commonlogue privacy policy
Last updated: October 26, 2026
commonlogue is operated by Rowtone LLC ("we", "us"). This policy says what we collect, why we collect it, who it goes to, and how you can delete it. In short: we collect what the app needs to work and to print your books. We don't sell your data, show ads or track you across other apps.
What we collect
Account. Your email address, which is how you sign in with an emailed code. Also your username, and anything you choose to add to your profile: display name, full name, city, bio, profile and background photos, and settings.
What you post. Entries (titles, notes, links, creators, genres), photos and Moments (and where a Moment was taken: a neighbourhood or city name, one you type or one the app offers from a photo you choose, which you can change or clear before you post), comments, upvotes, messages, the groups you're in, and when entries were made and in which time zone. Photos are stored without their location data. When you choose a Moment's photo from your library, your phone turns the photo's own location into a neighbourhood or city name (Apple's Maps service does that lookup, as the Photos app does); only that name is stored, never the coordinates, and only if you keep it. When you open a link on someone's entry, we record that it was opened.
Phone number and contacts (optional). If you add your phone number, we store only a one-way hash of it, so friends can find you. If you let commonlogue look through your contacts to find friends, the app hashes their phone numbers on your phone and sends us only those hashes to check for matches. We never receive or store the contacts' names or the actual numbers. Hashes of phone numbers aren't truly anonymous, so we use them for friend matching and nothing else.
Camera and photos. These are used only when you take or choose a photo, or scan the code inside a printed book.
Print orders. Your name and US shipping address, the email for the order, the price and payment status. Card details go straight to Stripe, and we never see them.
Notifications. If you allow notifications, we store your device's push token so we can send them.
Diagnostics. When something goes wrong in the app, it can send us an error report. It contains the error, the screen you were on and your last few taps (which buttons, never what you typed), linked to your account so we can fix the problem.
Reports and blocks. When you report something, we keep the report, your reason and a copy of the reported content so we can review it. We also keep track of who you've blocked.
We don't ask for or track your location, and we use no advertising trackers. The commonlogue.com website uses Cloudflare Web Analytics, which only counts how many people visit each page. It sets no cookies, keeps no record of who you are, and the app never talks to it.
Why we use it
To run commonlogue: signing you in, showing your entries to the people you share them with, finding friends, sending notifications, printing and shipping your books and taking payment, keeping the community safe (moderation), answering support requests, and fixing bugs. We don't use your data for advertising, and we don't sell it or share it with data brokers.
Who can see what
- Entries you mark shared, your username and your public profile can be seen by anyone signed in to commonlogue. Entries you mark private are visible only to you.
- Your email, full name and phone hash are never shown to other people.
- Messages are visible to the people in the conversation. You choose who can message you.
- A printed book contains QR codes. Most open the song, film, book or page an entry links to, on that service's own site. One opens the issue in the app, for people who are signed in. commonlogue.com doesn't show any issue content publicly.
Who we share it with
We share data only with the services that run commonlogue for us, and only what each one needs:
| Service | What for | What it gets |
|---|---|---|
| Supabase | database, sign-in and file storage | everything stored in the app |
| Stripe | payments and sales tax | your email, name and shipping address, and the order |
| Resend | sending sign-in codes, and report emails to our moderators | your email address; the reported content |
| Expo (650 Industries) | push notifications and app updates | your push token and the notification text |
| An automated moderation service | checking each shared post and comment before it goes out to the community, only to keep out hateful, sexually explicit or otherwise banned content | the words and picture of a post, never your name or account; not used to train the service |
| Our print partner | printing and shipping your book | the issue's content, your name and your shipping address |
| Cloudflare | link previews, the QR-code links, and a count of visits to commonlogue.com | links you paste; which pages of the website were viewed, never who viewed them |
When you paste or share a link, or search for something, the app asks that service (for example Spotify, YouTube, Apple's iTunes Search, or film and book databases) for its title and artwork. Those services receive the link or the search term, not your account.
We may also disclose data if the law requires it, or to protect people's safety.
How long we keep it
We keep your data until you delete it or your account.
Deleting your account (settings → delete account) permanently deletes, straight away:
- your account and email address;
- your profile;
- your entries, photos, comments and messages;
- your issues and print files;
- your push tokens;
- your customer record at Stripe.
What we keep after deletion:
- Paid orders. Stripe and we keep records of payments and invoices (amount, date, billing and shipping details) for as long as tax law requires, 7 years.
- Reports. We keep reports about content, including a copy of the reported content, for 90 days after they're resolved, so we can deal with repeat abuse. After that we delete them.
- Error reports. We keep these for 90 days.
- Printed books already shipped are physical objects, so we can't recall them.
If a book of yours is being printed when you ask, the account can be deleted once it has shipped.
Your rights
You can see and edit your information in the app, and delete your account. Depending on where you live, you may have more rights, such as access, correction, deletion, portability, or objecting to processing. To use them, email mitch@commonlogue.com. We'll answer within 30 days.
Children
commonlogue is for adults 18 and over, and we don't knowingly collect data from anyone younger. If you believe someone under 18 has an account, email us and we'll delete it.
Security
Data is encrypted in transit, and access to it is restricted. No system is perfectly secure, so please tell us if you find a problem.
Changes
If we change this policy in a significant way, we'll tell you in the app or by email before the change takes effect.
Contact
Rowtone LLC · 54 Troutman St, Brooklyn, NY 11206 · mitch@commonlogue.com