Privacy Policy

1Data controller

The data controller is , . For any question about your data: privacy@spygram.app.

2Data we collect

• Account: your email and password, managed via Firebase Authentication (Google). The password is encrypted and never visible to us.
• Device identifier: a unique ID (UUID) generated locally, used for the referral program.
• Subscription: your Apple transaction ID, used to verify your subscription with Apple.
• Instagram session: you log into your own Instagram account in a WebView. We don't store your Instagram password; a session identifier remains on your device to keep you signed in.
• Tracked activity: the public profiles you choose to track and their public following lists. This history is stored locally on your device.
• Diagnostics & usage: technical crash and performance data via Microsoft App Center, to improve stability.

3Purposes

We use this data to provide and maintain the tracking service, manage your account and subscription, run the referral program, send notifications (if you allow them), and diagnose technical issues.

4Legal basis (GDPR)

• Performance of contract: account, subscription, tracking features.
• Consent: push notifications (revocable anytime in iOS settings).
• Legitimate interest: security, fraud prevention and technical diagnostics.

5Sharing & processors

We do not sell your data. We rely on processors acting on our behalf: Apple (payments and subscriptions), Google Firebase (authentication, database), Microsoft App Center (diagnostics), and our API host. Each is bound by its own confidentiality obligations.

6Instagram & public data

Spygram only reads information that is already public on Instagram (following lists of public accounts, or private accounts you already follow). Tracking incoming followers is not possible. Your use must comply with Instagram's terms and respect others' privacy.

7Retention

Account and subscription data are kept while your account is active. Activity history is stored on your device and removed when you delete a tracked profile or uninstall the app. When you delete your account, we erase the associated data within a reasonable timeframe.

8Your rights

Under the GDPR, you have rights of access, rectification, erasure, objection, restriction and portability. You can delete your account directly in the app via Settings → Delete your Account, or write to privacy@spygram.app. You may also lodge a complaint with your data protection authority.

9Security

We implement reasonable technical and organizational measures to protect your data. However, no transmission over the Internet is fully secure.

10Minors

Spygram is intended for people aged 17+ and is not directed at children.

11Lawful use

12Changes

We may update this policy. The "last updated" date at the top indicates the current version.

13Contact

Questions? privacy@spygram.app