Privacy Policy

Last Updated: 21st of July 2025

Summary: 'your feed' does not collect, store, or access your Instagram account credentials, Instagram activity, or any content you view on Instagram. We collect only basic, anonymized analytics about how you use the App (via Mixpanel) and subscription/purchase information (via RevenueCat). That's it. TABLE OF CONTENTS Who We Are What Data We Collect What Data We Do Not Collect How We Use Your Data Legal Basis for Processing (GDPR) Third-Party Service Providers International Data Transfers Data Retention Your Rights Under GDPR Children's Privacy Security Changes to This Policy Contact Us and Data Controller Information This Privacy Policy describes how Octo Solutions UG ("we," "us," or "our") collects, uses, and protects information in connection with your use of the your feed mobile application (the "App") and related services (collectively, the "Services"). This policy applies to all users of the App. As a company registered in Germany, we are subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable German data protection law. We take your privacy seriously and are committed to processing your data lawfully, fairly, and transparently. 1. WHO WE ARE The data controller for personal data processed in connection with the Services is: Octo Solutions UG Kaiser Wilhelm Ring 24 Düsseldorf, NRW, 40545 Germany Email: dominic@octo.computer If you have any questions about this Privacy Policy or our data practices, you can reach us at the contact details above. 2. WHAT DATA WE COLLECT We collect a limited set of data necessary to operate and improve the App. We collect no data whatsoever in relation to your Instagram usage. The data we do collect falls into two categories: a) Analytics Data (via Mixpanel) We use Mixpanel to collect basic, anonymized analytics about how users interact with the App. This helps us understand which features are used, identify bugs, and improve the overall experience. The analytics data we collect may include: Device type and model Operating system version App version Session duration and frequency of use In-app feature interactions (e.g., which filters or settings are enabled) Crash reports and error logs A pseudonymous device identifier assigned by Mixpanel General geographic region (country-level only, derived from IP address; raw IP addresses are not stored) This data is collected in a pseudonymous or anonymized form where possible. We do not use this data to identify you personally. b) Subscription and Purchase Data (via RevenueCat) When you subscribe to your feed's Premium Features, subscription management is handled by RevenueCat, Inc. The data associated with this process may include: A pseudonymous RevenueCat user identifier Your subscription status and entitlements (e.g., active, expired, trial) Purchase and renewal timestamps The type of subscription plan purchased Anonymized Apple App Store transaction identifiers We do not receive your full name, payment card details, or Apple ID email address as part of this process. Payment processing is handled entirely by Apple. 3. WHAT DATA WE DO NOT COLLECT We want to be explicit about what we do not collect. your feed operates a WebKit-based in-app browser that loads Instagram's website (instagram.com). Your Instagram session takes place entirely within that local browser environment on your device. We have no access to any of the following, and we do not collect, store, transmit, or process any of it: Your Instagram username, password, or any login credentials Your Instagram account details, profile information, or account identifiers Your Instagram browsing history, session data, or cookies Posts, stories, messages, or any content you view, like, comment on, or create on Instagram Your Instagram followers, following list, or social graph Any data transmitted between your device and Instagram's servers All Instagram-related data remains local to your device and is governed entirely by Instagram's own privacy policy (available at help.instagram.com). 4. HOW WE USE YOUR DATA Data Category Purpose Analytics data (Mixpanel) To understand App usage patterns, identify technical issues, improve existing features, and develop new features. This data is not used for targeted advertising. Subscription data (RevenueCat) To verify your subscription status, unlock Premium Features, process renewals, and handle subscription management. Contact information (if you contact us) To respond to your inquiries, support requests, or feedback. We do not sell your personal data to third parties. We do not use your data for targeted advertising or profiling for marketing purposes. 5. LEGAL BASIS FOR PROCESSING (GDPR) Under the GDPR, we rely on the following legal bases to process personal data: Performance of a contract (Article 6(1)(b) GDPR): Processing your subscription and purchase data is necessary to perform our contract with you (i.e., to deliver your subscription entitlements and maintain your access to Premium Features). Legitimate interests (Article 6(1)(f) GDPR): We process anonymized analytics data to improve the App and our Services. Our legitimate interest in improving the App is balanced against your privacy interests; because this data is pseudonymous/anonymized and does not relate to your Instagram usage, we consider this processing to have minimal privacy impact. Legal obligation (Article 6(1)(c) GDPR): We may process personal data as required by applicable law (e.g., for tax, accounting, or compliance purposes). 6. THIRD-PARTY SERVICE PROVIDERS We share limited data with the following third-party processors who act on our behalf: Mixpanel, Inc. Role: Analytics processor. Data shared: Pseudonymized device/usage analytics as described in Section 2a. Location: United States (see Section 7 on international transfers). Privacy policy: mixpanel.com/legal/privacy-policy RevenueCat, Inc. Role: Subscription management processor. Data shared: Pseudonymized subscription and purchase data as described in Section 2b. Location: United States (see Section 7 on international transfers). Privacy policy: revenuecat.com/privacy Apple Inc. Role: App Store distribution and payment processing. Data shared: Purchase transaction data handled by Apple independently under its own privacy policy. Privacy policy: apple.com/legal/privacy We do not share your personal data with any other third parties, except where required by law or in connection with a corporate transaction (such as a merger or acquisition), in which case we will notify you as required by applicable law. 7. INTERNATIONAL DATA TRANSFERS Octo Solutions UG is based in Germany, and your data is primarily processed within the European Economic Area (EEA). However, our third-party service providers Mixpanel and RevenueCat are based in the United States, which means some of your data may be transferred to and processed in the United States, a country that may not provide an equivalent level of data protection to the EEA. Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with GDPR requirements, including Standard Contractual Clauses (SCCs) approved by the European Commission or other applicable transfer mechanisms. You may request a copy of the relevant safeguards by contacting us at dominic@octo.computer. 8. DATA RETENTION We retain personal data only for as long as necessary to fulfill the purposes described in this policy or as required by applicable law: Analytics data (Mixpanel): Retained for up to 24 months from collection, after which it is deleted or further anonymized in accordance with Mixpanel's data retention policies. Subscription data (RevenueCat): Retained for the duration of your subscription and for a reasonable period thereafter for accounting and legal purposes (typically up to 7 years, as required under German commercial law). Support correspondence: Retained for up to 3 years from the date of last contact, unless a longer retention period is required by law. 9. YOUR RIGHTS UNDER GDPR If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data: Right of access (Article 15 GDPR): You have the right to request a copy of the personal data we hold about you. Right to rectification (Article 16 GDPR): You have the right to request that we correct inaccurate or incomplete personal data. Right to erasure / "right to be forgotten" (Article 17 GDPR): You have the right to request that we delete your personal data, subject to certain exceptions (e.g., where we are required to retain data by law). Right to restriction of processing (Article 18 GDPR): You have the right to request that we restrict the processing of your personal data in certain circumstances. Right to data portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller. Right to object (Article 21 GDPR): You have the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms. Right to withdraw consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal. Right to lodge a complaint: You have the right to lodge a complaint with your local data protection supervisory authority. In Germany, this is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW). To exercise any of these rights, please contact us at dominic@octo.computer. We will respond to your request within 30 days. 10. CHILDREN'S PRIVACY The Services are not specifically directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have inadvertently collected personal data from a child under the age of 13, we will take steps to delete that information as soon as possible. If you believe we may have collected data from a child under 13, please contact us at dominic@octo.computer. 11. SECURITY We implement appropriate technical and organizational measures to protect the personal data we hold against unauthorized access, loss, destruction, or alteration. These measures include access controls, encryption in transit (HTTPS), and contractual safeguards with our third-party processors. However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee its absolute security. As noted above, your Instagram session data is not transmitted to us and remains on your device. The security of your Instagram account is governed by Instagram's own security practices and your own account settings. 12. CHANGES TO THIS POLICY We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, notify you through the App or by other means. We encourage you to review this policy periodically. Your continued use of the Services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. 13. CONTACT US AND DATA CONTROLLER INFORMATION If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Octo Solutions UG (haftungsbeschränkt) Kaiser Wilhelm Ring 24 Düsseldorf, NRW, 40545 Germany Email: dominic@octo.computer Support: https://octo.computer/support