Privacy
Privacy policy
Last updated 26 September 2026
istakan («استكان») is the app where a business plans its social posts and publishes them. This page says what we collect, why we collect it, and how to ask us to delete it.
The app is for people 18 and older who run a business. It is not made for children.
Account
When you create an account we collect your name, your email address, and your phone number if you sign in with a phone. If you choose a password, we store it only as a hash. If you use Google or Apple, we receive the sign-in confirmation those companies send us.
We use this to open your account and keep the session yours.
Your business
You can add a business name, description, category, colors, tone, language, and rules about what not to mention. We use that to draft posts in the voice of the business.
Plans and posts
Captions, plans, and the times you choose are stored so the app can show your day and publish when the plan says to. Drafting a caption or an image sends that request to Google Gemini. We do not send your uploaded document files to the writing model.
Photos, files, and links
Logos, product images, and post images are stored so they can appear in your posts. PDF and Office files you upload are stored. This version does not read the text inside those documents.
If you add a web address as a knowledge source, we fetch that page and may use a short excerpt when drafting.
Channels you connect
If you connect Facebook, Instagram, or LinkedIn, we store the access those networks give us so we can publish a post you approved. Publishing is an action you start. People who use istakan do not see each other’s posts inside the app.
A post that has already gone out stays on that network until you remove it there. Disconnecting a channel stops future posts. It does not delete posts that already published.
Device and diagnostics
The app uses Google Firebase for product analytics, performance diagnostics, push notifications (including a device token), and messages we show inside the app. These are not third-party ads.
If the device provides an advertising ID, Firebase may receive it for analytics. We do not use it to show ads. The app does not contain ads.
A sign-in session may include an IP address and the app or browser details, so the session stays secure. That session data is removed when the session ends or the account is deleted.
What we do not do
- We do not sell your information.
- We do not share it for advertising.
- We do not show ads in the app.
- We do not show you other customers’ content inside istakan.
Who processes it
These companies process data only for the feature that needs it. They may do that outside Iraq.
- Google — sign-in, Firebase, and Gemini drafts
- Apple — if you sign in with Apple
- Meta (Facebook and Instagram) and LinkedIn — only after you connect them and a post publishes
- Cloudflare — stored images and files
- Google Cloud — the application servers
How long we keep it
We keep the account, the business, and the posts while the account is open. After you ask us to delete the account, we delete that data within 30 days. Posts already published on a social network are not removed by that deletion.
Security
Traffic to the app is encrypted in transit. Passwords are not stored as plain text.
Delete your account
There is no delete button inside the app yet. Email support@istakan.app from the email on the account. Use the subject “Delete my istakan account”. If you signed in with a phone, include that number. The steps are on the delete-account page.
Children
istakan is not directed to anyone under 18. We do not knowingly collect their information. If you believe a child has an account, write to support@istakan.app.
Changes
If this policy changes, we update the date at the top of this page.
Contact
Questions about this policy: support@istakan.app.