Privacy
Policy iPost AI

Account Information

When you create an account, we collect your email address and password (via Supabase Auth), or your Google account ID if you sign in with Google. Display name and profile photo are optional.

Brand & Business Profile

• Business name, type, and description
• Brand colors, visual style preferences, and logo
• City, state, and country

Content You Create

• Post context, topic prompts, and feedback submitted for content generation
• Scheduled post dates and platform selections
• AI-generated captions, hashtags, and images associated with your account

Connected Social Accounts

When you connect a social media platform, we store the platform name, your username, and an account identifier from our social media integration partner (Zernio). We do not store your social media passwords.

Usage & Generation Data

• Number of AI generations used per billing cycle
• AI model usage costs (for budget enforcement — not sold or shared)
• Generation job status and timestamps

Device & Notification Data

Firebase Cloud Messaging (FCM) token, used solely to send push notifications about your content being ready.

Purchase Information

When you subscribe, Google Play processes payment. We receive only a purchase token and product ID — we never see your payment card details.

We do not use your data to train AI models. Prompts are sent to Anthropic (Claude) and fal.ai solely for real-time generation, governed by their respective privacy policies.

• Account data is retained for as long as your account is active.
• Generation jobs and AI cost records are retained for billing and support purposes.
• Deleted posts are removed from our database immediately upon your request.
• Account deletion removes your profile, posts, connected accounts, and associated data within 30 days. Aggregated, anonymized records may be retained longer for service integrity.

• Encrypted storage for authentication tokens (AES-256-GCM)
• Row-Level Security (RLS) on all database tables — data is accessible only to your authenticated session
• HTTPS-only communication — no cleartext traffic permitted
• API keys and secrets are never stored in the app binary or exposed to the client
• Subscription and credit data are write-locked to server-side processes only

Depending on your location, you may have the right to access, correct, delete, or export your personal data, and to opt out of non-essential communications. Delete your account via Settings → Delete Account, or contact us directly.

iPost AI is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via push notification or in-app notice. Continued use of the app after changes constitutes acceptance of the revised policy.