Your accounts deserve a clear privacy story.

1. What Bustem does

Bustem lets you look up Instagram profiles and review changes between connection-list samples. A subscription enables automatic checks for one selected public profile, manual checks, optional notifications, and a 90-day activity timeline. You may save up to five public profiles, but only one is actively checked at a time.

For a private profile, you must already be an approved follower and must manually refresh the profile through Instagram’s website inside the app. Private-profile snapshots stay on that device and are not uploaded to Bustem’s servers.

Bustem is an independent service and is not affiliated with, endorsed by, or sponsored by Instagram or Meta.

2. Information Bustem handles

Account and authentication information

Bustem creates an anonymous application account so limited lookups and app state can work before Apple sign-in. If you use Sign in with Apple, Bustem receives Apple’s app-specific user identifier. Bustem does not request your name or email address through Sign in with Apple. Authentication tokens and account identifiers are processed to keep the session secure and associate access with your account.

Profile searches and public-profile information

When you search for or save an Instagram profile, Bustem processes the username or profile URL you enter. For public profiles, available information may include the profile identifier and username; display name, biography, image URL, privacy and verification status; follower, following, and post counts; samples of up to the newest 50 followers and 50 followed accounts; scan times, count changes, newly observed connections, coverage warnings, and saved-target status.

These samples are not a complete account history. A person disappearing from a sample does not establish that they unfollowed an account.

Private-profile information stored only on your device

For private profiles, Bustem opens Instagram’s website in an on-device web view. Instagram receives information directly from your device under its own privacy policy. Credentials and cookies are handled by Instagram and the web view; Bustem does not receive or transmit your Instagram password.

After you request a refresh and Instagram confirms access, the app reads the follower and following usernames visible to your logged-in account. A started capture is limited to three attempts in a rolling 24-hour period and at least one hour between attempts. The resulting snapshot and activity history are encrypted on the device using a key stored in the iOS Keychain, use iOS file protection, are excluded from backups, and are not uploaded to Bustem’s backend.

Purchases, notifications, and product operation

Apple processes payments. Bustem and RevenueCat process information needed to provide and restore access, including product identifier, subscription status, purchase environment, expiration date, and transaction or entitlement references. Bustem does not receive your payment-card details.

If you enable notifications, Bustem processes the Apple Push Notification service device token, notification preference, delivery state, and its association with your Bustem account. Notification text is designed not to expose the tracked username on the lock screen.

Bustem’s infrastructure necessarily receives technical request information such as IP address, timestamps, and request metadata. For lookup abuse prevention, Bustem stores a salted hash derived from an IP address rather than the raw address, along with account-based rate-limit counters.

Bustem records a limited set of product-interaction events—app opened, preview viewed, paywall viewed, purchase started, and purchase verified—to understand whether the core flow works. Bustem contains no third-party advertising SDKs and does not track people across other companies’ apps or websites for advertising.

3. Why Bustem uses information

• Provide requested lookups, saved targets, checks, history, and account features.
• Verify subscriptions and restore purchased access.
• Deliver optional notifications.
• Enforce limits, secure the service, prevent abuse, and diagnose failures.
• Measure whether important product flows are operating.
• Comply with legal obligations and enforce the Terms of Use.

Where European Economic Area, United Kingdom, or similar laws apply, the legal bases may include performance of the service contract, legitimate interests in security and reliability, consent for optional notifications, and compliance with legal obligations.

4. Service providers and disclosures

Bustem shares information only as needed to operate the service, comply with law, protect rights and safety, or complete a business transfer subject to appropriate safeguards. Current providers include:

• Apple for distribution, Sign in with Apple, payments, refunds, and push notifications.
• Supabase for authentication, hosted database, edge functions, and backend infrastructure.
• RevenueCat for subscription and entitlement management.
• RapidAPI and the configured Instagram data provider for public-profile lookup and connection-list samples.
• Instagram/Meta when you choose the private on-device web flow or open an Instagram link.
• Profile-image hosts when the app loads an image returned with public-profile information.

Providers may process information in countries other than your own. Bustem does not sell personal information or share it for cross-context behavioral advertising.

5. Retention

• Public-profile scan samples, observations, and archived-target history: up to 90 days.
• Completed scan-job records: approximately 91 days.
• Product-interaction and webhook-processing records: up to 90 days.
• Short-term manual-usage records: approximately two days.
• Rate-limit records: the applicable limit window plus cleanup time.
• Push tokens: while needed for enabled notifications or until deleted or invalidated.
• Subscription and transaction references: as needed for purchased access, refunds, fraud prevention, and legal or accounting obligations.
• Private-profile snapshots: only on the device until removed as described above.

Deletion from the live service may not immediately remove isolated disaster-recovery backups, which expire under the infrastructure provider’s backup cycle.

6. Website analytics

This website does not currently load Google Tag Manager, Google Analytics, Microsoft Clarity, or another analytics provider. It sets no analytics cookies and sends no website-usage events to those services.

If website analytics are added later, Bustem will update this policy and introduce the required consent controls before those providers are enabled.

7. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; receive a portable copy; withdraw consent; appeal a decision; or complain to a data-protection authority.

• Disable notifications in Bustem or iOS Settings.
• Remove individual saved profiles.
• Delete your Bustem account and associated server data in Settings → Delete account and data, followed by Apple identity confirmation.
• Email mahmudhanadiadv@gmail.com for a privacy request.

Deleting a Bustem account does not cancel an Apple subscription. If your request concerns a public profile appearing in Bustem, include the username and describe the request. Bustem may request reasonable verification while avoiding unnecessary identity documents.

8. Children

Bustem is not intended for anyone under 18 and does not knowingly collect personal information from children as app users. Contact Bustem if you believe a child has provided personal information through the service.

9. Security

Bustem uses safeguards designed to protect information, including encrypted network connections, access controls, per-user database restrictions, server-only credentials, and on-device encryption for private-profile snapshots. No security method is guaranteed to be completely secure.

10. Changes and contact

This policy may be updated when Bustem’s features, providers, or legal obligations change. The revised policy will display a new effective date and additional notice where required.

For privacy questions or requests, email mahmudhanadiadv@gmail.com. You can also visit Bustem Support or read the Terms of Use.