Privacy Policy

Last updated: 15 August 2026

Kiut schedules and publishes posts to Instagram, and shows you the engagement those posts receive. This page describes exactly what we store to do that, why, and how to get rid of it. It covers the Kiut web app at app.kiut.app.

What we collect

Your account

Your email address. We use it to sign you in with a one-time link and to contact you about the service. We never store a password, because we do not use one.

Your Instagram connection

When you connect an Instagram professional account we store its user ID, username, profile picture URL and the access token Instagram issues to us. The access token is encrypted at rest and is never shown in our interface or written to our logs. We request only the permissions the product uses: reading your profile and media, publishing content, and reading comments and messages.

Content you create

Captions, images and videos you upload, scheduled times, alt text, and the accounts you tag or add as collaborators. Uploaded media is served from a public URL, because Instagram has to download it from us in order to publish it.

Engagement on your posts

Posts on your profile — including ones you did not publish through Kiut — with their like and comment counts over time, the comments themselves (author username, text, timestamp), and mentions of your account. Instagram does not tell anyone who liked a post, so neither do we; we only ever see the number.

Direct messages

If you enable it, conversations and messages from your Instagram inbox, so you can read and reply from Kiut. This includes messages other people sent you. Instagram only lets an app reply to someone who messaged you first.

Technical records

Every request we make to Instagram and every notification Instagram sends us is recorded, including the request and response bodies, so that a failed post can be explained rather than guessed at. Access tokens and application secrets are stripped from these records before they are written.

What we do not do

• We do not sell your data, and we do not share it for advertising.
• We do not post, comment or send messages on your behalf without you asking.
• We do not read messages or comments of accounts you have not connected.
• We do not use your content to train machine learning models.

Where it is stored

Data is stored in a PostgreSQL database hosted by Supabase in the United States, and uploaded media on our own server. Traffic is served over HTTPS. The only third parties that receive your data are the ones required to run the service: Meta (Instagram), our database host, and our infrastructure provider.

How long we keep it

As long as your account exists. Disconnecting an Instagram account removes our access to it immediately and revokes the stored token. Deleting your account removes your data, including posts, engagement and messages.

Your choices

You can disconnect an Instagram account at any time from the Channels screen in Kiut, or revoke Kiut's access from within Instagram under Settings → Apps and websites. To request a copy of your data or its deletion, write to privacidade@kiut.app and we will answer within 30 days.

Changes

If we change what we collect or why, we update this page and the date at the top. Material changes are announced in the app before they take effect.

Kiut is operated from Brazil. Questions: privacidade@kiut.app.