Privacy Policy

1. Information We Process

• Random app identifier. When the app starts it signs in anonymously with Firebase Authentication, which creates a random ID. We do not ask for your name, email or phone number.
• Profiles you search. The usernames you search are sent to our server so it can fetch the public content of those profiles. For each identifier we keep a daily usage record: how many requests were made and which profiles were opened with free searches.
• Subscription status. Purchases are processed by Apple and managed through RevenueCat. Our server stores whether your random identifier has an active Premium subscription.
• Usage analytics. Firebase Analytics collects app usage events (for example app opens, screens viewed, purchases started, and your answers to the onboarding survey) together with device and app information such as the app version and an app instance ID.
• App integrity. Firebase App Check uses Apple's App Attest or DeviceCheck to confirm requests come from a genuine copy of the app.

2. Information That Stays on Your Device

Your favorites, recent searches, which stories you have already seen and your daily free search counter are stored only on your device. Photos and videos you save are written to your photo library only after you grant permission.

3. Public Instagram Content

The stories, highlights, posts, reels and profile details shown in the app are public content retrieved through a third-party data provider. To reduce repeated requests, our server keeps a temporary copy for between 10 minutes and 1 hour. We never access private accounts.

4. How We Use Information

• Show the public profiles you search
• Apply the daily free search allowance and unlock Premium features
• Prevent abuse and keep the service available
• Understand how the app is used so we can improve it

We do not use your information for advertising and we do not track you across other companies' apps or websites.

5. Service Providers

• Google Firebase (Authentication, Cloud Functions, Firestore, Analytics, App Check)
• RevenueCat (subscription management)
• Apple (App Store payments, App Attest and DeviceCheck)
• A third-party Instagram public data provider accessed through RapidAPI
• Genderize.io, which receives first names only, to estimate gender in the recent follows feature

6. Data Retention

Daily usage records are deleted automatically after 30 days. Cached public content expires within an hour. Subscription status is kept while you use the app. Analytics data is kept according to Firebase Analytics retention settings. Data stored on your device is removed when you delete the app.

7. Your Rights

Depending on where you live, you may have the right to access, correct or delete your data and to object to its processing. Because the app has no accounts, include the approximate date you used the app when you contact us so we can locate the records.

8. Age Requirement

InstaNosy is intended for users aged 18 and over. We do not knowingly process information about children.

9. Changes

We will update this page when the way the app processes information changes, and change the date above.

10. Contact

For questions about this Privacy Policy, contact aldebaran.apps@gmail.com.