Privacy Policy

What hooleft.me does

You download your own Instagram data export from instagram.com and upload it to us. We tell you who unfollowed you. We do not connect to Instagram in any way.

What we collect

• Account info you give us (email, and basic profile info if you sign in with Google or Apple).
• Instagram handles and exports you upload to use the service.
• Billing info if you upgrade to Pro. Card details go directly to our payment processor — we never see them.
• Basic usage and error data to keep the service running — anonymous event counts, performance metrics, and error reports. We do not build profiles or sell this data.

Why we collect it

To run the service, send you the emails you ask for, charge you if you upgrade, and fix bugs. That's it. We do not sell your data. We do not share it for advertising. We do not build profiles on you.

Who we share it with

We don't sell or rent your data. We don't share it for advertising. We use a small number of trusted service providers to run the service, under data processing agreements:

• Payment processing: Polar.sh (and the card networks they use).
• Hosting and infrastructure: providers in the EU and US for database, file storage, application hosting, email delivery, error tracking, and (if you opt in) product analytics.
• Sign-in providers: Google and Apple, only if you choose to sign in with them.

We may change providers from time to time as long as the replacement offers similar protections. We may also disclose data if required by law, or as part of a merger or acquisition (with notice to you).

How long we keep it

• Account data: until you delete your account.
• Uploaded export ZIP: deleted shortly after we parse it (typically within 24 hours).
• Follower snapshots: Free tier keeps only the latest one. Pro keeps the last 12 per handle.
• Billing records: held by Polar per their retention policy (typically 7+ years for tax).
• Inactive accounts:if you don't sign in for 24 months, we'll email you and then delete the account if you don't return.

When you delete your account, all of the above is removed from our systems within 30 days, except billing records held by Polar.

Your rights

You can:

• See, edit, or download your data — email support@hooleft.me. We respond within 30 days.
• Delete your account — Settings → Delete Account. This is immediate and irreversible.
• Opt out of analytics — email support@hooleft.me and we'll remove your account from analytics processing within 30 days.
• Object to how we process data — email support@hooleft.me.

Third-party usernames in your upload

Your Instagram export contains usernames of people who follow you or whom you follow. We process this on the legal basis of legitimate interest — running the service requires it, the usernames are already public on Instagram, we never contact these people or surface them outside your own results.

Cookies

We use a functional cookie set by Supabase to keep you logged in, and minimal cookies / local storage for product analytics that help us improve the service. We do not use advertising cookies. To opt out of analytics, email support@hooleft.me.

Security

HTTPS everywhere. Row-level security in the database — your data is only ever visible to you. Card data never reaches our servers. We're a small team; we do not have SOC 2 or ISO certifications.

Children

Don't sign up if you're under 13, or under the minimum age in your country (16 in some EU countries). If we find out a child created an account, we'll delete it.

Changes to this policy

If we change it, we'll update the date at the top and email you if the change is significant.

Contact

support@hooleft.me for anything — privacy questions, data requests, security reports.