This Privacy Policy explains what information Instify collects, how we use it, and your rights regarding that information. We've written this to be plain and direct — no legalese.

1. What we collect

We only collect what is necessary to run the service:

Account information — if you sign in via GitHub, Google, or Apple, we receive your name, email address, and OAuth provider identifier. This is stored securely via Supabase Auth.
Subscription status — we store your subscription tier (Free, Standard, or Pro) and payment reference via Polar.sh to validate your plan on each sign-in.
Support emails — if you contact us at support@instify.ai, we retain that correspondence to resolve your issue.

2. What we do not collect

Your source code, project contents, or user stories — everything stays on your local machine
Keystroke logs, screen recordings, or usage analytics
Your AI API keys — these are stored locally on your device only
Any data from the apps you build with Instify

3. How we use your data

To authenticate you and maintain your session
To validate and apply your subscription plan
To respond to support requests

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Third-party services

Instify relies on the following third-party services, each with their own privacy practices:

Supabase — authentication and subscription data storage
Polar.sh — subscription billing and payment processing
Anthropic — Claude Code AI agent (when you use it)
OpenAI — Codex AI agent (when you use it)

5. Data retention

We retain your account information for as long as your account is active. Subscription records are kept for up to 12 months after cancellation for billing and legal compliance purposes. Support emails are retained for up to 24 months.

6. Your rights

Depending on where you live, you may have the right to:

Access the personal data we hold about you
Correct inaccurate data
Delete your account and associated data
Object to or restrict certain processing
Port your data to another service

To exercise any of these rights, email us at support@instify.ai and we will respond within 30 days.

7. GDPR (European users)

If you are located in the European Economic Area, our legal basis for processing your personal data is your consent (given at sign-in) and the performance of our contract with you (subscription and app access). You have the right to withdraw consent at any time by deleting your account.

8. CCPA (California users)

We do not sell personal information. California residents may request disclosure of the categories of personal information we collect and the purposes for which it is used by contacting us at support@instify.ai.

9. Security

We use industry-standard security practices including encrypted connections (TLS), restricted database access, and file-level permissions for locally stored credentials. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date above. Continued use of the App after changes constitutes your acceptance of the updated policy.

11. Contact

Questions or requests regarding your privacy? Email us at support@instify.ai