Privacy Policy

PostImpact

1. Who we are

App name: PostImpact
Data controller: PostImpact
Contact email: info@be-smart.site

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, PostImpact is the data controller for personal data processed through the app.

2. Information we collect

We collect only the information needed to provide, secure, and improve PostImpact.

2.1 Information you provide

Account and identity

• First name / display name

• Email address

• Email verification status

• Account creation date and unique user ID

Sign-in with Google or Apple

If you sign in with Google or Apple, we receive the information those providers share with us, which may include:

• Name

• Email address

• Provider user identifier

• Identity token / authentication credential

Apple may provide a private relay email address if you hide your email.

Profile details (optional, for personalised AI analysis)

You may add:

• Age

• Occupation

• Interests

• Personality traits

• Hobbies

• Key priorities

• Profile photo

Content you create

• Post titles and post text

• Hashtags

• Drafts and published posts

• AI analysis results generated from your posts, including suggestions, content analysis, risk ratings, sentiment prediction, and similar feedback

Support

If you contact us, we collect the information you send, such as your email, account details, and the content of your message.

2.2 Information from connected social accounts

You may connect social platforms from your profile. We only connect an account after you authorise it. Depending on the platform, we may collect:

X (Twitter)

• Account ID, name, and username

• Access / refresh tokens

• Connection timestamp

• Posts you publish through PostImpact

• Public engagement metrics such as likes, impressions, replies, and reposts/shares

Facebook

• Facebook user ID, name, and email, if permitted by Facebook

• Access token

• Connection timestamp

LinkedIn

• Access / refresh tokens and related expiry information

• Posts you publish through PostImpact

• Engagement metrics associated with those posts

You can disconnect these accounts in the app. Disconnecting stops new access. It does not automatically delete posts already published on that platform.

2.3 Information collected automatically

• App language preference (English or German)

• Device data needed to run the app, such as operating system and basic device identifiers used by our service providers

• Usage and diagnostic data through Firebase Analytics, such as app events, crash-related information, and aggregated usage

• Data stored locally on your device, such as session or user cache, draft post text, and language settings

2.4 Device permissions

PostImpact may request:

• Internet access, to operate the app, authenticate you, analyse posts, and connect to social platforms

• Photo library, to select and share images with posts

• Location, when in use, only if needed to geotag posts on X and only after you grant permission

• App tracking on iOS, if you allow it, to support personalised analytics for your X posts

You can refuse or later revoke these permissions in your device settings. Some features will not work without the related permission.

We do not use your contacts, microphone, or always-on background location.

3. How we use your information

We use personal data to:

• Create and manage your account

• Verify your email address and authenticate sign-in, including Google and Apple

• Personalise AI analysis using your profile

• Analyse your post drafts before you publish

• Save drafts and a history of your posts

• Publish content to platforms you connect, such as X and LinkedIn

• Fetch and display post performance analytics

• Remember your language and in-app preferences

• Secure the app, prevent abuse, and debug problems

• Communicate about your account, security, and service updates

• Comply with law and enforce our terms

We do not sell your personal data.

4. AI processing

When you ask PostImpact to analyse a post, we send the post title and content, together with your selected app language, to an artificial intelligence provider (currently OpenAI) so the app can return suggestions, content analysis, risk ratings, and sentiment insights.

Do not include sensitive personal data in posts you submit for analysis, such as health, financial, or government ID information, unless you are comfortable with that text being processed for this purpose.

AI output is generated automatically and may be inaccurate. It is not legal, medical, or professional advice.

5. Legal bases (EEA, UK, and Switzerland)

If GDPR or UK GDPR applies, we process personal data on these bases:

• Contract: to provide the app you signed up for, including account, posting, analytics, and AI analysis

• Consent: for optional profile details, photo, location, or tracking permissions, connecting social accounts, and similar optional features. You can withdraw consent at any time

• Legitimate interests: to keep the app secure, understand aggregated usage, prevent fraud, and improve features, balanced against your rights

• Legal obligation: where we must retain or disclose information to comply with law

6. How we share information

We share personal data only as described below.

6.1 Service providers

• Google Firebase — Authentication, Cloud Firestore, Cloud Storage, and Analytics

• Google Sign-In — optional sign-in

• Apple — optional Sign in with Apple

• OpenAI — AI analysis of post title and content

• X / Twitter — account connection, publishing, and post metrics

• Meta / Facebook — account connection and related platform features

• LinkedIn — account connection, publishing, and post metrics

These providers process data under their own terms and privacy policies, on our instructions or as independent controllers of their platforms.

6.2 When you publish

If you publish a post through PostImpact, that content is shared with the chosen platform and becomes subject to that platform’s rules and audience settings.

We are not responsible for how X, Facebook, LinkedIn, or other networks use content after you post it.

6.3 Legal and safety

We may disclose information if we believe it is required by law, court order, or government request, or to protect the rights, safety, or property of PostImpact, our users, or the public.

6.4 Business transfers

If we merge, are acquired, or sell assets, personal data may be transferred as part of that transaction. We will still protect it as described in this policy, or we will notify you of any material change.

We do not share your data with advertisers for their independent marketing, and we do not sell personal data.

7. International data transfers

We use cloud providers that may store or process data in the United States and other countries, including Google/Firebase and OpenAI. Those countries may have different data-protection laws than your own.

Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and the providers’ own transfer mechanisms.

You may contact us at info@be-smart.site for more information about these safeguards.

8. Data retention

We keep personal data only as long as needed for the purposes above:

• Account data: while your account is active

• Posts, drafts, and analytics: while your account is active, or until you delete the relevant content

• Social connection tokens: until you disconnect the account or delete your PostImpact account

• Local device data: until you log out, clear app data, or uninstall the app

• Legal / security records: longer if required by law or to resolve disputes

After deletion, residual copies may remain for a limited time in encrypted backups, then they are removed in the ordinary backup cycle.

9. Security

We use industry-standard measures, including:

• Encrypted transit (HTTPS)

• Firebase Authentication for sign-in

• Access-controlled cloud storage for profile photos and database records

• Device-side storage for session and draft data

No method of transmission or storage is 100% secure. Keep your device locked and your account sign-in details private.

If you believe your account has been compromised, contact us immediately at info@be-smart.site.

10. Your rights

Depending on where you live, including the EEA, UK, Switzerland, and some U.S. states, you may have the right to:

• Access the personal data we hold about you

• Correct inaccurate data

• Delete your data

• Restrict or object to certain processing

• Receive a portable copy of data you provided

• Withdraw consent at any time

• Lodge a complaint with your local data protection authority

You can exercise many of these rights in the app:

• Edit your profile

• Change language

• Disconnect X, Facebook, or LinkedIn

• Log out, which clears local session data

To request a full copy of your data, a correction we cannot make in-app, or deletion of your account and related cloud data, email us at info@be-smart.site from the same email used on your account.

We may need to verify your identity before fulfilling the request. We will respond within the time required by applicable law, typically 30 days.

If you are in the EU/EEA, you may also contact your local supervisory authority. In Germany, this is your state data protection authority (Landesdatenschutzbeauftragte). If you are in the UK, you may contact the ICO.

11. Children’s privacy

PostImpact is intended for users aged 16 and older, or the digital-consent age in your country if that age is higher.

We do not knowingly collect personal data from children under 13, or under 16 where GDPR requires it, without verifiable parental consent.

If you believe a child has provided us personal data, contact us at info@be-smart.site and we will delete it.

Do not enter another child’s personal data into posts or profile fields.

12. Third-party links and platforms

The app may open X, Facebook, LinkedIn, Google, Apple, or other third-party pages.

Their privacy practices are governed by their own policies, not this one. We encourage you to read them before connecting an account or posting.

13. Do Not Track and advertising

PostImpact does not serve third-party behavioural advertising in the app.

We use Firebase Analytics to understand how the app is used. iOS users may be asked for tracking permission. If you decline, we will not use that tracking for personalised analytics.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change.

For material changes, we will notify you in the app or by email where appropriate.

Continued use of PostImpact after an update means you accept the revised policy.

15. Contact us

Questions, requests, or complaints about privacy should be sent to:

Email: info@be-smart.site

16. Summary of data practices

• Account info: name, email, and user ID, used for login and account management

• Profile: age, occupation, interests, and photo, used for personalised AI insights

• User content: post drafts and published posts, used for creation, history, and publishing

• Social tokens: X, Facebook, and LinkedIn credentials, used for posting and analytics

• Analytics: likes, impressions, comments, and shares, used for performance dashboards

• Diagnostics: app events and crash data, used for reliability and improvement

• Identifiers: device or installation identifiers used by Firebase, used for authentication, analytics, and security

Data used to track you: only if you grant iOS tracking permission, for personalised post analytics.

Data linked to your identity: account, profile, posts, connected social accounts, and analytics tied to your user ID.

Data not collected: contacts, financial information, health data, or browsing history outside the app.