Privacy Policy
Last updated: 27 August 2026
Antlitz follows the Instagram profiles and WhatsApp contacts you choose and shows their profile photo and about changes as a feed. To do that for Instagram, it uses publicly available information. If you want to use the WhatsApp integration, it stores your account, the link to your WhatsApp account, and the versions it finds. This page explains exactly what is stored, why, who else sees it, and how to get rid of it. There is no advertising and no selling of data.
Who is responsible
Cederic Demoulin
Esterhazygasse 6/8
1060 Wien, Austria
Email: cdemoulin[at]protonmail.com
What we collect
Your account
- Email address, and a username if you set one
- Your password, stored only as a salted hash
- If you sign in with Apple or Google: the identifier and email address that provider returns. With Sign in with Apple this may be a private relay address, which we use only to email you.
- Your notification and language preferences
Instagram profiles you follow
- For each username you add we fetch publicly visible profile data: name, biography, links, post and follower counts, whether the account is private, and the profile picture. No login to Instagram is required or used, and only public data is read.
- Snapshots are stored over time so changes can be shown
Your WhatsApp link
- The linked-device credentials created when connect Whatsapp, which is completely optional. They live on our server and let Antlitz act as an additional linked device of your WhatsApp account, the same way WhatsApp Web does.
- Your own WhatsApp ID
- Your WhatsApp contact list: WhatsApp IDs and the display names WhatsApp provides, plus the groups you are in and their participants. This is synced so you can pick who to follow.
- Antlitz never reads, sends or stores your messages. It does not post anything and does not message anyone.
The contacts you follow
- Every 8 hours we fetch information of each contact you follow. We only fetch publicly available information or, if you linked WhatsApp, the information that WhatsApp already shows your account.
- Updates are stored as their own version with a timestamp, so the history stays available after it gets updated.
Device and usage data
- Push notification tokens from the iOS app, if you allow notifications
- Server logs: IP address, browser or app version, requested page and time
- Product analytics: pages viewed and a few actions such as opening the feed, collected through PostHog
About the people you follow
Following someone stores information about them on our servers. This is only information that is already publicly available or shared with your WhatsApp account.
Antlitz sees only what WhatsApp already shows your account. If a contact hides their photo or about text from you, nothing is fetched. Contacts are not notified, and their data is never shown to other users who do not follow them.
If you are a contact of a Antlitz user and want your stored photos and about texts deleted, write to the address above and we will remove them.
Who else sees your data
We do not sell, rent or trade your data. We use a small number of processors and each only gets what it needs:
- Hetzner — servers and database, Germany
- PostHog — product analytics, EU hosting
- Apple — push notification delivery and, if you use it, Sign in with Apple
- Google — only if you choose to sign in with them
- IONOS — sending the emails you asked for
These providers are bound to protect the data at least as we do, and may not use it for their own purposes. Beyond them, data is disclosed only with your consent or where the law requires it.
How long we keep it
- Account data, follows and saved versions: until you delete them or delete your account
- Unlinking WhatsApp deletes the device credentials and your synced contact list
- Server logs: a few weeks
Deleting your account
You can delete your account at any time under Settings → Delete account, in the app and on the website. This immediately and permanently removes your account, your WhatsApp link and synced contacts, your follows and your device tokens. There is no waiting period and no need to email anyone.
Security
Traffic is encrypted with TLS. Passwords are stored only as salted hashes. WhatsApp device credentials are kept per user and are not shared between accounts. Access to the production server is limited to the operator.
Cookies
We use a session cookie to keep you logged in, and small cookies that remember your theme and language. PostHog sets a cookie to recognise a returning browser for analytics. There are no advertising cookies and no cross-site tracking.
Children
Antlitz is not directed at children and we do not knowingly collect data from anyone under 16.
Changes
If this policy changes, the new version appears on this page with a new date. Significant changes are announced by email.
Contact
Questions about this policy or your data: cdemoulin[at]protonmail.com