Privacy policy and community rules

The short version

Share keeps your account, verified phone number, shares, follows, Library, and the information needed to deliver messages and notifications. We do not sell your information or use advertising trackers.

Direct and Room text messages are end-to-end encrypted. Optional written feedback on a feed post goes privately to the poster in an encrypted direct message, only when you choose Send reply. Your feedback is not a public comment.

Personal saves and texted links are private to you. Rooms are private to their members. Posts shared with everyone can also have public preview links. Private account hides your follower and following lists; it does not make your public posts private.

Contacts, text capture, notifications, and Library reminders are optional. You can change your choices in Settings or your phone’s permission settings, and delete your account in Share.

Account, profile, and activity

We store your email address, username, optional display name and profile photo, and verified mobile number. Passwords are handled by our sign-in provider in hashed form, not as plain text. Your email address and verified phone number are not shown on your profile or in people search.

We store links you share, their titles, creators, artwork, summaries and topics, and the sentence you add. We also keep follows, likes, saves, personal folders, Room names and memberships, blocks, reports, recommendations, and notification preferences.

Opening a recommendation sent directly to you records an opening and can notify its sender. If you choose a reaction, that sender sees it too. Your own opening status helps mark what is new in your Library and Rooms; opening a Room recommendation is not a broadcast to its members. An opening does not prove that you finished listening or watching.

After you play a public feed share, Share may offer an optional private reply to its poster. The reply card displays the public post’s artwork and details above your private words. Sending the reply stores its encrypted message, its related post, and notification metadata connecting it to the conversation. The bell notification contains no written feedback. Opening the DM marks its linked notification as seen. Clearing Activity does not delete the underlying messages or saves.

Private messages and photos

If you choose Share on a recommendation, Share starts a fresh draft with the media link and public card details. You choose its new audience and write your own caption. The original private message, Room caption, sender identity, and feedback are not automatically forwarded.

Direct and Room text messages are encrypted on participants’ devices before sending. Servers store ciphertext, public encryption keys, conversation membership, sender information, timestamps, and delivery or read information.

The private keys needed to read messages stay on participants’ devices. Share cannot read the encrypted message bodies.

A message consisting only of a supported music, podcast, or video link may display a preview card. Your device looks up that media link with its provider for the title and artwork; it does not send the rest of your conversation. The original message remains encrypted and does not become a public post or a recommendation receipt.

Photos you choose to send in a direct message are encrypted on your phone before upload. The photo’s decryption key is sent inside the encrypted message. Profile photos and recommendation artwork are not encrypted private-message attachments.

Feed feedback follows the same direct-message privacy and message-request rules. It is visible to you and the poster in that conversation, not to the feed, other viewers, or a Room. Nothing is sent merely because you return to Share or leave a draft.

If you report a message, you explicitly send the readable text of that reported message to us for review. This does not share the rest of the conversation. Deleting a conversation for yourself hides it from your list; other participants retain their access. Losing your device or reinstalling the app can make old encrypted messages unreadable if the private key is lost.

Contacts and finding friends

With your permission, Share reads contacts on your phone to label texted-link folders and notifications with familiar names. The address book and names used in that local lookup are not uploaded.

Find friends converts contact phone numbers into hashed codes on your phone and compares the codes with accounts that verified a phone number and opted into being findable. Contact-name search matches the typed name locally, then sends only the hashed numbers of matching contacts to find eligible Share accounts. Contact names and raw address-book numbers are not sent in that lookup. Your typed search term is also used to search public usernames and posts.

For someone who already sent you a direct recommendation in an accepted Share conversation, an exact verified phone match can group captured text links in that person’s existing Library folder. Both accounts must have verified numbers. This private grouping sends only hashed candidate numbers and does not make someone findable to other users. If a captured sender label is a name, it must match one local contact with Contacts permission; ambiguous or unmatched labels stay in separate folders. Text saves keep their original sender label and reply channel.

When you thank someone by text, you can include a small image of their folder. Share creates that image temporarily on your device from that sender’s folder name, artwork and saved-link counts. You can edit the text or omit the image before opening your phone’s Messages composer. Nothing is sent until you choose Send in Messages; the image is not uploaded to Share.

Hashes support matching; they are not encryption or a guarantee that a phone number could never be inferred. Being findable is optional and controlled in Settings → Mobile number. Revoking Contacts access stops local name matching. Public username search works without Contacts access.

Save links from texts

Text capture is optional and starts from the Library invitation or Settings → Save links from texts, not during signup. Your private capture link lets the setup save recommendations into your account. Keep it private: someone who has it could add links to your Library. The server stores a hash of its key and its last-use information, not the plain key.

On iPhone, the Apple Shortcuts automation you install sends links from a matching incoming text and the sender’s name or number as supplied by Shortcuts. Share saves the first supported media link and discards unsupported links. The remaining message text is not sent to Share.

On Android, you explicitly allow notification access. The listener examines supported message notifications on your phone for media links and sends the captured link and the sender label from the notification. Other notifications and unrelated message text are not uploaded. Notification access for text capture is separate from permission to send push notifications.

Captured links, their metadata, the sender label supplied by the automation, and saved times are stored privately in your Library. A sender label supplied by Shortcuts or Android can itself be a name; this is separate from Share’s local-only address-book lookup. Captured-link notifications may show a name or number on your device. You can turn capture off or rotate its private link in setup, and remove the Shortcuts automation or Android notification access.

Playback and other services

Your music and podcast choices are saved on your device. Play opens matched songs and albums directly in your chosen music app; when a match is unavailable, it opens that app’s search using the public title and artist. Without a choice it uses the original service. Spotify podcasts use a search for the public episode title and show when no exact link is available. Other unmatched podcasts let you choose the show in your preferred podcast app or the original service. If your chosen music app cannot be opened, Share asks before using another service. Some videos, Bandcamp or SoundCloud links, and podcast audio play inside Share using the original provider or audio host.

Matching and previews send the media link, title, creator, show name, or public identifier to relevant catalogs and providers. Current matching uses Apple’s public catalogs, YouTube services, Spotify where configured, Pocket Casts, and Overcast as appropriate. Share no longer uses Odesli/song.link to resolve music.

Supabase handles sign-in, the database, storage, and server functions. Twilio delivers phone-verification text messages and receives the number and verification information needed for that purpose; it is not used to read your texts or deliver app push notifications.

Anthropic supplies automatic summaries and topics from a media link and its public details, rather than your private messages or address book. Share uses YouTube API Services to check duration and find matches; those services can receive public video identifiers and music-search details. By using these YouTube features, you agree to the YouTube Terms of Service. Google’s Privacy Policy describes how Google handles this information. Links to both policies are below.

Expo hosts Share’s public website and routes push notifications. Apple and, for configured Android builds, Google/Firebase deliver notifications to devices. Delivery uses a device token and notification metadata, not encrypted DM text or the written content of private feedback.

Spotify, Apple Music, Apple Podcasts, YouTube, YouTube Music, SoundCloud, Bandcamp, Rumble, Pocket Casts, Overcast, and podcast hosts may receive playback requests. Embedded players and audio streams connect directly to their provider, which can see your IP address and apply its own cookies, account settings, and privacy policy. Embedded providers may also show their own advertising. A video remaining inside Share does not prevent its provider from receiving the playback request.

Share does not read your listening history in other apps. External services control availability, subscriptions, and whether playback starts automatically. Share records the opening action, not proof of a completed listen.

Playlists and shared folder links

Generating a playlist sends its name and public song metadata to the chosen service. Person, text-sender, Room and custom folder playlists use the neutral name Share: Playlist so their private labels are not included. Other playlist names can be sent. Your private notes and address book are not included. Spotify folder requests use a opaque account-scoped identifier derived with a private random salt rather than the local folder key or sender number.

Spotify playlists are created on Share’s Spotify account and opened in yours. Anyone with a playlist link can access its name and songs. Creating or updating one requires your acknowledgement. Share stores the destination association and request status to prevent duplicate writes and support updates.

Apple Music playlist creation and updates use music-library permission and an active subscription to edit your own library. Soundiiz, or TuneMyMusic when explicitly selected, receives playlist names and song titles, artists and available album names for transfers. Connecting those services and completing a transfer are your choices; their subscriptions and privacy policies apply. Opening a transfer page does not prove a playlist was saved.

Sharing a folder creates a separate copy of its approved title and public media details. Anyone with its link can view that copy for 30 days; you can disable a link sooner in Settings → Shared links to prevent further viewing and saving. Private captions, messages, contact names and listening status are excluded. Copies recipients already saved remain in their libraries. Deleting the original folder does not withdraw a shared copy. Share account deletion removes its shared-folder links, but recipients may retain saved copies.

Deleting a Share account or folder does not automatically delete playlists or transferred copies in external services. Those copies can remain accessible under the service’s rules, including Spotify links. Manage playlists in the destination service; contact Share about playlists on Share’s Spotify account.

Notifications and device storage

If enabled, we store a push token and device platform, notification preferences, delivery records, and read status. These support Activity, message badges, recommendations, text-save alerts, and optional Library reminders. Push notifications do not contain DM text or written feedback. A notification can still reveal a username, sender label, or media type on a lock screen, depending on your phone settings.

Library reminders are off unless you opt in. Settings → Notifications controls categories; your phone controls permission and lock-screen previews. Android text-capture notification access is managed separately.

Device storage keeps preferences such as appearance, feed order, preferred players, folder order and nicknames, recent recipients, setup progress, and dismissed instructions. Reinstalling or clearing device storage may reset these local choices. Feedback reminders you postpone or hide and your cleared Activity cutoff are also stored privately with your account so they can be restored after reinstalling; temporary offline changes synchronize when you reconnect.

Optional Face ID or biometric sign-in keeps login credentials in device secure storage behind biometric authentication. Share does not receive face or fingerprint data. Private message keys are also kept on the device. Share does not request location or microphone access or track you across other apps. We keep aggregate feature counts without the content of your messages.

Who can see what

People signed in to Share can see posts shared with everyone and their poster’s username, display name, and photo, subject to blocks. Anyone with a public post-preview link can see that post’s public details. Private Room posts have no public preview. Room content is accessible to members and intentional personal saves allowed by the app’s access rules.

Personal folders, bookmarks, texted links, and their sender labels are private to you. Follower and following lists are visible to signed-in people unless you turn on Private account; their counts remain visible. Likes and follows can notify the person concerned.

The sender of a direct recommendation can see its opening and your optional reaction. Written feed feedback is shared only through your encrypted DM with the poster. Conversation membership, message timing, and feedback-notification links remain server metadata even though message bodies are encrypted.

Deleting your account and data

We keep account information for as long as it is needed to run your account. In You → Settings → Delete account, you can permanently delete your profile and account data. This cannot be undone.

If you cannot open the app, email shareappsupport@gmail.com from the address on your account, with the subject “Delete my Share account” and your username. We will delete the account within 30 days and reply to confirm.

Account deletion removes your account, profile, posts, likes, saves, captured links and capture key, reactions, personal folders, follows, blocks, messages, memberships, notification preferences, and reports you filed. Other people may still have copies of material you shared. Rooms you created can remain for other members without you.

Reports made by other people may be retained with your account removed while we finish reviewing them. Routine backups can retain a copy until replaced. You can delete individual posts and saves without deleting your account. Revoke your automation’s access when you stop using text capture.

Community rules

By using Share you agree to these rules. There is no tolerance for objectionable content or abusive users: no harassment, threats, bullying, hate, sexual content, sexualization of minors, spam, scams, or impersonation. Share only links you are allowed to share from supported services.

Use Report on a post, profile, or message and Block to stop contact from another person. We review reports within 24 hours and remove content or accounts that break these rules.

Share is for people 13 and older. We do not knowingly collect information from children under 13. Contact us if you believe a child under 13 has an account so we can remove it.

Changes and contact

When this policy changes meaningfully, we update its date and let you know in the app. This page is available in Settings and before signup.

Questions, requests, or concerns: shareappsupport@gmail.com.

Provider policies

YouTube Terms of Service

Google Privacy Policy