Privacy Policy
Last updated 6 August 2026. This describes exactly what InfluDash stores, why, where it lives, and how to get rid of it.
The short version
- We store your sign-in identity, the platform accounts you connect, and the statistics we fetch for them.
- We only ever read from your connected platforms. We never post, comment, message, or change anything.
- We do not sell your data, show you ads, or use it to train anything.
- You can delete your account and everything in it from inside the app, at any time, permanently.
What we collect
Your account
When you sign in with Apple or Google we receive and store your email address, your display name if the provider supplies one, and the identifier that provider uses for you. We never see or store your password.
Platform connections
When you connect YouTube, Instagram or TikTok, that platform gives us an access token. We store it encrypted, along with the account's identifier and handle. The token is what lets us fetch your statistics; it is never shared with anyone else.
We request read-only access. We do not request permission to publish, delete, or message.
Statistics
For each connected account we store the numbers the platform reports: followers, following, post count, views, likes, comments, shares, average watch time, and engagement rate. We keep a daily history so the app can show trends and comparisons. We also store details of up to five recent posts per account — the post's identifier, a short excerpt of its title or caption, its view, like and comment counts, and when it was published.
Subscription
If you subscribe, we store the status of that subscription, when the current period ends, and the identifiers our payment provider uses. We never see or store your card details.
Technical records
We store sign-in sessions (as irreversible hashes, never the tokens themselves), a log of each attempt to sync a connected account, and a small audit log of significant account events such as connecting a platform or deleting an account.
What we do not collect
- Your private messages, drafts, or unpublished content.
- Your contacts, location, photos, microphone, or camera.
- Advertising identifiers. We run no ads and no third-party analytics or tracking SDKs.
Why we use it
To provide the service you signed up for and nothing else: to show your dashboard, calculate trends, generate insights about your content's performance, keep you signed in, and manage your subscription. We do not sell or rent your data, and we do not share it for advertising.
If you are in the EEA or UK: our legal basis is performance of the contract between us. Where we rely on your consent — such as when you authorise a platform connection — you can withdraw it at any time by disconnecting that platform in the app.
Google user data, and Google's Limited Use requirements
When you connect YouTube, InfluDash requests two read-only Google scopes and no others:
| Scope | What it lets us read | Why we need it |
|---|---|---|
youtube.readonly |
Your channel's subscriber count, total view count, video count, and the title, identifier and public counts of your recent uploads. | To show your channel's figures on the dashboard and to list your recent posts. |
yt-analytics.readonly |
Your channel's per-day views, likes, comments, shares and average watch time. | To show how those figures changed over a day, a week or three months, which a single current reading cannot tell you. |
We request read-only access. InfluDash cannot upload, edit, delete or comment on anything in your YouTube account.
InfluDash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We use Google user data only to provide and improve the features described above, which are the features you connected your account for.
- We do not transfer Google user data to anyone, except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition after giving you notice.
- We do not use Google user data for advertising, and we do not sell it.
- No human reads your Google user data, except with your explicit permission for a support request you raise, to comply with applicable law, or where the data is aggregated and anonymised for internal operations.
You can revoke our access at any time at myaccount.google.com/permissions, or by disconnecting YouTube in the app, which also deletes the statistics we stored for it.
Where your data lives
Our servers and database are hosted in Frankfurt, Germany (EU). Some of the companies below process data elsewhere; where that involves a transfer out of the EEA, it is covered by the transfer safeguards in their own terms.
Who else is involved
| Who | What they handle |
|---|---|
| Apple, Google | Sign-in. They tell us who you are; we never see your password. |
| YouTube (Google), Instagram (Meta), TikTok | The statistics you asked us to fetch, using the access you granted. |
| Apple App Store, Google Play, RevenueCat | Subscriptions and payments. They handle your payment details; we only learn whether you have an active subscription. |
| Supabase | Hosts our database (Frankfurt, EU). |
| Render | Hosts our servers (Frankfurt, EU). |
How long we keep it
- Daily statistics history: 180 days, after which older rows are deleted automatically.
- Everything else: until you delete your account, or you delete the connection it belongs to.
- Disconnecting a platform removes our stored access to it along with that account's data.
Deleting your data
Open InfluDash, go to Profile, and tap Delete account. Deletion is immediate and permanent — your profile, connections, stored access tokens, statistics, recent posts, settings and subscription record are all removed, and we keep no backup copy.
If you no longer have the app, follow the instructions on our account deletion page.
We retain one audit entry recording that a deletion happened — the date and the fact of it, with no personal data beyond an internal identifier — so we can demonstrate the request was honoured.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. Deletion is available immediately in the app; for anything else, email us and we will respond within 30 days. If you are in the EEA or UK you also have the right to complain to your local data protection authority.
Removing our access at the platform
Deleting your account destroys our copy of the access you granted. To also remove InfluDash from a platform's own list of authorised apps:
- Google / YouTube — myaccount.google.com/permissions
- Instagram / Facebook — Settings → Apps and websites
- TikTok — Settings → Security → Manage app permissions
Children
InfluDash is not intended for children under 13, and under 16 in the EEA. We do not knowingly collect data from them. If you believe a child has given us data, email us and we will delete it.
Security
Platform access tokens are encrypted before storage. Sign-in tokens are stored only as irreversible hashes. Access is over HTTPS. Signing out ends the session on our servers, not just on your device. No system is perfectly secure, but we do not store anything we do not need.
Changes
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.
InfluDash · Questions about your data: infludash@gmail.com · Delete your account · Terms of Service