Privacy Policy
Last updated: 13 October 2026
NextDeck (nextdeck.app) is a tool for scheduling photo posts to Instagram, Threads and TikTok. It is operated by tech-m8 ("we"). This policy explains what we collect, why, and what you can do about it.
What we collect
- Your Google or Apple account basics when you sign in with Google or Apple: your email address and account ID, and your name (and, from Google, your profile picture). With Apple you can choose to hide your email, in which case we get a private relay address from Apple. We use these to identify your account. We don't get your password or access to anything else in your Google or Apple account.
- Connected social accounts. When you connect Instagram, Threads or TikTok, we store the account's ID, username, display name and profile picture, and the access tokens the platform gives us. Tokens are encrypted at rest and used only to publish the posts you create and to show your account's posting options.
- Your posts. The photos, captions, hashtags, settings and schedule you enter, and the result of each publish (links or error messages).
- API keys you create. We store only a hash of each key, never the key itself.
- A session cookie that keeps you signed in. We don't use advertising or tracking cookies, and we don't run third-party analytics.
- Basic server logs (such as request times and errors) kept by our hosting provider for operating and securing the service.
How we use it
Only to run NextDeck: to sign you in, store and publish your posts at the times you choose, show you their status, and keep the service secure. We don't sell your data, use it for advertising, or use your content to train AI models.
Who we share it with
- The platforms you post to. When a post is due, we send its photos and text to Instagram, Threads and/or TikTok, as you chose. Their own privacy policies apply to content once it is posted there.
- Cloudflare, which hosts NextDeck and stores its data and photos.
- Google and Apple, for sign-in.
- Authorities, if the law requires it.
How long we keep it
- Photos are deleted about 7 days after their post is published, or after 7 days if they were uploaded but never used in a post.
- Posts, connected accounts and API keys are kept until you delete them or your account.
- Disconnecting a platform in Settings deletes its stored tokens immediately.
Your choices and data deletion
- Delete individual posts and photos, disconnect platforms and revoke API keys at any time in the app.
- To delete your NextDeck account and all its data, email masnun@gmail.com from your account's email address. We delete it within 30 days.
- You can also remove NextDeck's access from your Google, Apple, Instagram, Threads or TikTok account settings.
- You can ask us for a copy of your data, or to correct it, at the same address.
Security
Data travels over HTTPS. Platform tokens are encrypted with AES-GCM. Access to production systems is limited to the operator. No system is perfectly secure; if we learn of a breach affecting your data, we'll tell you.
Children
NextDeck isn't meant for anyone under 13, or under the minimum age the connected platforms require.
Changes
If we change this policy, we'll update the date above, and tell you in the app or by email for significant changes.