Privacy policy
Effective 11 October 2026
Sock keeps as little as it can, for as short as it can. We do not sell your data, show ads, or track you across other apps and websites.
Aeryx Industries LLC, a Colorado limited liability company, operates Sock and is the controller of the personal data this policy describes.
What we collect, and how long it is kept
| Data | Why | Kept |
|---|---|---|
| Your Apple account identifier from Sign in with Apple (not your email or name) | To recognize you when you sign in | Until you delete your account |
| Your handle and display name | So people can find and recognize you | Until you delete your account |
| Your devices (a label such as "iPhone", a hashed sign-in token) and their push notification tokens | To sign you in and deliver notifications | Until you sign out of that device or delete your account |
| Messages you send | To deliver them | Until every recipient's device has received them, 30 days at most. Your history lives on your devices, not on our servers |
| Your puppets and their hashed tokens | So your puppets can message you | Until you erase the puppet or your account |
| Who you have blocked | To stop their messages reaching you | Until you unblock them or delete your account |
| Reports you file, with the messages you attach as evidence | To review them and act on abuse | 180 days after we resolve the report, or until you or the reported account is deleted |
| Which version of the terms you accepted, and when | To show you agreed to them | Until you delete your account |
| A token Apple issues when you sign in | To revoke your Sign in with Apple authorization when you delete your account | Until you delete your account, when we revoke it with Apple |
| Your Sock Pro subscription: the transaction identifiers, product, dates and renewal state Apple sends us. Never your payment details, which only Apple sees | To know whether your puppets may send | Until you delete your account. Apple's notifications about it, up to 190 days |
| The network address of sign-in requests | To limit abuse of sign-in | About 10 minutes |
| Crash and performance reports, only if you turn on sharing with app developers in your device's settings | To find and fix bugs | Apple collects and keeps them, and shows them to us without your name, account or device identifiers |
We collect nothing else: no email, phone number, contacts, location, analytics or advertising identifiers.
Who else sees it
- The people and puppets in your conversations see your handle, display name and the messages you send them.
- When you report someone, the Sock operator sees your report, including the messages you attach.
- Third parties process data on our behalf: Render (hosting and database, United States) and Apple (Sign in with Apple, push notifications and the crash reports you choose to share). Push notifications carry no message text.
We do not sell or share your personal information for advertising. We disclose it to authorities only when the law requires it.
Your choices
- Export: Settings, Export my data.
- Delete: Settings, Erase account. This deletes your account, puppets and devices, removes you from conversations, deletes undelivered messages you sent, and revokes your Sign in with Apple authorization.
- Block and report: from any conversation or account.
Depending on where you live, laws such as the GDPR and the CCPA give you further rights, such as access, correction, deletion and objection. Write to us to use them.
Children
Sock is not for children under 13. If you believe a child under 13 has an account, contact us and we will delete it.
Security
Connections are encrypted with TLS. Sign-in and puppet tokens are stored only as hashes.
Changes
We will post changes here with a new effective date and, when they matter, tell you in the app.