Privacy Policy

Who is responsible

The controller for data processed by Postlytics is its operator, Dominique Rosario. You can reach us at support@postlytics.app for any privacy question or request.

Your PostHog credentials and analytics data

Postlytics connects to your own PostHog instance with a personal API key you provide. That key is stored only in your device's iOS Keychain and is sent exclusively to the PostHog host you choose (US cloud, EU cloud, or your self-hosted server).

Your PostHog API key, project data, events, persons and insights never pass through or are stored on Postlytics servers. Requests go directly from your device to PostHog.

Account data

Sign-in is handled by Supabase, via Sign in with Apple, Sign in with Google or a one-time email code. We store only what is needed to keep you signed in and to manage your subscription: a user identifier, your email address (or Apple's private relay address), and your subscription state.

Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Account data is kept until you delete your account.

Purchases

Subscriptions are billed by Apple through the App Store and managed by RevenueCat. We receive an anonymous entitlement status (Pro or not) and an anonymous app user ID — never your name, card or payment details. Apple's privacy policy governs the payment itself.

Diagnostics and product analytics

Crash reports and error diagnostics are sent to Sentry. Anonymized product usage events (for example which screens are opened) are sent to our own PostHog project. Neither includes your PostHog API key, your project's analytics data or the contents of your dashboards.

Legal basis: our legitimate interest in keeping the app stable and improving it (Art. 6(1)(f) GDPR).

Website

postlytics.app is hosted on Cloudflare Pages. Cloudflare processes server logs (IP address, user agent, requested page) to deliver the site and protect it against abuse.

Service providers

We rely on the following processors to run Postlytics:

• Supabase, Inc. — authentication and account storage
• Apple Inc. — App Store billing and Sign in with Apple
• Google LLC — Sign in with Google (only if you choose it)
• RevenueCat, Inc. — subscription entitlement management
• Functional Software, Inc. (Sentry) — crash reporting
• PostHog, Inc. — anonymized product analytics for Postlytics itself
• Cloudflare, Inc. — website hosting

International transfers

Some of these providers process data in the United States. Transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

Your rights

You have the right to access, rectify, erase and export your personal data, to restrict or object to processing, and to withdraw consent at any time. You can also lodge a complaint with your local data protection authority.

You can delete your account and all associated data at any time in the app under Settings → Account → Delete account. This removes your Supabase user immediately. Alternatively email support@postlytics.app.

Children

Postlytics is not directed at children under 16 and we do not knowingly collect data from them.

Changes

We may update this policy as the app evolves. Material changes will be announced in the app or on this page, and the date above will be updated.