Information we collect
Account and profile information
When you create or update an account, we may collect your email address, username, password authentication data, profile photo, biography, market region, height, weight, body build, account privacy setting, and verification status. Passwords are handled by our authentication provider and are not stored by Isomer in readable form.
Content and activity
We store the posts, photos, product and retailer details, source links, fit measurements, quality ratings, reviews, comments, likes, shares, follows, follow requests, saved posts, collections, reports, and blocks that you create or use. A post may retain a snapshot of the body and fit information supplied when it was published.
Device and usage information
We collect device push-notification tokens when notifications are enabled. We also use PostHog to collect app lifecycle events, feature interactions, account identifiers, email address, market region, and diagnostic usage information. Session replay is enabled and may capture representations of screens and interactions so we can understand and improve the app.
Website analytics choices
On the website, PostHog analytics runs only after you choose Accept optional cookies. It measures page visits, referring websites, browser and device information, performance, feature actions, and website errors. PostHog may derive approximate location from the request IP. If you sign in, website events may be associated with your account identifier, but we do not add your email, username, or body measurements as analytics profile properties.
Website session replay is disabled. Website analytics does not collect form contents, comments, free-text searches, passwords, body measurements, or URL query strings. Dynamic profile and post URLs are grouped rather than sent with their names or identifiers. Error messages are redacted. You can decline or withdraw permission using Cookie preferences in the site footer; withdrawing stops collection and clears local PostHog tracking storage. Your choice is saved in your browser, and Do Not Track is respected.
Camera, photos, and notifications
Isomer asks for camera or photo-library access only when you choose to capture or select images for a post. It asks for permission to add to your photo library when you choose to save images to Photos. You can change these permissions in iOS Settings.
If you allow push notifications, we use Apple Push Notification service and a device token to deliver activity alerts. Notification preferences can be changed in Isomer or iOS Settings.
How we use information
- Provide authentication, profiles, posts, search, fit comparisons, social features, collections, and notifications.
- Respect private-account, follower, blocking, and reporting controls.
- Operate, secure, troubleshoot, analyze, and improve Isomer.
- Prevent misuse and enforce our Terms and community standards.
- Comply with legal obligations and protect users, Isomer, and others.
When information is visible or shared
Profile and post visibility depends on your privacy settings. Public-account content may be visible to other users and website visitors. Private-account content is limited to you and approved followers. Comments, likes, follows, and similar activity may be visible in the context of the service. Blocking and reporting affect visibility but do not by themselves delete the underlying information.
We use service providers to operate Isomer:
- Supabase provides authentication, database hosting, file storage, and server functions.
- PostHog provides product analytics, website analytics, error tracking, and iOS session replay. Website session replay is disabled.
- Apple provides push-notification delivery through APNs and controls iOS permissions.
We may also disclose information when required by law, to address fraud or safety concerns, or as part of a business transfer. We do not describe external product links as purchases through Isomer; retailers process their own visits and transactions under their policies.
Retention and deletion
We retain account information and content while your account is active and as needed to provide the service. Operational records may remain for as long as reasonably necessary for security, legal, dispute-resolution, or backup purposes.
You can permanently delete your account in Settings → Account → Delete. The deletion process removes your authentication account, profile, posts, social records linked by the service, profile and post images, and temporary upload files. This cannot remove copies previously shared or saved by others, or information a service provider must retain for legal or security reasons.
Your choices
You can update profile information and market region, make your account private, manage notification permissions, block users, report content, and delete your account. Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of personal information, and to object to certain processing.
Security and international processing
We use access controls, row-level database policies, and authenticated storage rules designed to protect information. No online service can guarantee absolute security. Our providers may process information in countries other than your own, where privacy laws may differ.
Children
Isomer is not directed to children who are too young to consent to online services under the laws where they live. If you believe a child has provided personal information without valid consent, use the Help Centre linked in the app so the matter can be reviewed.
Changes and contact
We may update this policy as Isomer changes. We will revise the effective date and provide additional notice when required. For privacy questions or requests, use the Isomer Help Centre.