1. Who we are
“Followers - Unfollowers report” (the “App”) is an Android application that builds analytics about Instagram profiles from publicly available data. The App and the website unfollower.net (together, the “Service”) are operated by Darksy OÜ, a private limited company incorporated in Estonia — “we”, “us”, “our”. For the purposes of the EU General Data Protection Regulation (GDPR), Darksy OÜ is the data controller of the personal data described in this policy.
This policy explains what data the Service collects, why, on what legal basis, and what your choices are.
The short version: we never ask for, receive or store your Instagram password. You enter a username; the report is built from public profile data. An account in the App is created from that username alone.
2. Data we collect
Data you provide
- Instagram username. The username you enter to build your report. It is sent to our own backend and stored together with the audience snapshots (see below) that make up your analytics. It also acts as your account identifier in the App — no password, e-mail or phone number is requested.
- Usernames you search for. If you use profile search, the public usernames you look up are processed the same way.
Data collected automatically
- Advertising ID (GAID). Used for install attribution and analytics. It is shared with three service providers acting on our behalf: AppsFlyer, Apphud and Google Analytics for Firebase.
- Usage events. Screens viewed, feature usage, paywall and purchase events (Mixpanel, Google Analytics for Firebase). Mixpanel identifies you by an internal random UUID, not by your Instagram username and not by GAID.
- Purchase and subscription status. Processed via Google Play Billing and Apphud to activate and restore your Premium subscription. We never see your card details — payment is handled entirely by Google Play.
- Push token. A Firebase Cloud Messaging token used to deliver notifications (for example, when a scan is ready).
- Crash reports. If crash reporting (Sentry) is active in your version of the App, we receive stack traces, device state and our internal UUID when the App crashes. Crash reports do not include screenshots or screen contents.
3. Data about other people
By its nature, the App processes public data about people who may not use the App themselves — the followers and followings of a scanned profile, and public profiles looked up through search. We believe you should know exactly what that includes:
| What | Source | Why |
|---|---|---|
| Usernames, display names and avatars of a scanned profile’s followers and followings | Public Instagram profile data, retrieved via our backend | Building the follower lists that are the App’s core function: new, lost, mutual, not-following-back |
| The same fields for any public profile found through Search, and its followers | Public profile data of the account you look up | Showing that profile’s analytics (a Premium feature) |
| Public posts and engagement metrics (likes, comments, content types) | The same public sources | Engagement and content insights |
This data is limited to what is publicly visible to anyone on Instagram; the App has no access to private profiles, private messages or any non-public information. Audience snapshots are stored on our backend so that consecutive scans can be compared; on your device only a display cache is kept.
If you do not use the App but believe your public profile data appears in it, you can request removal — see Data deletion. The removal channel is open to anyone, not only to App users.
4. How we use data, and on what legal basis
- To provide the Service — build reports, compare audience snapshots between scans, deliver push notifications about results. Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR).
- To operate subscriptions — activate, restore and verify Premium status; keep billing records. Legal basis: performance of a contract; compliance with legal obligations such as accounting law (Art. 6(1)(b) and 6(1)(c) GDPR).
- To understand and improve the App — aggregated product analytics, install attribution, crash diagnostics. Legal basis: our legitimate interest in operating, securing and improving the Service (Art. 6(1)(f) GDPR). You can reset or delete your device’s advertising ID at any time in Android settings.
- To process public data about third persons (Section 3). Legal basis: our legitimate interest in providing audience analytics from publicly available information (Art. 6(1)(f) GDPR), balanced by strict limitation to public data and an open removal channel.
We do not sell personal data, we do not share it with third parties for their own marketing, and we do not use it for automated decision-making that produces legal effects. We show no third-party advertising in the App.
5. Service providers & SDKs
The App relies on a small set of processors acting on our instructions:
| Provider | Purpose | Data involved |
|---|---|---|
| Our own backend | Building reports; storing audience snapshots | Username, audience snapshots, public engagement data |
| AppsFlyer | Install attribution | GAID, install and attribution events |
| Apphud | Subscription management | GAID, purchase history, subscription status, internal UUID |
| Google Analytics for Firebase | App analytics | GAID, usage events (e.g. screen views), internal UUID |
| Firebase Cloud Messaging | Push notifications | Push token, Firebase installation ID |
| Mixpanel | Product analytics | Usage events, internal UUID (no GAID) |
| Sentry | Crash reporting (when active) | Stack traces, device state, internal UUID |
| Google Play Billing | Payments | Handled by Google under its own privacy policy |
International transfers
Some of these providers process data outside the European Economic Area, primarily in the United States (Google, Mixpanel, Apphud, Sentry) and Israel (AppsFlyer). Where data leaves the EEA, we rely on the safeguards recognised by the GDPR: an adequacy decision of the European Commission (including the EU–U.S. Data Privacy Framework for certified U.S. providers, and the adequacy decision for Israel) or the Commission’s Standard Contractual Clauses.
6. Security
Traffic between the App and our backend is protected with mutual TLS (mTLS): both the app and the server authenticate each other with certificates before any data is exchanged. SDK traffic uses HTTPS. No transmission method is 100% secure, but we deliberately minimise what there is to protect — starting with never collecting your password.
7. Retention & deletion
- Your account record (username) and audience snapshots are kept while you use the App, because comparing snapshots over time is the core of the Service.
- Log Out in the App clears local data on your device only — it does not delete your server-side record.
- To delete your server-side data, use Settings → Delete My Data in the App or follow the instructions at unfollower.net/data-deletion. Requests are completed within 30 days.
- Analytics data held by our processors is retained according to their configurations and deleted on our request when you exercise deletion.
- Records connected to payments are kept for up to 7 years where Estonian accounting law requires it, then deleted.
8. Your rights
Under the GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing (including processing based on legitimate interest), to receive it in a portable format, and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at support@unfollower.net — we respond to all requests within 30 days.
You also have the right to lodge a complaint with a supervisory authority — in our case the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) — or with the authority of the EU country where you live or work.
9. Children
The Service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us personal data, contact us and we will delete it.
10. Changes
We may update this policy as the App evolves. Material changes will be announced in the App or on this page, with the effective date above always reflecting the current version.
11. Contact
Darksy OÜ
support@unfollower.net