Updated October 10, 2026
Diffi Privacy Policy
Controller and contact
Diffi is operated by Lucas del Río. Contact privacy@diffi.app for privacy, access, correction or deletion requests.
Data we use
Connecting X gives us your account ID, name, username, profile image, creation date and authorization tokens. Archive imports send post text, IDs, dates and available metrics to our server. We store review decisions and operation results. The ZIP is processed on your device and is not uploaded in full.
Purpose
We use this data to display your history, save decisions, link accounts and perform deletions you confirm. When purchases are enabled, customer and transaction IDs verify payments and maintain shared credits. We do not receive your card details or X password.
Providers
X handles authorization and post operations. Vercel hosts the API and Turso hosts the database. Expo distributes the app and updates. RevenueCat and Apple or Google handle purchases when enabled. Providers may process data outside your country and keep records under their own policies. We do not use your posts for advertising or sell your archive.
Device and technical records
Native sessions are stored in secure device storage; language preferences are stored locally. Infrastructure providers may log technical request data, such as IP addresses, dates and errors, to operate and protect the service.
Retention and deletion
Profiles, archives, decisions and credits remain while you keep your account. Disconnecting an account removes its profile and archive but keeps its recovery link and shared credits. Deleting your Diffi account removes all linked profiles, archives, decisions, sessions, links, credits and associated purchase records from our operational database. We keep technical event IDs and hashes of former purchase customers to prevent repeated notifications from recreating deleted data; these contain no post text or X tokens.
Deletion scope
Deleting Diffi does not delete your X account or posts, request refunds or remove your original ZIP. Store and RevenueCat payment records, infrastructure logs and backups follow those providers’ policies and retention periods. Contact support for help requesting their deletion.
Your choices
Sign out, disconnect an account, revoke access in X or use Account → Delete my Diffi account. You can also request deletion without installing the app through the deletion page. Never email passwords, tokens or your post archive.
Changes
Changes will be published here with an updated date. If data use changes, we will update the information and seek authorization when required.