Privacy policy

Feedz is run by Bounz Ltd, a company registered in England and Wales (company number 14283718), registered office 167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF. We're the controller of the personal data described here. Questions, requests or complaints: privacy@feedz.bio.

Your account

Your username, email address and password (or your Google or Apple sign-in), handled by our sign-in provider, Clerk. Your display name, bio, picture and banner if you add them. Why: to run your account — that's the contract between us.

Your page and what you post through Feedz

Your feedz.bio page is public: your name, picture, bio, links, the platforms you've verified, and your posts from them. So are broadcasts, drops, lists you publish and your “start here” list. Platforms you've connected but not yet verified stay visible only to you.

Platforms you connect

A creator connects platforms so their posts appear on their page and in their followers' loops. Some connect with a link; others ask you to sign in with the platform, and we store the access it gives us — encrypted (AES-256) — until you disconnect. We only ever read; Feedz never posts to your accounts.

To prove a handle is yours, you can put a short code in that platform's bio; we read the public bio to check it. Codes expire after 24 hours, and you can take the code out as soon as it's checked.

YouTube API Services

Feedz uses YouTube API Services. By using Feedz you agree to be bound by the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy. We don't ask you to sign in with Google to connect YouTube. If you sign in to Feedz with Google, you can remove Feedz's access at Google's security settings.

Everything we show from YouTube is checked with YouTube again within 30 days: changes are picked up, and a video that's been deleted or made private disappears from Feedz.

Instagram and TikTok

What we read from Instagram and TikTok is shown on Feedz and nowhere else: it isn't passed to the embed, our API, webhooks or the fediverse. If you remove Feedz from either app, or ask Instagram to delete your data, we disconnect you and delete what we took. Instructions are on our data deletion page.

The creators you follow, and your loop

Who you follow, how often you want to hear about each of them, what you save and the lists you make. When you open your loop we note when, roughly how long for, how many posts you saw and from which platforms — that's what your Loop Report and the “time back” estimate are made from. If you allow notifications, we store your browser's push address. Why: to run the service you asked for.

Bringing your follows from other apps

If you import who you follow — from Bluesky, a YouTube (Google Takeout) export, Twitch, Spotify or a podcast app — we read the list once so you can choose who to bring. YouTube and podcast exports are read in your browser; the list of creators is kept for up to a day while you choose, then deleted. We follow only the people you tick.

The waitlist

Your email address, the @ you reserved, whether you're a fan or a creator, where creators post and what they make, the creators fans want in their loop, where you came from (a link or page), and whether you asked for launch updates. Why: to hold your name, invite you, and decide who to invite first — your request, and our legitimate interest in opening carefully. We email you to confirm, and again when your invite is ready. Launch news only if you ticked the box. Every email has a link that deletes your entry. Unconfirmed entries are deleted after 30 days.

Creators who aren't on Feedz yet

When a fan follows a creator who hasn't joined, we make an unclaimed page from their public posts — name, picture, handle, post titles, thumbnails and links — always linking to the original and clearly marked as unclaimed. We don't collect anything private. We rely on legitimate interest — giving fans one place to keep up with public posts — balanced against the creator's rights: they can claim the page by proving it's theirs, or remove it at once from the link on the page, without an account.

Payments

Paid plans are billed by Stripe. Stripe handles your card; we never see it. We keep your plan, its status and renewal date.

Product analytics

We use PostHog, hosted in the EU, to count which pages and features get used — signed-in events are linked to your account, so we can tell what helps. It stores nothing on your device (no cookies, no local storage), we don't record sessions or keystrokes, and we strip query strings from addresses before they're sent — all but campaign tags like?ref=, which tell us which link brought you. Our basis is legitimate interest in improving Feedz; you can object at any time:

If your browser sends a Global Privacy Control signal, we treat it as a no automatically.

Developers and connected apps

With Creator Studio, the API keys and webhooks you create and a log of webhook deliveries (kept 14 days). If you let another app “Connect with Feedz”, we record that permission until you revoke it in Settings.

The fediverse

If you switch on following from Mastodon, your public posts are shared with the servers of the people who follow you there, and we keep their public account addresses so we can deliver to them.

Keeping Feedz safe

Our servers see your IP address and browser, and we keep short-lived rate-limit records (some keyed by a scrambled, one-way version of your IP) to stop abuse. Our hosting and database providers keep operational logs for a few weeks.

• Sell or rent your personal data, or share it with advertisers.
• Rank your loop or profile you to decide what you see — there are no automated decisions about you.
• Show a creator who you are. They see totals — how many people followed or saved — never people.
• Post to your accounts, or read anything from a platform beyond what's listed above.

Only the services that run Feedz for us, under contracts that limit them to doing that:

Where data goes to the United States, it's protected by the UK–US data bridge (for certified providers) or by the UK's International Data Transfer Agreement or Addendum. The platforms in section 2 receive our requests to read your content, under their own privacy policies. We'll disclose data if the law requires it, and we'd tell you unless we're not allowed to.

When you delete your account, we hide it straight away and erase everything tied to it within minutes. Copies in our providers' routine backups are overwritten on their own schedule, normally within 30 days.

Under UK data protection law you can ask for a copy of your data, have it corrected or deleted, restrict or object to how we use it, and take it to another service. Email privacy@feedz.bio — we'll reply within a month. Some things you can do yourself, right now:

• Delete your account: Settings → Edit account → Security → Delete account.
• Disconnect a platform: Settings → Platforms.
• Stop emails: the unsubscribe link in any of them, or Settings → Feed.
• Leave the waitlist: the link at the bottom of any waitlist email.
• Remove an unclaimed page about you: the “remove this profile” link on it.
• Turn off analytics: the switch in section 2.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk — though we'd like the chance to put it right first.

Your whole account: Settings → Edit account → Security → Delete account. That ends any paid plan in Stripe and erases your data from Feedz — your page, posts, follows, saves, lists, connected platforms and their access, and your waitlist entry.

Just one platform (for example Instagram or TikTok): Settings → Platforms → disconnect it. We delete its access straight away and remove its posts from Feedz. You can also remove Feedz from the platform's own settings — Instagram: Settings → Apps and websites; TikTok: Settings → Security → Manage app permissions.

Can't sign in? Email privacy@feedz.bio from the address on your account and we'll do it for you.

Feedz is for people aged 13 and over, and we don't knowingly collect data from anyone younger. If you think a child under 13 has an account, email privacy@feedz.bio and we'll delete it.

Everything travels over HTTPS; platform access is encrypted at rest; access to our systems is limited and logged. No system is perfectly secure — if you find a problem, please tell us at security@feedz.bio.

If we change this policy in a way that matters, we'll tell you by email or in the app before it takes effect. The date at the top says when it last changed. See also our cookie policy and terms.