Data we process
Account email, display name, membership and payment status may be processed. Support requests may include a random installation ID, app/browser version and limited diagnostics. Kitlevo does not store Instagram passwords, two-factor codes or raw session cookies.
Purpose and legal basis
We use data to operate accounts and subscriptions, protect the service, verify scan allowances, answer support requests and meet legal duties. The basis may be contract performance, legitimate interests, legal obligations or consent where required.
Processors and retention
Supabase may provide authentication/database services and Dodo Payments may provide billing and invoicing. Only necessary data is shared. Records are deleted or anonymised when their purpose and applicable retention period end.
Your choices
You may request access, correction, deletion, restriction or object to processing through [email protected] or the support panel. Reasonable identity verification may be required.
Instagram linking and one-time trial
Membership is linked to one Instagram account identity. Changes are limited to once every 30 days; active Pro requires a support request and administrator approval. The trial offers 7 days and up to 6 daily scans. Deleting an account, signing up again or disconnecting does not renew the trial or daily quota. The extension sends the signed-in numeric Instagram ID to the Supabase server for linking checks; the raw ID is not permanently stored. Server-keyed hashes of the Instagram ID and verified email, initial trial and change dates remain after account deletion for abuse prevention while the trial program operates. These are pseudonymous, not anonymous records and are not used for advertising. Limited daily quota usage records are cleaned after 7 days. Instagram passwords and session cookies are not sent; archive contents remain on your device. Contact Support about your data rights.
Local analysis and account type monitoring
Extension follower lists, scan history and imported Instagram archives are processed in your browser, without membership-based cloud sync. Optional account type monitoring runs while your device is off, so the server stores the username you add, platform ID where available, latest privacy status, schedule and notification choices. Necessary profile identifiers are sent to Apify or ScrapeCreators for checks; your Instagram password and session cookies are not sent to these providers. Removing a target stops new checks and deletes the active target record; limited check history may remain for up to 65 days. Contact [email protected] for support or data requests.
Optional website analytics
With your permission, we measure website use with Google Analytics 4. Google processes page addresses, device and browser details and approximate location; data may be processed abroad. Email, Instagram identity and scan lists are not sent to analytics. Preferences and measurement cookies last up to 180 days, which may renew during consented visits. Withdraw consent anytime through Cookie preferences in the footer. Google privacy information: https://policies.google.com/privacy.
Form security
Cloudflare Turnstile protects sign-in and support forms against abuse. Cloudflare may process connection and browser information for security verification. Privacy information: https://www.cloudflare.com/privacypolicy/.