Data Policy
This Data Policy describes what information iTweet processes to power the Service, why each category of information exists, how long it is kept, who it is shared with, and the choices and rights you have over it. It applies to everyone who uses iTweet on the web, on Android, or through any other supported client, whether you browse as a visitor or maintain a registered account. It is written as a companion to our Privacy Policy and Terms of Use; where those documents define your legal rights, this document explains in practical terms how we meet them. If you only read one section, read the rights section — it tells you how to see, download, correct, or delete your information at any time.
We collect three broad categories of information, and each category exists for a specific purpose. Understanding the category helps you understand what happens if you remove or restrict it.
Information you provide: profile details (name, username, email, phone number, date of birth, bio, profile and cover photos), the content you create (posts, reels, stories, comments, direct messages, listings, audio), the accounts you follow, the interests you pick during onboarding, the settings and preferences you choose, and anything you send us when you contact support, file a report, or submit a copyright notice. If you sign up through a multi-step flow, drafts of that information may be stored briefly so you can resume where you left off.
Information collected automatically: device identifiers, IP address, approximate location derived from IP, app version, operating system and language, battery and network state, crash logs and performance traces, session length, and interaction signals such as views, watch time, likes, shares, follows, searches, and scrolls. These signals power the ranked feeds, prevent spam and bots, and tell us when a feature is broken. They are not used to build advertising profiles sold to third parties.
Information from third parties: sign-in providers such as Google (your name and email when you use social sign-in), payment processors such as Google Play Billing (subscription status and transaction identifiers — never your full card number), push delivery services, and device-integrity signals such as Play Integrity that help us distinguish real devices from emulators used for abuse.
We use the information above to operate and improve iTweet: to create and secure your account, authenticate you, deliver the posts and reels you see, rank your Home and For You feeds, power search, Explore, and messaging, personalise recommendations, detect fraud, impersonation, and platform abuse, enforce our Community Guidelines and Copyright Policy, measure feature performance, and comply with legal obligations such as tax records and lawful requests.
Personalisation works by combining your interactions with signals from the content itself. You can reduce or turn off personalisation in Settings, in which case feeds fall back to chronological and engagement-neutral ordering. Aggregated, de-identified analytics are used to understand trends — for example, how many people finished a reel — and cannot be used to single you out. We do not sell your personal information, and we do not share it with advertisers for their own targeting.
Account data is retained while your account is active so the product works — your drafts, preferences, and history need to persist for you. When you delete your account, personal data is removed within 30 days, with two exceptions: records we must keep by law (tax, fraud, safety, legal-hold records) and rolling backups, which purge in the ordinary rotation cycle and are never restored for deleted accounts.
Some data has a shorter life by design. Security logs are kept for up to 90 days, crash traces for up to 180 days, ephemeral messages disappear after the timer you set, and stories archive after 24 hours unless you save them. Reports and enforcement records are retained longer where needed to detect repeat abuse and keep the community safe — see Strict issues and enforcement for how strikes are tracked and expire.
iTweet operates globally, so your data may be processed in countries other than your own, including India, the European Union, and the United States. Different countries have different data-protection laws, but we apply the same protections everywhere. Where required, we rely on approved safeguards such as Standard Contractual Clauses for transfers out of the EU and UK, and we follow local requirements for data stored in or routed through India. You can request details of the transfer mechanism that applies to your account by contacting us.
We protect data in transit with TLS, at rest with encryption, and in operation with role-based access controls — staff access to user data is limited, logged, and reviewed. Device-level integrity signals (such as Play Integrity) help us detect tampered clients, and continuous monitoring alerts us to unusual access patterns. End-to-end encrypted chats add a final layer: message content in those conversations can only be read on your devices, because the decryption keys never leave them. No system is perfect, and if a security incident ever affects your data, we will notify you and the relevant authorities as required by law.
You control your data. From Settings → Account you can access and correct your details, download an archive of your information, deactivate or delete your account, make your account private, block or restrict other users, turn off personalised feeds, manage notification preferences, and revoke access for connected devices. From Settings → Privacy you can control who can message you, comment, duet, stitch, mention, or find you via your contact list.
If you are in the EU, the UK, or India, additional statutory rights apply: access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your supervisory authority or Data Protection Board. We never condition core features on consenting to optional processing. To exercise any right that is not available in Settings, contact us and we will respond within the statutory window.
iTweet is not directed at children under 13 (or the minimum age required by your country's law, whichever is higher). We delete accounts and data belonging to people we learn are under the minimum age, and we provide a dedicated reporting path for parents and guardians through our child safety resources. If you believe a child under the minimum age is using iTweet, report the profile and we will act promptly.
To delete a specific post, reel, story, or comment, open it and choose Delete — removal takes effect immediately and cached copies purge shortly after. To delete your entire account, go to Settings → Account Management → Delete Account. Deletion is reversible for 30 days in case you change your mind; after that it is permanent, and the retention rules in section 4 apply. Downloads you exported remain on your device — we cannot reach files stored outside iTweet.
When this policy changes materially, we will notify you in the app before the change takes effect, and where a change reduces your protections we will ask for consent where the law requires it. The effective date at the top of the Privacy Policy always reflects the current version.
Questions about this Data Policy? Email privacy@itweet.online. For reports about content or accounts, use the in-app report flow or the bug report page; for copyright matters, use the copyright report form.