GhostlyPrivacy Policy
Ghostly ("we", "us") lets you see recent follows and unfollows of public social media accounts. This policy explains what we collect, why, and the choices you have. We don't sell your personal information and we don't use advertising trackers.
1. Information we collect about you
| Data | Why |
|---|---|
| A random app install identifier, device platform (iOS/Android), app version and time zone | To create your anonymous account, keep you signed in and schedule notifications at sensible times. |
| Push notification token (only if you allow notifications) | To send the alerts you asked for. |
| Apple or Google account identifier and email (only if you choose "Sign in with Apple/Google") | To restore your account and purchases on a new device. |
| Subscription status (plan, expiry) | To unlock Premium features. Payments are processed by Apple or Google; we never see your card details. |
| Usernames you scan or track, and your notification preferences | To provide the service and show your tracked accounts. |
| Technical logs (IP address, request metadata, errors) | Security, abuse prevention and debugging. Kept for up to 30 days. |
We do not ask for, receive or store social media passwords.
2. Information about the accounts you track
When you scan or track a username, we retrieve information that the account has made public: username, display name, profile picture, follower and following counts, and the list of accounts it follows. From this we store detected follow and unfollow events and derive an estimated gender split from first names (never from photos) and an entertainment-only "Red Flag Score". Private accounts cannot be tracked. Data about accounts that nobody tracks any longer is deleted automatically within 30 days.
If you are the owner of an account and want it excluded from Ghostly, email [email protected] from an address we can verify, and we will block it and delete its data.
3. Service providers
We share data only with providers that help us run Ghostly, under contracts that limit their use of it:
- Railway — hosting of our servers and database.
- RevenueCat, Apple and Google — subscription purchase and status.
- Expo, Apple Push Notification service and Firebase Cloud Messaging — delivering push notifications.
- Public data providers — retrieving public profile information for the usernames you scan.
We may disclose information if required by law or to protect the rights and safety of our users or others.
4. Retention and deletion
You can delete your account at any time in Settings → Delete account. This immediately removes your account, devices, tracked accounts and notification history from our systems (backups roll over within 30 days). Cancelling a subscription is done in your Apple or Google account settings; deleting the app alone does not cancel it.
5. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA) you may have the right to access, correct, delete or export your data and to object to or restrict processing. Contact [email protected]; we respond within 30 days. You can also complain to your local data protection authority. Our legal bases are performance of our contract with you, our legitimate interests (security, product improvement, providing public-data insights) and your consent for notifications.
6. Security
Data is encrypted in transit (HTTPS) and access is restricted. Tokens are stored hashed and secrets are kept in secure environment configuration. No system is perfectly secure; we will notify you of breaches as required by law.
7. Children
Ghostly is not intended for anyone under 17. We do not knowingly collect data from children; contact us if you believe a child has used the app and we will delete the data.
8. International transfers
Our providers may process data in the United States and other countries, using appropriate safeguards such as Standard Contractual Clauses where required.
9. Changes
We will post updates here and change the effective date. Significant changes will be announced in the app.
10. Contact
Ghostly · [email protected]