) is shown to other users even if your account is a private account.
- Please do not include information that infringes the rights of others or information that you do not want used to identify you.
8. Reporting, Blocking, and Moderation
The App has features for reporting posts, comments, live event records, Moments, messages, posts in rooms, and users, and for blocking and muting users. Messages in Companion Talk cannot be reported in the App, so please report or block the sender from their profile, or contact us at the address in "16. Contact." We review reported content, and if we determine that it violates the Terms, we may delete the content or suspend the account.
We keep the content of reports and records of our responses to prevent recurrence and for investigations. However, if the user who made a report, or the user who posted the reported content, deletes their account, we delete the content of that report and keep only records of the actions taken by the operator (such as the date and time and the type of action).
When text such as posts, comments, live event records, Moments, messages, posts in rooms, prompts, and Companion Talk is sent, we automatically check whether it contains prohibited words or phrases (such as discriminatory expressions or threats), an excessive number of links, or excessive repetition of the same character, and if it does, the text is not accepted. This check is automated, and our staff do not read the content before it is sent.
9. Messages and Companion Talk
9-1. Messages
- Messages is a feature that lets users, neither of whom has blocked the other, send and receive one-to-one text, songs, and stickers.
- If the recipient follows the sender or has accepted the conversation, messages are delivered normally. Otherwise, they are delivered as a message request, and the sender can send only one text message until the recipient accepts or replies (songs, stickers, and links cannot be sent, and the number of requests that can be sent is also limited). If the recipient deletes a message request, the sender is not notified.
- You can change whether you receive message requests in the App's settings.
- Users under 18 can exchange messages only with people they follow. Messages from people they do not follow (including message requests) are not delivered, and they cannot send messages to people they do not follow. Users cannot turn off this restriction themselves. Age is determined by the date of birth entered at sign-up.
- In the App, only the sender and the recipient can read a message.
- When a message is sent, we automatically check whether its text contains prohibited words or similar content, and if it does, the message is not sent. This check is automated, and our staff do not read the text before it is sent.
- We review the text of a message only if the user who received it reports it. We review only the reported message and what is necessary for the decision, and we keep a record that we reviewed it.
- Message text is not included in our analytics tool (PostHog), problem detection (Sentry), push notification content, or server records. Push notifications say only "[Name] sent you a message." No push notifications are sent for message requests.
- Messages are kept until the sender deletes them or either user deletes their account. If the recipient clears a conversation in the App, the other user's history remains. If a user deletes their account, the threads that user participated in are deleted, including the other user's history.
- Except where required by law, we do not disclose message text to third parties.
9-2. Companion Talk
- Companion Talk is a feature that lets members of a group of Companions who write a live event record together (you invite people who follow you and whom you follow, and they join by accepting) send text to one another.
- Only members of the group can read Companion Talk. Members can read only text sent after they joined, and text from people they have blocked or who have blocked them is not shown. Members who leave the group can no longer read it.
- Messages in Companion Talk cannot be reported in the App. We review the text of Companion Talk only when we investigate a violation of the Terms after a member contacts us at the address in "16. Contact," or where required by law. We review only what is necessary for the decision.
- Companion Talk text is not included in our analytics tool (PostHog), problem detection (Sentry), push notification content, or server records. Push notifications and in-app notifications show only the sender's name and that a message was sent in Companion Talk.
- Companion Talk text is kept until the group no longer exists, and is deleted along with the group when all members have left. Text sent by a member remains even after that member leaves. Sent text cannot be deleted one message at a time. If a user deletes their account, the text that user sent is deleted.
- Except where required by law, we do not disclose Companion Talk text to third parties.
10. Retention and Deletion
- Accounts and posts are retained until the user deletes them or for as long as necessary to provide the service.
- We decide how long to retain information based on whether it is needed to provide the Service, whether we are legally required to retain it, and whether it is needed to investigate or prevent misuse or to ensure safety.
- If you delete an individual post, Moment, or live event record, other users can no longer see it. However, the attached photo and video files remain in storage, inaccessible from outside, until you delete your account.
- Users can delete their own accounts from "Settings" in the App. Deletion removes account information, posts, comments, reactions, Reposts, live event records, Moments, messages (entire threads, including the other user's history), text sent in Companion Talk, posts in rooms, prompts and answers, uploaded images and videos, follow, Fam, block, and mute relationships, notifications, push notification device tokens, the account on our authentication infrastructure (Clerk), and the subscription link (including subscriber information at RevenueCat). Other users' comments, reactions, and answers on your posts and prompts are also deleted.
- If other members remain in a group of Companions, the group and the other members' live event records and Companion Talk remain.
- Records of the actions the operator took in response to reports (such as the date and time and the type of action) are kept after account deletion to prevent recurrence and for investigations. Information subject to legal retention obligations, information that must be preserved to respond to legal proceedings or requests from investigative authorities or others, and the minimum records necessary to prevent misuse may also be retained for a necessary period after deletion.
- Information in our analytics tool (PostHog), problem detection (Sentry), and records of access to our servers is not removed by account deletion and is deleted when each service's retention period ends. These do not include email addresses or post text. Server records may include your username when you register or change it.
- Statistics already aggregated so that no individual can be identified may be retained after account deletion.
11. Age
The App is not intended for children under 13. If you are under 13, please do not use the App. If we learn that we have collected information from a child under 13, we will delete it promptly.
If you are under 18, please use the App with the consent of a parent or other legal guardian. If a person under 18 signs up, their account is set to a private account by default, and messages with people they do not follow are restricted (see "7. User Posts and Visibility" and "9-1. Messages").
12. Security Measures
We take the following measures to prevent the leakage, loss, or damage of user information.
- Basic policy: This Policy sets out our basic policy on compliance with laws, security management, and the contact point for questions and complaints.
- Organizational measures: When we review reported content, we record the review first and then look only at the reported content and what is necessary for the decision.
- Physical measures: We do not operate our own servers; data is stored and processed in cloud providers' facilities.
- Technical measures: Communications between the App and our servers are encrypted (HTTPS). Our API determines what each user can view and do, and hides content when this cannot be determined. Secrets such as database connection information and API keys are stored mainly in a dedicated secrets management service (Google Cloud Secret Manager).
- Understanding the external environment: User information is stored and processed mainly in Singapore (databases and application servers) and the United States (authentication, analytics, problem detection, and billing management). We implement the measures above with an understanding of the personal information protection systems in these countries.
However, we cannot guarantee absolute security for communications and storage over the internet.
13. Requests for disclosure, correction, suspension of use, and other actions
You may request that we notify you of the purposes of use of the information we hold about you, disclose it (including records of provision to third parties), correct, add to, or delete it, suspend its use or erase it, or stop providing it to third parties. Please send your request to the email address in "16. Contact." We will respond without delay after confirming your identity, and we will tell you how to confirm your identity depending on the request. If a request is made through an agent, we may ask for documents that confirm the agent's authority. We do not charge a fee for requests. Disclosure is, in principle, provided by email. You can delete your account yourself from "Settings" in the App, and posts and other content from each item's menu.
We also accept complaints and inquiries about the handling of personal information at the contact point in "16. Contact."
14. Trademarks and Third-Party Content
Apple, the Apple logo, Apple Music, and App Store are trademarks of Apple Inc. Other company names, service names, and logos mentioned are trademarks or registered trademarks of their respective owners. The song information, artwork, and stickers displayed by the App are obtained from the services that provide them.
15. Changes to This Policy
We may revise this Policy in response to changes in laws or the addition of features. If we make material changes, we will provide notice in advance in the App or on this page. If we change the purposes of use, we will do so only within a scope reasonably considered to be related to the purposes before the change, and will publish the changed purposes on this page. The revised Policy applies from the time it is posted on this page.
16. Contact
For inquiries about this Policy or the handling of user information, please contact us at:
[email protected]
Personal information handling business operator: Hironari Takahashi
The address will be disclosed without delay upon request.