NEFORUM privacy policy

Who we are

NEFORUM is a free and open-source app made by Neforus (neforus.com). This policy covers the NEFORUM app on every platform, including the Meta developer apps it uses to post to Facebook Pages, Instagram and Threads. If you created your own Meta app to use NEFORUM and entered this page as its privacy policy, this policy also describes how that app handles data: only NEFORUM on your own device uses it, and nothing it receives is sent to Neforus. Contact: neforus.business@gmail.com.

What we collect

Nothing. Neforus does not run a NEFORUM server, so no information about you, your accounts or your posts is ever sent to us. NEFORUM has no ads, no analytics, no tracking and no NEFORUM account.

What stays on your device

To work, NEFORUM keeps the following on the device where you use it:

• The accounts you connect (for example the name, username and ID of a Facebook Page, an Instagram account or a Threads profile).
• Access tokens and API keys for those accounts, stored in your system's secure storage: Keychain on Apple devices, Keystore on Android and DPAPI on Windows.
• Your posts, drafts, schedules, attached media, settings and an activity log, in NEFORUM's app data folder.

What leaves your device

• Your posts go directly from your device to the networks you choose, under those networks' own privacy policies.
• Scheduled posts are handed to networks that can publish them later themselves (such as Facebook Pages, Mastodon, YouTube, Tumblr, WordPress and Ghost), so they go out even when your device is off.
• Media hosts: if you pick a media host in Settings, photos and videos for networks that need a public web address (Instagram and Threads in API mode) are uploaded there.

NEFORUM does not sell, rent or share your information with anyone.

Facebook, Instagram and Threads

NEFORUM only asks Meta for the permissions it needs to publish what you write:

• Facebook Pages: pages_show_list, pages_read_engagement, pages_manage_posts and business_management, used to list the Pages you choose, publish and schedule your posts, and take back scheduled posts you edit or delete.
• Instagram (professional accounts): instagram_business_basic and instagram_business_content_publish, used to read your account's name and ID and publish your photos, videos and carousels.
• Threads: threads_basic and threads_content_publish, used to read your profile's name and ID and publish your posts and threads.

The access tokens are stored on your device as described above. Data received from Meta is never used for advertising, never shared and never sent to Neforus.

Deleting your data

Because Neforus holds no data about you, there is nothing to request from us. To delete what NEFORUM keeps on your device:

1. One account: in NEFORUM, open Accounts, open the account's menu and choose Disconnect.
2. Everything: open Settings → Data & privacy → Delete everything.
3. Facebook access: on Facebook, go to Settings & privacy → Settings → Business integrations (or Apps and websites) and remove the app. This revokes NEFORUM's access to your Pages.
4. Instagram access: in Instagram, go to Settings → Apps and websites and remove the app.
5. Threads access: in Threads, go to Settings → Account → Website permissions and remove the app.

Posts you have already published stay on each network until you delete them there. For help, email neforus.business@gmail.com.

Children

NEFORUM is not directed at children under 13, and Neforus does not knowingly collect any information from them (or from anyone else).

Changes

If this policy changes, the new version will be posted on this page with a new date.