Privacy Policy

Purpost is a mobile application that lets you publish content to Instagram, Facebook Pages and TikTok from one place. This policy explains what we collect, why we collect it, who we share it with, and how to get rid of it.

1. Who we are

Purpost is operated by Bowen Digital LLC, a Florida limited liability company ("we," "us," "our"). You can reach us at support@purpost.app.

2. What we collect

The Purpost app has no user accounts and never asks for your name, email address, phone number, date of birth, payment details, precise location, or contacts. The only email we collect is the one you choose to enter on our website's early-access list, described below. We do not use advertising identifiers or tracking SDKs. The only analytics-type tool in the app is crash reporting (see below).

• A device identifier. A random value generated on your device the first time you open the app. It links your connected accounts and scheduled posts to your installation. It is not derived from any hardware identifier, is not shared with third parties, and does not identify you personally.
• Social account credentials. When you connect Instagram, a Facebook Page or TikTok, that platform issues us an access token (and for TikTok, a refresh token). We store the token, the account or Page ID, and the username or Page name so we can publish on your behalf. You can connect up to 3 Instagram accounts and 3 TikTok accounts; we keep these details for each one. For Facebook, we keep only the token for the Page you choose; it stays on our server and is never sent to your phone.
• Content you choose to publish. Photos, videos, and captions you submit through the app. To make posting faster, a large video you pick may start uploading to our private storage before you tap Post. Nothing is published until you tap Post or your scheduled time arrives; if you don't post it, it is deleted, at the latest within 24 hours.
• Scheduled post details. What you scheduled, when it should publish, and whether it succeeded or failed.
• Story numbers, only if you turn on Story views. If you switch on Show Story views in Settings, we check the live Stories of each Instagram account you connect about every 30 minutes and save each Story's numbers (views, reach, replies, shares, profile visits, follows and how people moved through it) and Instagram's link to its picture. Instagram does not tell any app who viewed a Story, so we never have that.
• A push notification token, only if you grant notification permission, so we can tell you when a scheduled post publishes or fails.
• Crash reports. If the app crashes or hits an error, it sends technical details (app version, device model, iOS version, and what the app was doing at the time) to our crash-reporting provider. Reports exclude personal data, and web addresses are cut short so they never include access keys.
• Server logs. Our hosting provider records standard request logs, which may include IP address and timestamps, for security and troubleshooting.

Early-access email list (our website)

If you sign up for early access at purpost.app/early, we collect the email address you enter. We use it only to send Purpost launch news. You confirm your sign-up by email, every email includes an unsubscribe link, and you can ask to be removed at any time at support@purpost.app. The list is stored by Kit, our email provider, which records basic delivery information such as whether an email was opened. The list is separate from the app and is never linked to your device or connected accounts.

3. Why we collect it

• To publish and schedule your posts on the platforms you connect
• To show you your own posts, comments, and performance data from those platforms
• To send you notifications about your scheduled posts
• To generate caption suggestions, only when you request them
• To keep the service secure, diagnose failures, and prevent abuse
• To send launch news to people who joined the early-access list on our website

4. Service providers

Purpost cannot function without these providers. Each receives only what it needs, and none are permitted to use your data for their own purposes:

• Meta Platforms (Instagram and Facebook) — publishing, comments, and insights for your connected Instagram account, and publishing to the Facebook Page you connect
• TikTok — publishing and post data for your connected TikTok account
• Cloudinary — hosting of your photos so the platforms can retrieve them during publishing
• Cloudflare — storage of your videos until they are published, so the platforms can retrieve them
• Sentry — crash reports from the app, as described above
• Anthropic — caption suggestions. Only the caption text you submit is sent, and only when you tap an AI option. It is not used to train models.
• Expo — delivery of push notifications
• Railway — hosting for our server and database
• Kit — stores the early-access email list and sends launch emails
• Netlify — hosts our website, purpost.app

We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, or property of our users or ourselves.

5. Where your data is held

Our servers and database are located in the United States. If you use Purpost from outside the United States, your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country.

6. How long we keep it

• Access tokens are retained until you disconnect the account, the platform expires them, or you request deletion.
• Media attached to scheduled posts is deleted automatically after the post publishes.
• Media from immediate posts is uploaded so the platforms can retrieve it during publishing and may remain in our media provider's storage after publishing. You can request its deletion at any time by emailing us.
• Scheduled posts are retained until they publish or you cancel them.
• Story numbers are kept for 90 days, and deleted right away if you turn off Story views, disconnect that Instagram account or use Delete my data.
• Drafts and post history are stored on your device, not on our servers.
• Server logs are retained on a rolling basis by our hosting provider for operational purposes.
• Early-access emails are kept until you unsubscribe or ask us to remove them.

7. Your choices and rights

Deleting your data

• Delete my data in Settings. One tap erases everything we hold for your device: connected accounts, scheduled posts, stored media, saved Story numbers, and your notification token. It also clears drafts and history on your phone. It takes effect immediately.
• Disconnect an account in Settings. This deletes that account's tokens from our database. For an Instagram or TikTok account, it also cancels the scheduled posts made for it.
• Delete the app. This removes all data stored on your phone, including drafts and post history. Your iPhone doesn't tell us when an app is deleted, so we delete what we hold for your device when we learn of it: when we send a notification and Apple reports Purpost is no longer on your phone, or when the app hasn't contacted us for 90 days and nothing is scheduled. To delete everything right away, use Delete my data before deleting the app.
• Email support@purpost.app to request deletion of any remaining server-side data tied to your device, including stored media. We will action requests within 30 days.

Revoking platform access

Disconnecting in Purpost removes the token from our database. Because the token was issued by Instagram, Facebook or TikTok, it may remain valid on their systems until it expires. To revoke it completely, remove Purpost from that platform's own app permissions — Instagram: Settings → Apps and websites; Facebook: Settings & privacy → Settings → Business integrations; TikTok: Settings → Security → Manage app permissions.

If you are in California

Under the CCPA/CPRA you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined under California law. To exercise any right, email support@purpost.app.

If you are in the EU, EEA or UK

Our lawful basis for processing is performance of a contract — we process your data to deliver the service you asked for — and, for security and troubleshooting, our legitimate interests. You have the right to access, correct, delete, restrict, or object to processing of your personal data, and the right to data portability. You may also lodge a complaint with your local supervisory authority. To exercise any right, email support@purpost.app.

8. Security

All traffic between the app, our servers, and the platforms uses HTTPS. Access tokens are stored in a private database that is not publicly reachable, and we deliberately collect as little as possible so there is less to expose. No system is perfectly secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify affected users and any regulator required by law, without undue delay.

9. Children

Purpost is not directed to children under 13, and we do not knowingly collect personal information from them. Instagram, Facebook and TikTok also require users to be at least 13. If you believe a child under 13 has provided us information, email us and we will delete it.

10. Third-party services

Purpost links to and integrates with services we do not control, including Instagram, Facebook and TikTok. Their handling of your data is governed by their own privacy policies, not this one.

11. Changes to this policy

We may update this policy. If the change is material, we will update the date above and notify you in the app before it takes effect. Continued use after an update means you accept the revised policy.

12. Contact

Questions, requests, or complaints: support@purpost.app