Privacy Policy - Mobile App

1. Introduction

MediaVikings (CVR: 43433547) ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we handle information when you use our mobile application. As an EU-based company, we act as the data controller and process personal data in accordance with the General Data Protection Regulation (GDPR).

2. Our Privacy-First Approach

Your own Instagram data stays on your device. When you run a manual check by uploading your Instagram data export, all analysis happens locally on your device — that file and its contents never leave your device, and we cannot see or access them.

There is no account, login, email or password in the app. Separately, when you use auto-checks and watchlists, the app runs the checks for you and stores the public follower and following lists of the profiles you track — so it can compare each check against the previous one and tell you what changed. This tracking data is stored securely with our provider Supabase, along with a device token so we can send you notifications. It is public data about the profiles you track — not your own uploaded data file.

3. Information We Collect

Information We DO NOT Collect:

• Your Instagram username, password, or login credentials
• Your own uploaded Instagram data export or its contents (this stays on your device)
• Personal messages, photos, or posts from Instagram
• Precise location data
• Advertising profiles or data sold to advertisers
• Contact lists

Information We Collect to Run the App:

• Auto-check & watchlist data — for the profiles you choose to track, the app stores their public follower and following lists in Supabase, so it can compare each automatic check against the previous one and detect changes
• A device push token — so we can send you notifications about watchlist changes and auto-checks (no account or email needed)
• Privacy-friendly usage analytics (via Mixpanel and Datafast) — largely anonymized and aggregated, used to improve the app, never to build advertising profiles
• Anonymous crash reports and basic device information (OS/app version) — for debugging and compatibility
• Purchase receipts (through the App Store, for subscription management)
• Support communications (when you contact us directly)

4. How We Process Your Data

Manual Check — On Your Device:

• You manually upload your Instagram data export to the App
• All analysis, calculations, and insights happen on your device
• Your data file is stored locally using secure iOS/Android storage
• Your uploaded data file is never transmitted to us, Supabase, or any third party
• We cannot see, access, or recover your uploaded data file

Auto-Check & Watchlists — Via Supabase:

• For profiles you track, the app stores their public follower and following lists in Supabase
• Each automatic check is compared against the previous one to detect changes
• A device token is stored so we can deliver your notifications
• This is public data about the profiles you track — not your uploaded data file, and there is no account involved
• Usage analytics (Mixpanel, Datafast) is processed in aggregated, privacy-friendly form

Legal Basis for Processing (GDPR):

• Contract — to provide the app's features, such as watchlists and auto-check notifications you request
• Consent — for optional analytics; you can withdraw it at any time
• Legitimate interests — to keep the app secure and improve it
• Legal obligation — where the law requires us to retain or disclose data

5. In-App Purchases and Subscriptions

Purchase Data:

• Processed entirely through Apple App Store or Google Play Store
• We receive anonymous purchase confirmations for subscription management
• No payment card or financial information is shared with us
• Apple/Google handle all payment processing and data

Subscription Management:

• Subscription status verified through App Store APIs
• No personal payment information is stored by us
• Cancel subscriptions directly through your device's App Store settings

6. Data Storage and Security

Instagram Data — Local Storage:

• Your uploaded Instagram data file is stored locally on your device only
• Uses iOS Keychain/Android Keystore for secure storage
• Data encrypted using device-level security
• Automatic deletion when App is uninstalled

Watchlist Data — Secure Cloud Storage:

• The public follower lists you track are stored securely with Supabase, protected by encryption in transit and at rest
• We never store your own uploaded Instagram data in the cloud — only the tracking data needed to run watchlists and notifications
• You can delete this data anytime from the App settings

7. Data Sharing and Third Parties

We Do Not Share:

• Your uploaded Instagram data file (we don't have access to it)
• Your data with advertisers or marketers — ever
• Your data for any purpose other than running the app

Processors We Use:

• Supabase — stores tracked follower lists and delivers notifications (no account/login)
• Mixpanel and Datafast — privacy-friendly, aggregated usage analytics
• These providers process data only on our instructions, as our processors

App Store Integration:

• Apple App Store/Google Play Store handle purchases
• Anonymous purchase verification only
• Subject to Apple/Google privacy policies

Crash Reporting:

• Anonymous technical crash data only
• No personal or Instagram information included
• Used solely for bug fixes and stability

8. Your Rights and Control

Data Control:

• Delete your tracked data anytime through the App settings — no request, no account needed
• Uninstall removes all local Instagram data permanently
• Your uploaded Instagram data file always stays on your device

European Union Rights (GDPR):

For the account and analytics data we do hold, you have full GDPR rights:

• Right of access, rectification and erasure of the data we hold
• Right to restrict or object to processing, and to withdraw consent for analytics
• Right to data portability
• Exercise any of these in-app, or by emailing contact@unfollowcheck.com

Right to complain: you may lodge a complaint with your local data protection authority. In Denmark this is the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

9. Children's Privacy

• App not intended for children under 13
• We do not knowingly collect data from children
• Parental supervision recommended for users under 18

10. International Data Transfers

• Your uploaded Instagram data file is never transferred — it stays on your device
• Account and analytics data may be processed by providers (e.g. Supabase, Mixpanel, Datafast) located outside the EU/EEA, such as in the United States
• Where data is transferred internationally, it is protected by appropriate safeguards such as the EU Standard Contractual Clauses

11. Third-Party Services

Instagram/Meta:

• Not affiliated with Instagram or Meta Platforms
• You must comply with Instagram's Terms when exporting data
• Instagram's privacy policy applies to their data export

Infrastructure & Analytics:

• Supabase — tracked follower lists & notification delivery
• Mixpanel and Datafast — privacy-friendly usage analytics
• Each provider's own privacy policy also applies to the data they process for us

App Stores:

• Apple App Store and Google Play Store privacy policies apply
• Purchase and download data handled by respective stores

12. Data Retention

Instagram Data (on device):

• Retained on your device until you delete it
• Automatically removed when the App is uninstalled

Account & Analytics Data:

• Tracked follower lists and notification tokens are kept until you delete them or stop tracking; you can remove them anytime from settings, and we purge them from our systems (Supabase) and from backups in the ordinary course
• Aggregated analytics that can no longer identify you may be retained to improve the app
• Purchase verification data is retained as required for subscription management

13. Security Measures

• Local data encrypted using device security features
• Your uploaded data file is never transmitted over the network
• Regular security updates through App Store
• Recommend keeping device updated and secured

14. Changes to Privacy Policy

• Updates communicated through App or website
• Material changes will be prominently displayed
• Continued use indicates acceptance of changes

15. Contact Information

16. Legal Compliance

• Complies with GDPR (EU), CCPA (California), and applicable privacy laws
• Privacy-by-design approach minimizes data collection
• Regular privacy impact assessments conducted