Privacy Policy
Last updated: September 28, 2026
The short version
- No account, no name, no email. Islo uses an anonymous ID so our server can keep your creature's Live Activity up to date.
- Health data, calendar events and battery level are read on your iPhone and never leave it.
- Location is used only for weather and rounded to city level (about 11 km). It is sent to our server only if you have Pro and weather turned on.
- No ads, no ad identifiers, no selling or sharing of data for advertising.
- Settings → Delete all data erases everything we store about you.
Who we are
This policy covers the Islo iOS app, its widgets and Live Activities, and the isloapp.web.app website (“Islo”, “we”). Questions and requests: thewayprod1@gmail.com.
What stays on your iPhone
Islo reacts to your day using data that it reads and processes only on your device. None of it is sent to our server or to anyone else:
- Health (HealthKit) — step count and, if you turn it on, your usual sleep times. Used so your creature can cheer when you move or sleep when you do.
- Calendar — only the start time of your next event, so your creature can put on a tie. Titles, attendees and details are not used.
- Battery state — so your creature can get cozy while your phone charges.
- Approximate location — if you turn on weather, iOS gives Islo a reduced-accuracy position, which the app rounds to city level and uses to ask Apple WeatherKit for the current weather. Without Pro, this stays between your iPhone and Apple.
- Your creature's full history and your in-app choices, stored in the app and its widgets.
Each of these sources is optional, needs your permission, and can be switched off in the app or in iOS Settings.
What our server stores
Islo runs a small backend on Google Firebase (Cloud Functions and Firestore, United States) so the creature can keep living in your Live Activity while the app is closed. It stores:
| Data | Why |
|---|---|
| Anonymous Firebase ID (random, created on first launch) | To keep your data separate from everyone else's. It is not linked to your Apple ID, name, email or phone number. |
| Push tokens (APNs device, Live Activity and push-to-start tokens) | To update and restart your creature's Live Activity. |
| Language, time zone, app version | To show the right phrases at the right local time. |
| Creature state — species, name, mood and satiety numbers, last interaction time, outfit | To calculate what your creature is doing while the app is closed. |
| Preferences — bedtime and wake time, quiet hours, enabled sources and surfaces | To avoid updates while you sleep and respect your settings. |
| Pro subscription status — product, expiry date, environment and the App Store transaction ID | To unlock Pro features. We verify Apple's signed transaction; we never see your payment details. |
| City-level location (rounded to 0.1°, ~11 km) and the current weather type and temperature — Pro with weather on only | To refresh the weather for your creature every hour. Precise coordinates are never stored. |
| Delivery bookkeeping — push counters and schedule | To respect daily limits. |
Visits
If you create a visit link, your display name, your creature's name, species, outfit and state are stored for 24 hours and shown to anyone who opens the link (in the app or on isloapp.web.app). Names are automatically checked for links and offensive words. If someone reports a visit, we keep the report (reason, the names at the time, and the anonymous IDs involved) for 90 days to review abuse. If you block someone, we store that block so their visits are hidden from you. At most 3 visits, 20 reports and 20 blocks per day are allowed.
Analytics
If “Anonymous usage stats” is on (Settings → Privacy), the app sends simple events such as “app opened”, “care action”, “paywall viewed” or “widget families in use”. The server only adds them to daily totals (for example, “1,204 feed actions on 2026-09-01”) and to day-1/7/30 return counts; raw events and free text are not kept. The only per-user analytics data is the first and last day you were active, stored with your anonymous ID. Turning the switch off stops collection and clears unsent events.
What we never collect
- Your name, email, phone number, contacts or photos.
- Health records, calendar contents, battery history.
- Precise location.
- Advertising identifiers (IDFA). Islo does not track you across apps and websites and contains no ad or tracking SDKs.
- IP addresses in our database. Our hosting provider may keep standard, short-lived request logs for security and operations.
Who processes the data
- Google Firebase / Google Cloud — hosting, database and anonymous authentication, as our processor.
- Apple — push notifications (APNs), WeatherKit for weather data and the App Store for purchases. The app and (for Pro) our server ask WeatherKit for weather using only rounded coordinates.
We do not sell personal data or share it with third parties for their own purposes.
How long we keep it
- Account data — until you delete it in the app. If you simply delete the app, the data stays inactive on the server; write to us to have it removed, or use Delete all data before uninstalling.
- Visit links — 24 hours. Reports — 90 days.
- Weather cache — 24 hours, keyed by rounded location, not by user.
- Records of processed App Store notifications — 30 days.
- Aggregate analytics totals contain no identifiers and are kept indefinitely.
Deleting your data
In the app, open Settings → Delete all data. This immediately deletes your server record (creature state, preferences, tokens, subscription link, blocks), your visits, reports filed by or about you, and your anonymous ID, and then erases the app's local data. It cannot be undone. A subscription is not cancelled by deleting data — manage it in iOS Settings → Apple ID → Subscriptions; you can restore Pro later with “Restore purchases”.
Your rights
Depending on where you live (for example under the GDPR or CCPA), you can ask to access, correct, delete or export your data, and object to processing. Because we have no name or email, the quickest way is Delete all data in the app; for anything else, write to thewayprod1@gmail.com. You can also complain to your local data protection authority.
Children
Islo is not directed at children under 13 and we do not knowingly collect personal data from them. Visit names are filtered and can be reported and blocked.
Security
All traffic is encrypted (HTTPS). The database is not accessible from apps or browsers directly; only our server code can read or write it. Subscription status is granted only from transactions cryptographically signed by Apple.
Changes
If we change this policy, we will update the date above and, for significant changes, tell you in the app.