Postmeter
Legal · Updated September 12, 2026
Privacy.
What Postmeter collects, why, how long we keep it, and how to get rid of it.
- Screen Time data (which apps you lock, how long you spend in them) stays on your iPhone. It is never sent to us.
- When you connect TikTok, Instagram, YouTube, X, Snapchat or Reddit, we read your stats. Read-only. We never post, like, follow, comment or read your messages.
- We don't sell your data, we don't show ads, and we don't use your data to train AI models.
- This website sets no cookies and loads nothing from anyone else.
- Disconnect a platform or delete everything whenever you like: here's how.
Who we are
Postmeter makes the Postmeter iPhone app, the website at postmeter.app, and the bio links and cards the app creates (together, "Postmeter"). Postmeter is operated by LEGAL ENTITY NAME, ADDRESS, which is the controller of the personal data described here. Questions go to privacy@postmeter.app.
This policy covers everyone Postmeter touches: people who use the app, people who tap a Postmeter bio link, and people who visit this website.
What we collect
Your account
You sign in with Apple. Apple gives us a user identifier that is unique to Postmeter and, the first time only and only if you allow it, your first name and email address. If you choose "Hide My Email", we get a relay address and never your real one. You can also look around as a guest without an account.
Your subscription
Subscriptions are sold and billed by Apple through the App Store. We never see your card or billing details. Apple tells the app which plan you have, whether you're in a free trial, when it renews or expires, and a transaction identifier. We use that to unlock Postmeter.
Your posting setup
The platforms you post on, how many posts a day, how long a posting session lasts, your session history, cooldowns and when your setup unlocks. This lives on your phone. See Screen Time.
Connected platforms
If you connect a social platform, we store the access tokens that platform issues and the stats described in Platforms.
Your bio link and tracked videos
The address you want clicks to land on, the handle in your Postmeter link, links to any videos you ask Postmeter to track, and click counts for your link (see Bio link).
App diagnostics
If you've turned on "Share with App Developers" in iOS, Apple sends us anonymous crash reports and usage statistics. Postmeter contains no third-party analytics or advertising code.
Messages you send us
If you email us, we keep your email address and what you wrote so we can answer.
This website
postmeter.app sets no cookies, runs no analytics and loads no fonts, scripts or images from other companies. Like every website, our hosting provider briefly keeps standard request logs (IP address, browser, page, time) to keep the site running and secure.
Screen Time stays on your phone
Postmeter uses Apple's Screen Time API (Family Controls, Managed Settings and Device Activity), and only after you give permission. That is how it keeps social apps locked and opens one for a posting session.
- We can't see your apps. When you pick the apps to lock, iOS hands Postmeter unreadable tokens instead of app names. They mean nothing off your device.
- Everything stays on the device. Which platform each token belongs to, your posting sessions, cooldowns, your "one more minute", your setup lock, and the minutes you spend in social apps are stored in Postmeter's container on your iPhone and processed there.
- None of it reaches us. Screen Time data is not sent to our servers, not used for advertising, and not shared with anyone. The only way it leaves your phone is a card you choose to share yourself.
- Turning it off. Remove Postmeter's access in iOS Settings under Screen Time, or delete the app. iOS then removes every lock Postmeter set.
Connected platforms: read-only
Connecting a platform is optional, and each one is separate. When you connect one, you sign in on that platform's own screen and approve the access listed below. Every night, and whenever you refresh, Postmeter uses that access to read your latest numbers.
Postmeter never posts, uploads, comments, likes, follows, sends or reads messages, or touches anyone else's private data, on any platform. We only ask for the access listed here. Connections go live one platform at a time, and the app shows which ones you can connect today.
| Platform | Access we request | What we read | Revoke it |
|---|---|---|---|
| TikTok | Login Kit and Display API: user.info.basic, user.info.profile, user.info.stats, video.list |
Your TikTok ID, display name, avatar, profile link and bio; follower, following, like and video counts; your public videos with their view, like, comment and share counts. | In Postmeter, or in TikTok under Settings and privacy → Security & permissions. |
Instagram API with Instagram Login: instagram_business_basic, instagram_business_manage_insights |
Your account ID, username, profile picture and follower count; your posts and reels with views, reach, likes, comments, shares and saves; account insights like profile visits and link taps. Needs a Creator or Business account. | In Postmeter, or in Instagram under Settings → Website permissions → Apps and websites. | |
| YouTube | YouTube Data API and YouTube Analytics API: youtube.readonly, yt-analytics.readonly |
Your channel ID, name, avatar and subscriber count; your videos and Shorts with views, likes, comments and watch time. | In Postmeter, or at Google security settings. |
| X | X API with OAuth 2.0: users.read, tweet.read, offline.access |
Your user ID, handle, name, avatar and follower count; your posts with impressions, likes, reposts, replies and bookmarks. | In Postmeter, or in X under Settings and privacy → Security and account access → Apps and sessions. |
| Snapchat | Snap Login Kit: user.external_id, user.display_name, user.bitmoji.avatar |
Your Snap ID for Postmeter, display name and Bitmoji avatar, plus public stats on your Spotlight and Stories wherever Snap makes them available to apps. | In Postmeter, or in Snapchat under Settings → Connected Apps. |
Reddit API with OAuth: identity, history, read |
Your username and karma; your posts with their score and comment counts. | In Postmeter, or at reddit.com/prefs/apps. | |
| App Store Connect | A read-only API key you create for your own app | Download and install counts for your app, by day and by Postmeter campaign link. Totals only. Never who installed. | In Postmeter, or in App Store Connect under Users and Access → Integrations. |
Access tokens are encrypted when stored. They're used only to fetch your numbers. Disconnect a platform and we delete its tokens right away, then its stats as described in Keeping it.
YouTube and Google
Postmeter uses YouTube API Services. By connecting YouTube you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. You can revoke Postmeter's access at any time from Google's security settings. Data we get from YouTube is refreshed or deleted at least every 30 days. If you revoke access or ask us to delete it, it's gone within 7 days.
Postmeter's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
TikTok, Instagram and the rest
We use data from every platform only to show you your own numbers, and we follow each platform's developer terms. That includes TikTok's Developer Terms of Service, Meta's Platform Terms, the X Developer Agreement, the Snap Developer Terms and Reddit's Developer Terms. We don't sell platform data, give it to data brokers, or combine it with other sources to build a profile of you. To delete Instagram or Facebook data specifically, see data deletion.
Your bio link
Postmeter gives you a short link for your bio that forwards to the address you choose, so you can see how many people a video sent your way.
If you tap someone's Postmeter link, we record one click: when it happened, which link, the app or site you came from (for example "Instagram", based on your browser's referrer and user agent), your device type and operating system, and your country. We work out your country from your IP address, then discard the address. It is not stored with the click. We also use it briefly to filter bots and abuse.
Link clicks set no cookies, use no fingerprinting, and don't follow you to other sites. The person who owns the link sees totals only, like "212 clicks from TikTok this week", and never anything about you in particular.
How we use it
- To run the app: keep your social apps locked, open and close posting sessions, and apply your setup.
- To show you your numbers: the funnel, the tracker, the cards and the nightly check.
- To forward and count taps on your bio link.
- To manage your subscription, answer support, and tell you about changes that affect you.
- To keep Postmeter secure, prevent abuse and fraud, and meet legal obligations.
We don't use your data for advertising, don't sell or rent it, and don't use it to train AI models.
If you're in the EEA, UK or Switzerland, we rely on these legal bases: performing our contract with you (running the app and your subscription); your consent (Screen Time permission and each platform connection, which you can withdraw at any time); our legitimate interests (counting link clicks in aggregate, security and preventing abuse), balanced against your rights; and legal obligations (tax and accounting records).
Who we share it with
- Service providers who host our servers and database and deliver our email. They process data only on our instructions, under contracts that require them to protect it.
- Apple, for Sign in with Apple, subscriptions and crash reports.
- The platforms you connect. Our requests to them carry your access token, as their APIs require.
- Authorities, when the law requires it and only after we have checked that the request is valid.
- A buyer or successor, if Postmeter is merged or acquired. This policy will keep applying to your data, and we'll tell you before anything changes.
That's the whole list. We don't sell personal information or "share" it for cross-context behavioral advertising, as California law defines those terms, and we never have.
How long we keep it
| Data | Kept |
|---|---|
| Everything on your phone | Until you sign out or delete the app. |
| Account | Until you delete your account. |
| Platform access tokens | Until you disconnect that platform. They're deleted right away. |
| Platform stats | While your account exists, and deleted within 30 days of disconnecting. YouTube data is refreshed or deleted every 30 days and removed within 7 days of revoking access. |
| Bio link clicks | Individual clicks for 90 days, then daily totals only. |
| Subscription records | As long as tax and accounting law requires. |
| Support emails | Up to two years after the conversation ends. |
| Website request logs | Kept by our host, usually no more than 30 days. |
When you delete your account, we delete your data from our live systems within 30 days. Backups roll off within another 35 days.
Your rights
Wherever you live, you can ask us to show you the personal data we hold about you, correct it, delete it, or give you a copy in a portable format. You can also object to or restrict how we use it, and withdraw consent at any time. Residents of California and other US states have the same rights under their state laws, and we won't treat you differently for using them.
Email privacy@postmeter.app. We'll confirm it's really you, usually by replying to the email address on your account, and answer within 30 days. If you think we've got it wrong, you can complain to your local data protection authority. We'd appreciate the chance to fix it first.
Deleting your data
Step-by-step instructions, including for Instagram and Facebook, are on the data deletion page.
Security
All traffic is encrypted in transit. Access tokens are encrypted at rest, and only the few systems that fetch your numbers can read them. Only the people who need access have it. No system is perfectly secure. If a breach ever affects you, we'll tell you and the relevant authorities as the law requires.
Where your data lives
Our servers are in the United States. When we move personal data out of the EEA, UK or Switzerland, we use the European Commission's Standard Contractual Clauses (and the UK and Swiss equivalents) or another lawful transfer mechanism.
Children
Postmeter is not for anyone under 16, and we don't knowingly collect data from them. If you believe a child has given us personal data, email privacy@postmeter.app and we'll delete it.
Changes
If we change this policy, we'll update the date at the top. If a change matters, for example new data we collect or a new way we use it, we'll tell you in the app before it takes effect. If it needs your consent, we'll ask for it.
Contact
Privacy questions or requests: privacy@postmeter.app. Anything else: hello@postmeter.app.