Privacy Policy

The short version:

• There is no CCSoft account and no CCSoft server. We do not hold a copy of your data.
• You sign in with your own Instagram account, on Instagram's own sign-in page. Your password is never stored by the app and never sent to us.
• Your follower, following, post and engagement data is read from Instagram on your phone and saved in a database on that phone only.
• What leaves the device is anonymous app-usage analytics and crash reports, plus your purchase, which is handled by Google Play or Apple.

1. There is no account with us

The app does not ask you to register, does not create a profile on our systems, and does not operate a backend that stores your data. It talks to Instagram directly from your device, and everything it works out — who unfollowed you, who does not follow you back, which posts got the most engagement — is calculated on the phone.

2. Signing in to Instagram

The app opens Instagram's real sign-in page inside a web view. You type your username and password into the app's sign-in screen, and the app enters those values into the fields of Instagram's own page. They are submitted to Instagram and to nobody else.

• Your password is held in memory only for the duration of the sign-in attempt and is cleared afterwards. It is never written to the database, to app preferences, or to any log we collect.
• We never see, receive or transmit your password.
• After a successful sign-in, Instagram's session cookies are stored by the web view on your device. They are cleared when you log out.

We are not Instagram, and we have no special access to your account beyond what your own session allows.

3. What the app reads and stores on your device

• Your profile details: user ID, username, display name, profile picture URL, follower and following counts.
• Your follower and following lists, and a history of changes to them.
• Your posts, with likes and comments on them, so it can show engagement statistics and identify inactive followers.
• Per-account statistics it derives from the above.
• Public profile snapshots of any competitor accounts you choose to track.
• Your app settings.

All of this is written to a local database on the device. None of it is uploaded to CCSoft, and none of it is shared with advertisers or data brokers. It stays on the phone until you log out or uninstall.

The app does not read your direct messages, and does not ask for your contacts, photos, location, microphone or camera.

4. What leaves your device

Three things: anonymous product analytics, crash reports, and your purchase. None of them contains your follower lists, your posts, your comments, or your password.

Analytics

On Android the app sends usage events to Google Firebase Analytics. On iOS it sends the same events to Amplitude. The events are:

Alongside these events the analytics service records the app version, the device model and operating system, and an approximate location — country and city, worked out from the IP address of the connection, never from GPS. The app does not request location permission and cannot read your precise position.

On iOS only, Amplitude additionally records app sessions and screen views automatically, and the app sets the Amplitude user identifier to your Instagram username after you sign in, so iOS analytics are linked to that username. Android does not send the username at all.

Crash reports

Google Firebase Crashlytics receives a report when the app crashes: the stack trace, device model, operating system version, app version and an app instance identifier. It does not include your Instagram data.

Configuration and notifications

The app uses Firebase Remote Config for settings such as refresh limits and feature switches, and Firebase Cloud Messaging for push notifications. Both involve a device or installation token issued by Google. Push notifications are optional and require your permission.

Other network requests

Every other request goes to Instagram, on your behalf, using your session. The one exception is on iOS: if you use the AI comment-suggestion feature, the app downloads a language model file from Hugging Face so suggestions can be generated on the device. The download carries none of your data.

5. Subscriptions and payments

• Android: processed by Google Play Billing. Google handles the payment and tells the app only whether an entitlement is active.
• iOS: processed by Apple through the App Store.

We never receive or store your card number, bank details, billing address or store account identity. The only record on your device is a flag saying whether a subscription is active.

6. How long data is kept

• On-device data is kept until you log out or uninstall. Logging out deletes the signed-in account's lists, history, totals, posts, likers and commenters, tracked competitors and stored profile, and clears the Instagram session cookies and web view cache. Uninstalling removes everything remaining.
• Analytics and crash data are retained by Google and by Amplitude under their own schedules. You can ask us to delete what is associated with you.
• Purchase records are held by Google or Apple, not by us.

7. Children and teenagers

CCSoft+ Analytics is for adults. It is not directed at anyone under 18, we do not knowingly collect data from minors, and the app is declared to Google Play as an 18-and-over app. See our Child Safety Standards for how to report a concern.

8. Your choices and rights

• Access. Your Instagram data is on your device and visible in the app. For the data Instagram holds, use Instagram's own download tool.
• Deletion. Log out or uninstall to remove on-device data immediately. Email us to have diagnostic data deleted — see the deletion page.
• Opting out of analytics. Uninstalling stops all further analytics and crash reporting. You can also turn off ad and usage measurement at the operating system level.
• Notifications. Revoke notification permission in system settings.
• Complaints. If you are in a region with a data protection authority, you may complain to it. We would prefer you write to us first.

9. Changes to this policy

If the app changes what it collects, this page is updated and the “last updated” date changes.

10. Contact

CCSoft — ccsoft.ai@gmail.com

For deletion requests use the subject line Data Deletion Request. We respond within 30 days. We will never ask you for your Instagram password.