Privacy Policy
Recredit (“the app”, “we”, “us”) is published by Uygur Uğurlu, an individual developer. This policy explains what data the app processes, why, and the choices you have. Contact: uygurugurlu@gmail.com.
Short version: no ads, no tracking, no selling of data. An account is optional. Your library and settings stay on your device. Crash reports are anonymous and you can turn them off.
1. Data that stays on your device
- Library and history: the posts you saved, their captions, creator usernames and small thumbnails.
- Tracked posts: the public posts you add to Insights → Tracked posts, their captions, creator usernames, thumbnails and the like, comment and view counts the app reads over time.
- Settings and your free-save counter.
This data is stored only in the app’s local storage on your device. We never upload it, and it’s removed when you delete the app or tap Settings → Clear library.
2. Instagram requests
When you paste a link, the app fetches that public post directly from Instagram’s servers from your device. Instagram receives your IP address and the request in line with Instagram’s own privacy policy. These requests don’t go through our servers, and we don’t log the links you open. The same applies when the app refreshes the public counts of posts you track. The app never asks for your Instagram username or password.
3. Connected Instagram account (optional)
If you sign in and choose Insights → My account → Connect Instagram, you log in on Instagram’s own page and grant read-only access to your Instagram Business or Creator account through the official Instagram API (Meta Platforms, Inc.). We never see your Instagram password. Our server (Google Cloud Functions and Cloud Firestore) then stores:
- your Instagram account ID, username and an access token,
- the comment summaries you ask for.
When you open the dashboard, our server uses the token to read your profile, your recent posts, their insights (reach, views, saves, shares, interactions) and their comments, and passes the results to the app. Comment text is processed only to answer your request and is not stored, except inside a summary you generated.
AI comment summaries. When you tap “Summarize comments”, the post caption and its comments are sent to Anthropic (Anthropic, PBC) to generate the summary. Commenter usernames are not sent. Anthropic doesn’t use this data to train its models. Summaries are generated by AI and can contain mistakes.
The “Your besties” list counts how often other accounts comment on your posts. It’s computed on request from your own posts’ comments and isn’t stored.
You can disconnect at any time (Insights → My account → ••• → Disconnect), or remove the app in Instagram’s settings (Apps and websites). Either way we delete your token and summaries straight away.
4. Clipboard
If “Detect copied links” is on (Settings), the app checks your clipboard when it opens to see whether it contains an Instagram link, so it can offer to repost it. Clipboard content is not stored or sent anywhere. You can turn this off at any time.
5. Photos access
The app asks for permission to add photos and videos to your library so it can save what you choose. It doesn’t upload your photos or scan your library.
6. Optional account
You can use the app without an account. If you choose to sign in (Sign in with Apple, Google, or email and password), we use Firebase Authentication (Google LLC) to process:
- your email address (or Apple’s private relay address, if you choose “Hide My Email”),
- your name, if you provide it,
- a user identifier and the sign-in provider you used.
We use this only to sign you in and to keep your subscription active across your devices.
7. Purchases
Purchases are processed by Apple (App Store) or Google (Google Play). We never see your payment details. To check whether you have an active Recredit Unlimited subscription, we use RevenueCat (RevenueCat, Inc.), which processes your purchase receipts and history, an app user identifier (random, or your account identifier if you’re signed in), and basic device and app information such as OS and app version.
8. Crash reports
If the app crashes or hits an unexpected error, Firebase Crashlytics (Google LLC) may collect a crash log containing the stack trace, your device model, OS and app version, and a random installation identifier. Crash reports aren’t linked to your account or your identity. You can turn them off in Settings → Share crash reports.
9. What we don’t do
- We don’t show ads or use advertising identifiers.
- We don’t track you across other companies’ apps or websites.
- We don’t sell or rent personal data.
10. Legal bases (EEA/UK users)
We process account, purchase and connected-Instagram data to provide the service you asked for (performance of a contract), and crash reports based on our legitimate interest in keeping the app working. You can object to the latter by turning crash reports off.
11. Retention
- Account data: kept until you delete your account.
- Instagram connection and comment summaries: kept until you disconnect Instagram, remove the app in Instagram, or delete your account. Unused access tokens expire after 60 days.
- Purchase records: kept by RevenueCat and the app stores as long as needed to provide your subscription, restores, and to meet tax and accounting obligations.
- Crash reports: kept by Crashlytics for up to 90 days.
12. Deleting your data
You can delete your account in the app at any time: Settings → Delete account. This permanently deletes your Firebase account, your Instagram connection and your comment summaries, and revokes Sign in with Apple access. You can also email us to ask for deletion of any data associated with you.
13. Service providers and international transfers
Our providers may process data in the United States and other countries. Where required, transfers are protected by safeguards such as the European Commission’s Standard Contractual Clauses.
- Google Firebase (Authentication, Crashlytics, Cloud Functions, Cloud Firestore): firebase.google.com/support/privacy
- Meta / Instagram API (only if you connect Instagram): privacycenter.instagram.com/policy
- Anthropic (AI comment summaries): anthropic.com/legal/privacy
- RevenueCat: revenuecat.com/privacy
- Apple: apple.com/legal/privacy
- Google Play: policies.google.com/privacy
14. Your rights
Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, and to complain to your local data protection authority. Email us to exercise these rights. We’ll reply within 30 days.
15. Children
The app isn’t directed to children under 13 (or under 16 in the EEA), and we don’t knowingly collect their personal data. If you believe a child has given us personal data, contact us and we’ll delete it.
16. Changes
If we change this policy, we’ll update the effective date above, and we’ll notify you in the app for significant changes.
17. Contact
Uygur Uğurlu · uygurugurlu@gmail.com