1. The short version

We collect what the app needs to do its job: who you are, the answers you give during onboarding, and the public performance numbers on the videos you have already published.
We never see your social media password, and the access we request is read-only. Five Trends cannot post, comment, follow, message or delete anything on your behalf.
When a video is analysed, its content is processed transiently and never stored. We keep the conclusion — the written read — not the footage.
We do not sell your personal information, and we do not share it with advertisers or data brokers.
You can delete your account and everything attached to it from inside the app, at any time, without asking us.

The sections below are the binding version. Where the summary and the detail differ, the detail governs.

2. Who we are

Five Trends (“Five Trends”, “we”, “us”) is the app published by Five Trends, and is the data controller for the information described here. You can reach us at privacy@fivetrends.app.

This policy covers the Five Trends iPhone app and the website at fivetrends.app. It does not cover Instagram, TikTok, Apple or Google, each of which handles your data under its own policy.

3. What we collect

Account information

When you sign in with Apple or Google we receive a stable user identifier, your email address, and your display name. If you use Sign in with Apple and choose “Hide My Email”, we only ever receive Apple’s relay address and never your real one. We never receive or store your Apple or Google password.

What you tell us during onboarding

The orientation flow asks about your niche, the viewer you are making for, the outcome you want, how many days a week you can realistically film, your follower target, the platforms you post on, what has been getting in the way, and two short free-text answers. We store these, along with the creator archetype derived from your one-tap answers, because they are what makes every later read specific to you rather than generic.

Connected social accounts

If you connect Instagram or TikTok, we store the platform, your username and account ID on that platform, your follower count, and the OAuth access and refresh tokens the platform issues. Tokens are held so the app can fetch your posts without asking you to log in again. They are read-only and revocable at any time.

Published post data

For videos you have already published, we retrieve and store: the post ID, the caption text, the publication time, a thumbnail URL, and the counts for views, likes, comments, shares and saves. TikTok’s API does not expose saves, so that figure is stored as zero for TikTok posts.

Video content, during analysis only

To explain why a video performed the way it did, the analysis may examine the video itself — its opening seconds, its pacing, its on-screen text — and not only the numbers attached to it. When that happens, the file is read from the platform’s own media URL, processed in memory for that single analysis, and discarded when the analysis finishes.

We do not store your videos, copy them into our storage, or keep any frame of them. Nothing about the footage is retained beyond the written read it produces, and there is no archive of your content on our side to leak, subpoena or sell. Analysis happens only for videos you have already published publicly on an account you chose to connect.

Analyses and progress

We store the reads the app generates — the baseline figures we computed, the percentage difference, the verdict, the drivers and the lesson — plus your daily suggestions and your streak history.

Subscription status

Purchases run entirely through Apple’s In-App Purchase system. We receive from Apple only whether a subscription is active and which product it is. We never see your card details, billing address, or Apple ID password — those never leave Apple.

Technical information

Our infrastructure providers log ordinary request data such as IP address, timestamp, device type and app version, for security and debugging. The website itself sets no advertising or analytics cookies.

4. What we never collect

Stored copies of your videos. Content is processed transiently during an analysis and never retained — see section 3.
Unpublished drafts, or anything from your camera roll.
Your direct messages, private comments, or follower lists.
Your contacts, calendar, photo library, microphone or camera.
Your precise location.
Advertising identifiers. Five Trends contains no ad SDKs and does no cross-app tracking, so it never presents the App Tracking Transparency prompt.
Passwords of any kind, for any service.

5. How we use it

To run the app. Authenticate you, keep your profile, fetch your posts, compute your baseline, and generate reads and projections.
To personalise the analysis. Your niche, archetype and target audience shape what the AI producer says about a given video.
To manage your subscription and unlock paid features.
To keep the service working and secure — diagnosing errors, preventing abuse, and enforcing our Terms of Service.
To reply to you when you contact support.

We do not use your information to build advertising profiles, and we do not make automated decisions that produce legal or similarly significant effects about you.

6. AI processing

The written part of each read is generated by a large language model operated by Anthropic PBC. When you request an analysis, we send Anthropic’s API a compact, single-purpose payload:

the platform, and your niche, archetype and stated target viewer;
the caption and the view, like, comment, share and save counts of the post being analysed;
the median figures we calculated from your recent posts, and the sample size; and
where the analysis examines the video itself, the content of that one published video.

That is the whole payload. Your name, email address, user ID and access tokens are never included — the model is not told whose video it is looking at. All arithmetic — the baseline, the percentage difference, the engagement rate — is performed by our own code before the model is called; the model interprets numbers, it does not produce them.

Video content sent for analysis is processed for that request and not retained — not by us, and, under our agreement with Anthropic, not by them beyond what is needed to return the response. Content sent through the Anthropic API is not used to train their models.

AI output is probabilistic. It can be wrong, and it is never advice about anything other than your own content. See section 8 of the Terms of Service.

7. Legal bases (EEA and UK)

Purpose	Legal basis
Creating your account and providing the app	Performance of a contract (Art. 6(1)(b))
Connecting a social account and reading its posts	Performance of a contract, on your explicit instruction
Generating analyses and projections	Performance of a contract
Security, abuse prevention and debugging	Legitimate interests (Art. 6(1)(f))
Responding to support requests	Legitimate interests
Complying with tax, accounting and legal obligations	Legal obligation (Art. 6(1)(c))

We share personal information only with the processors below, only for the purposes listed, and never for their own marketing.

Provider	What it handles
Supabase	Database, authentication and server functions. Holds your profile, posts, analyses and tokens.
Anthropic	Generates the written analysis from the limited payload in section 6.
Apple	Sign in with Apple, App Store distribution, and all subscription billing.
Google	Google Sign-In, if you choose that method.
Meta Platforms (Instagram)	Authorises the connection and returns your posts and their insights.
TikTok	Authorises the connection and returns your videos and their counts.
Vercel	Hosts this website. It receives no app account data.

We may also disclose information where we are legally required to, or to establish or defend legal claims. If the business is ever sold or merged, your information may transfer with it — you would be told before that happened, and this policy would continue to apply until replaced.

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the California Consumer Privacy Act.

9. International transfers

Our providers operate in several countries, including the United States. Where personal information leaves the EEA or the UK, the transfer is covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard contained in our agreements with each provider.

10. How long we keep it

Account, profile and onboarding answers — until you delete your account.
Posts and analyses — until you delete your account, or until you disconnect the social account they came from.
Video content examined during an analysis — not retained at all. It exists only for the duration of that single request.
Access tokens — deleted as soon as you disconnect the platform, or when the platform expires them.
Short-lived security records, such as the anti-CSRF state used during a connection — minutes.
Infrastructure logs — retained by our providers on their own rolling schedules, typically no more than 30 days.
Records we must keep by law, such as transaction records for tax — for the statutory period, in the minimum form needed.

11. Your rights

Wherever you live, you can ask us to:

confirm what we hold about you, and give you a copy;
correct anything inaccurate;
delete your information;
restrict or object to a particular use;
export your information in a portable, machine-readable format; and
withdraw a consent you previously gave, at any time.

Email privacy@fivetrends.app from the address on your account. We reply within 30 days. We will never charge you or degrade the service because you exercised a right.

If you are in the EEA or the UK you may also complain to your national data protection authority. If you are in California, you have the rights set out above plus the right not to be discriminated against for using them.

12. Deleting your account

Deletion is available inside the app — no email required. It removes your profile, your onboarding answers, every connected account and its tokens, all stored post data, every analysis, and your goal and streak history. Deletion is immediate and cannot be undone. Step-by-step instructions are on the account deletion page.

Deleting your Five Trends account does not cancel an active subscription. Subscriptions are managed by Apple and must be cancelled in your Apple ID settings.

13. Security

Everything is encrypted in transit with TLS and at rest by our database provider. Access to your rows is enforced at the database level by row-level security, so one account cannot read another’s data. Credentials that must stay secret — our AI key, the platform app secrets — exist only in server-side environment variables and are never shipped inside the app.

No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant regulator as the law requires.

14. Children

Five Trends is not directed to children. You must be at least 13 to use it — and at least 16 if you are in the EEA, unless a parent or guardian consents. Instagram and TikTok impose their own minimum ages. If we learn we have collected information from a child below the applicable age, we delete it. Contact privacy@fivetrends.app if you believe that has happened.

15. Third-party platforms

Connecting Instagram or TikTok means data flows from them to us under the permission you granted. Their handling of your data is governed by their policies, not this one. You can revoke our access at any time:

Instagram — Settings, then Website Permissions, then Apps and Websites.
TikTok — Settings and privacy, then Security and permissions, then Manage app permissions.

Revoking access from the platform stops any further data reaching us. To remove what we already hold, disconnect the account in the app or delete your account.

16. Changes to this policy

If we change this policy we will update the date at the top of the page, and for any change that materially affects your rights we will tell you in the app before it takes effect. Continuing to use Five Trends after a change means you accept the updated policy.

17. Contact

Privacy questions and rights requests: privacy@fivetrends.app
Everything else: support@fivetrends.app