Privacy Policy

Last updated: September 2026

Sonnet (“Sonnet,” “we,” “us,” or “our”) is an identity-based social platform designed to enable authentic, human-created expression. This Privacy Policy explains how we collect, use, store, and protect information when you use the Sonnet mobile application and related services (collectively, the “Service”).

1. Information We Collect

We collect information you provide directly to us, information generated through your use of the Service, and limited technical information required to operate the Service.

a. Account Information

When you create an account, we collect:

  • Your name or chosen display name
  • Your email address (including Sign in with Apple relay emails)
  • A unique user identifier associated with your account

b. User Content

We collect and store content you choose to create or share on Sonnet, including:

  • Text posts and replies
  • Photos and videos you upload or capture
  • Audio included in video recordings
  • Search queries performed within the app

User content is associated with your account and is visible to others based on your use of the Service.

c. Usage Data

We collect information about how you interact with the Service, such as:

  • App launches and feature usage
  • Interactions with posts, media, and sponsored posts
  • Search activity within Sonnet

This data helps us operate, improve, and understand how Sonnet is used.

d. Identifiers and Device Information

We collect:

  • A user ID associated with your account
  • Device identifiers such as push notification tokens
  • Your device’s advertising identifier, if you allow tracking

These are used to maintain account functionality, deliver notifications, and support security features. The advertising identifier is used for ads, as described in Section 3.

e. Diagnostics and Performance Data

We collect technical diagnostics, including:

  • Crash reports
  • Performance metrics (such as launch time and app stability)

This information is used to identify bugs, improve reliability, and enhance the overall user experience.

f. Subscription Information

If you subscribe to Sonnet Premium, we store purchase information linked to your account, including:

  • The original transaction ID and product ID
  • The subscription expiration date

We also receive and store subscription status updates from Apple, including free trial, renewal, cancellation, billing, and refund information. To link your purchase to your account, the app sends Apple a private purchase identifier associated with your Sonnet account when you subscribe.

This information is used to provide Sonnet Premium to your account, operate the subscription, and understand subscription usage and trial conversion. Apple processes all payments, and we do not receive your payment card details.

g. Advertising Information and Choices

The free version of Sonnet displays sponsored posts provided by Google AdMob. Google’s advertising software may collect your IP address and approximate location, device identifiers, information about ads shown and your interactions with them, and diagnostic and performance information. This information supports ad delivery, measurement, and advertising analytics. Learn more about how Google uses information from apps that use its services.

Sonnet requests non-personalized ads unless you allow tracking through Apple’s App Tracking Transparency prompt and Personalized Ads is enabled in Sonnet. Google’s consent choices also affect which ads can be served. Non-personalized ads can still involve data collection for ad delivery and measurement.

You can turn off Personalized Ads in Sonnet’s Settings under Privacy when advertising controls are available, and change Sonnet’s tracking permission in iOS Settings. Turning off personalization affects subsequent ad requests; it does not remove sponsored posts. While your Sonnet Premium subscription is active, Sonnet does not request or display these ads.

When Google requires a privacy-options control, Manage Ad Privacy appears in Sonnet’s Settings under Privacy so you can revisit those choices. This control remains available to Premium subscribers when required.

h. Selfie Check for New Accounts

When you create a new account in a country where it is required, Sonnet asks you to take a quick selfie check that confirms a live person is signing up. Didit, Sonnet’s verification provider, processes a short capture of your face to confirm that a live person is present. This is called a liveness check.

  • The check is used only to confirm that a live person is creating the account. It is not used to identify you, to compare your face with anyone else’s, to estimate your age, or to train AI models.
  • You agree to the biometric notice in the app before the check starts. If you don’t agree, you can go back or close Sonnet, and the sign-up you started is deleted after 7 days.
  • Sonnet never receives or stores an image of your face. Sonnet keeps only the result of the check, its reason codes, when it happened, and the version of the notice you agreed to.
  • If the automatic check can’t reach a result, a person on the Sonnet team may review your capture in Didit’s console to decide.

2. How We Use Information

We use the information we collect to:

  • Provide and operate the Service
  • Enable posting, sharing, and discovery of content
  • Maintain safety, moderation, and community standards
  • Respond to reports, blocks, and abuse prevention measures
  • Improve app performance and reliability
  • Analyze usage trends to improve features and design
  • Deliver and measure sponsored posts, including personalized advertising when permitted by your privacy choices
  • Communicate with you regarding your account or the Service

Advertising-related uses of information are described in Section 1.g above.

3. Sharing of Information

We may share information only in the following limited circumstances:

  • With service providers that help operate the Service (such as analytics and crash reporting providers), under strict confidentiality obligations
  • With Apple, to link a Sonnet Premium purchase to your account
  • With Didit, our verification provider, to run the selfie check for new accounts described in Section 1.h
  • With Google AdMob and its advertising partners for the advertising purposes described in Section 1.g, subject to your privacy choices
  • To comply with applicable laws, regulations, or legal requests
  • To protect the safety, rights, or integrity of Sonnet, our users, or others

We do not provide your account information or the content you post to Google or to advertisers.

Turning off ad personalization does not stop the sharing needed to deliver and measure non-personalized ads.

Where required by law, such as in the European Economic Area and the United Kingdom, we ask for your advertising choices through Google’s consent tools before any ads are requested.

4. Data Retention

We retain information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Selfie check data. The capture of your face is kept only as long as it takes to decide the check:

  • Didit deletes the capture as soon as Sonnet records the result.
  • If a person on the Sonnet team reviews the capture, it is deleted once the review is decided.
  • If a deletion is missed for any reason, Didit permanently deletes the capture after one month.
  • An unfinished sign-up, including its check results, is deleted 7 days after its last activity. If it used a selfie check attempt, a one-way hash of its Sign in with Apple identifier, its attempt count, and whether it was reviewed or declined are kept for 7 more days, so the attempt limit can’t be reset by starting over, and are then deleted.
  • For an account that was created, Sonnet keeps the result, its reason codes and its date, never an image. When the account is deleted, these are removed or anonymized with the rest of the account’s data, as described in Section 5.

5. Account Deletion

You may request deletion of your account at any time through the in-app account deletion feature.

When an account deletion request is made:

  • Your account and associated data are scheduled for deletion
  • A short grace period may apply before permanent deletion
  • After deletion, your data is removed or anonymized in accordance with applicable laws

6. Security

We take reasonable administrative, technical, and organizational measures to protect your information. However, no system can be completely secure, and we cannot guarantee absolute security of your data.

7. Children’s Privacy

Sonnet is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take steps to delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

9. Contact Us

If you have questions or concerns about this Privacy Policy or Sonnet’s privacy practices, you may contact us at: support@sonnet.social