Privacy Policy.

The short version

The public Social Steward 1.0 release keeps all workspace and planning data on your iPhone. There is no account, developer server, analytics service, advertising, tracking, or third-party SDK. We cannot see what you enter because it never reaches us. The app contacts Apple only through StoreKit to load, buy, or restore the optional one-time Pro unlock.

In App Store terms, the privacy label for this app is Data Not Collected.

Who we are

These apps are made by UN.COMMON.ICON, an independent studio in Austin, Texas, USA, operated by Sasha Tollette. For anything in this policy, write to appsupport@uncommonicon.com.

Which apps this policy covers

This policy applies to Social Steward for iPhone, and the last section covers uncommonicon.com, this website. Other apps published under the UN.COMMON.ICON name will be added here as they are released, each with its own description of what it does and does not store.

Naya is a separate product with its own privacy policy and terms, published on its own site. This policy does not cover it.

What the app collects

Nothing. Social Steward has no backend, no user account, no login, no analytics SDK, no crash reporting service, no advertising identifier, and no fingerprinting. It does not ask for App Tracking Transparency permission, because it does not track you across apps or websites, and it never will.

We do not sell data, share data, or receive data about you from anyone else. There are no third-party recipients of your information, because there is no transmission of your information.

What the app stores on your device

Everything you put into Social Steward is saved in the app’s own private storage on your iPhone, inside the app container, protected by iOS file protection. That includes:

• Workspace and brand names, and the owner display name you choose.
• Your brand strategy: purpose, audiences, offers, voice, content pillars, and capacity budgets, including earlier versions you have revised.
• Platform profiles you type in, such as a platform name, username, or profile URL. These are text you entered. The app does not connect to those platforms.
• Content items: titles, copy, hooks, attributes, and notes.
• Campaigns: name, objective, dates, target outcomes, audience and offer descriptions, core message, channels, any budget figure you enter, and your results notes and retrospective.
• Metric snapshots you typed in or imported from your own CSV files.
• Business outcomes you record, such as sales, bookings, or signups, with the attribution confidence you assign.
• Community contacts: names, organisations, relationships, handles, notes, promises, follow-ups, and do-not-contact status. An email address is stored only when you choose to type one in. It is never required.
• Community interactions you log.
• Recommendations, reviews, and experiments the app generates locally from the above.
• Import records, so you can see what a CSV import did and roll it back.
• Onboarding progress and reminder preferences, kept in the app’s standard iOS preferences storage.

None of this is transmitted. It sits on your device until you delete it, or until you delete the app.

What the app never touches

• Your location.
• Your photo library, camera, microphone, or system address book.
• Health, fitness, or financial data.
• Passwords, tokens, or credentials for any service. There is nothing to sign in to.
• Advertising identifiers or any device identifier used for tracking.
• Browsing history, or your activity in other apps.

The app also does not write your content into logs. Community notes, contact details, imported content, strategy text, and metric values are never logged, and nothing is transmitted regardless.

Local notifications

When you set a follow-up date on a contact, iOS schedules a local reminder on your device. A reminder can contain text drawn from your own records, such as a contact’s name, so it makes sense when it arrives. Those notifications are handled entirely by iOS on your phone and are not sent through any server of ours.

You can clear a scheduled reminder by removing the follow-up date on that contact, by marking them do-not-contact, or by deleting the workspace. You can also turn all of the app’s notifications off in the iPhone’s own Settings → Notifications.

Exports and sharing

You can export your whole workspace as JSON, or export content, metrics, contacts, and outcomes as CSV, from Settings → Data → Privacy Center. An export is written to a temporary file with complete file protection and handed to the standard iOS share sheet. Tapping Done on the export screen removes that temporary file, and iOS clears the app’s temporary directory in any case.

Once you share an exported file, where it goes is up to you and to whatever app or service you send it to. We have no visibility into that and no control over it. If you email an export to yourself or drop it into a cloud drive, that copy is governed by the privacy policy of the service you chose.

Pro purchase and payments

Social Steward Pro is an optional one-time, non-consumable purchase sold through Apple’s In-App Purchase system. It does not renew. Apple processes the transaction. We never see, receive, or store your card number, billing address, or Apple Account credentials.

Apple provides us with aggregated sales and financial reports, which tell us how many purchases were made in a territory. They do not identify you. Apple’s handling of your purchase is covered by Apple’s Privacy Policy.

The app checks the verified Pro entitlement through Apple’s StoreKit framework on your device so it knows whether to remove the free creation limits. Purchase and restore traffic happens between your device and Apple.

What Apple collects on its own

Separately from us, Apple may collect information about app installs, crashes, and usage if you have opted in to sharing analytics with developers in your iOS settings. Anything Apple gives us from that is aggregated and anonymised, and we receive it whether or not we want it. This is Apple’s collection under Apple’s policies, not ours, and you can change it in Settings → Privacy & Security → Analytics & Improvements on your iPhone.

When you write to us

The app sends us no workspace data, but email is different. If you write to appsupport@uncommonicon.com we receive your email address, whatever you wrote, and anything you attached. We use it to answer you and to keep a record of the problem, which in GDPR terms is our legitimate interest in running a support channel, or the performance of our agreement with you where it concerns a purchase.

Support threads sit in our mail account. We keep them for up to 24 months and then delete them, and you can ask us to delete yours sooner. This is the only personal information about you that we ever hold, and it exists only because you chose to send it.

Please do not email us an export of your workspace unless we ask for it. If you do, strip out anything private first. We would rather not hold your data at all.

Keeping and deleting your data

Because your data never leaves your device, we hold nothing to retain and nothing to delete on your behalf. You are in control of all of it:

• Delete selected records in Settings → Data → Privacy Center → Delete selected records.
• Delete a whole workspace in Settings → Data → Privacy Center. This is permanent and cannot be undone, so export first if you want a copy.
• Delete a single contact from that contact’s own screen.
• Delete everything by deleting the app from your iPhone. That removes the app’s entire container, including all stored records and preferences.

There is more detail, including what happens to the Pro purchase when you delete the app, on the account and data deletion page.

Your rights

Privacy laws including the GDPR in Europe, the UK GDPR, and the CCPA and CPRA in California give you rights over personal information a company holds about you: access, correction, deletion, portability, and the right to object or opt out of sale or sharing.

The app sends us nothing, so we hold no copy of your workspace and there is nothing in it for us to hand over, correct, or erase. You exercise the practical equivalent of every one of those rights directly inside the app: access and portability through the JSON and CSV exports, correction by editing a record, erasure through the deletion controls above.

The two things we do hold are described above: support correspondence you sent us by email, and anything you submitted through a form on this website. For those, write to us and we will hand over a copy, correct it, or delete it. We do not sell or share personal information, and we never have.

If you believe this is wrong, or you want to raise a complaint, write to appsupport@uncommonicon.com. In the European Economic Area or the UK you also have the right to complain to your local data protection authority.

Children

Social Steward is a tool for people running a social media practice and is not directed at children. It is not designed for or marketed to anyone under 13, and we do not knowingly collect information from children. Since the app collects nothing from anyone, there is no children’s data for us to hold.

Security

Your data is protected by the security of your own device: the iOS sandbox, iOS file protection, and whatever passcode, Face ID, or Touch ID you have set. Exports are written with complete file protection. Keeping your iPhone updated and locked is the single most useful thing you can do to protect what is in this app.

We cannot reset, recover, or restore your data, because we do not have a copy of it. If you lose your device without an iPhone backup, the data in the app is gone. Export regularly if that matters to you.

About future versions

Optional account sign-in and read-only Instagram sync are not compiled into the public App Store 1.0 release described above. They exist only in internal development and staging builds used by authorised testers.

When account mode is enabled in those test builds, we collect data linked to the tester for app functionality only: their Apple sign-in identifier and optional shared email; Instagram display name, profile identifiers, media captions and links, profile and post insight values; and deterministic reports derived from that data. Tokens are encrypted. There is no tracking, advertising, data sale, or remote generative AI. Disconnecting immediately deletes the Instagram access token and stops future sync; imported history remains until the tester deletes their Social Steward account or Meta sends a deletion request.

If a future release does enable any feature that moves data off your device, that feature will be optional, this policy will be rewritten to describe exactly what is stored and where, and the App Store privacy label will be updated before that version ships. We will not quietly start collecting data under a policy that says we do not.

This website

Everything above is about the app. This website is a different thing, and unlike the app it does involve three outside services. None of them are advertising networks, and none of them build a profile of you.

• Vercel Web Analytics · counts page views without cookies and without following you between sites. Run by Vercel Inc. in the United States, who also host this site. Our legitimate interest in knowing which pages get read. Aggregated, and we never see an individual visitor.
• Google Fonts · four typefaces load from Google LLC in the United States, which means Google receives your IP address when a page opens. This one is a plain dependency, not a choice we make about you, and we are working on self-hosting the files to remove it.
• Web3Forms · relays the two forms on our homepage. The Get in Touch form sends your name, email address, the interest you picked, and your message. The Work Together form sends your name, email address, project type, and whatever you fill in of organisation, timeline, budget, referral, and description. Web3Forms passes it to hello@uncommonicon.com and does not keep a copy for us. You are giving us this to start a conversation, so the basis is your consent, or taking steps at your request before entering a contract.

All three involve a transfer to the United States, made on the basis of the EU to US Data Privacy Framework or standard contractual clauses. Enquiries that arrive by form live in the hello@uncommonicon.com inbox on the same 24 month footing as support email, and you can ask us to delete yours at any time.

This site sets no advertising cookies and shows no consent banner, because there is nothing here to consent to beyond the three services named above.

Changes to this policy

If this policy changes, the version number and dates at the top of the page change with it, and a summary is added to the history below. Material changes will be described in the release notes of the version they apply to.

Contact

UN.COMMON.ICON
4211 Todd Ln, Suite A
Austin, TX 78744
United States
appsupport@uncommonicon.com