Privacy policy
No ads, no tracking, no selling data, and no Compose account.
This covers the Compose iPhone app and the services at composesocial.app. "We" means Compose Social.
On your device
- Your sign-ins, kept in the iPhone keychain on that device only.
- Your posts, drafts, history and attached media.
- The camera takes photos for posts and scans the code that links a device. Compose saves to your library only when you ask.
Posting
Posts go directly from your device to Bluesky, Mastodon or Threads, whose own privacy policies then apply. Link previews are fetched by your device. If you create a Mastodon account in the app, what you enter goes straight to that server.
Through our server
These pass through auth.composesocial.app. We keep none of them.
- Threads sign-in: our server finishes the step that needs a secret and hands the result to your device.
- Bluesky sign-in: our server passes the sign-in back to the app. It never sees your password.
- Threads media: held until Threads collects it, then deleted. Leftovers are removed within a day.
- GIF search: your search terms go to GIPHY.
Sync
Sync is off until you link a second device. Your posts, drafts, accounts and media are then encrypted on your device, with a key only your devices hold. The server can't read them.
- It sees a random identifier, how much is stored, and when it changes.
- It uses your IP address in memory to limit request rates, and doesn't store it.
- Synced media is deleted 90 days after it was last used.
- Accounts → Linked devices → Unlink all devices erases it all.
Usage statistics
Compose sends counts to TelemetryDeck: which networks a post went to, its length, whether it had photos, and whether it was sent. Each count carries a random install ID and basic device details such as iOS version and language. Never your text, handles, accounts or links.
Turn it off in Settings → Compose → Share Usage Statistics. That also deletes the install ID.
Deleting your data
Remove an account in Accounts to delete its sign-in. Unlink all devices to erase synced data. Deleting the app removes everything else on your device. Published posts stay on each network until you delete them there.
Children
Compose isn't directed at children under 13, and we don't knowingly collect information from them.
Changes and contact
Changes will be posted here with a new date. Questions: support@composesocial.app.