Privacy Policy
Last updated: October 10, 2026
1. Who we are
RANKT (“we”, “us”) is operated by RANKT LLC, a limited liability company registered in the State of Florida, United States (document number L26000363908), with its registered address at 7301 Wiles Rd Ste 201, Coral Springs, FL 33067, United States. You can reach us at info@ranktapp.com or +1 954 553 2421.
RANKT provides a verified score for content creators based on their Instagram performance, and connects creators with local businesses in Miami through deals: a business offers a reward, and a creator visits and publishes about it. For any privacy question or request, contact us at info@ranktapp.com.
RANKT is offered only in the United States, and it is for people 18 and older (section 10). We and the providers that help us run RANKT may process your data in the United States and in other countries.
2. Information we collect
Account information: when you create an account we collect your email address and authentication credentials (managed by our infrastructure provider, Supabase). Your profile stores your display name and Instagram handle (taken from your Instagram account when you connect it), your member number, your chosen content niche, and your CreatorScore and tier once calculated. If you choose one, it also stores your zone: the area of Miami where you create (for example, Brickell). The zone is optional, and we use it to show you deals near you.
Your age range: if you tell us in the app whether you are 18 to 20, or 21 or older, we store that range, that it came from your answer, and the date. We never ask for or store your date of birth. The app may also ask Apple whether you are 18 or older, and does not store Apple’s answer.
Instagram data (with your permission): you connect your Instagram professional account through Meta’s official API. Our access is read-only, with two permissions: basic account access and insights. RANKT never posts, comments or sends messages on your behalf. With that access we read:
Your account: your Instagram user ID, username, name, account type, number of posts, follower count, and the link to your profile picture (we store the link Instagram provides, not a copy of the image).
Your recent posts and reels: for each one, its type, the time it was posted, its number of likes and comments, its caption text and the link Instagram gives it; and its reach, views, saves and shares. We also read your account’s daily reach.
For a deal you take part in: when you tell us which of your pieces fulfills the deal, we list your recent stories and posts (their type, time, image or thumbnail link and link) so you can choose. For the story of a deal, before Instagram removes it, we read its numbers and keep an image of it. For a post or a reel of a deal, we read its numbers.
We store an access token that lets us read this on your behalf. It is encrypted and kept only on our servers.
Deals you take part in: when you apply to a deal we keep a record of your participation: when you applied and were selected, which version of the deal’s terms you accepted and when, the day and time you plan to visit, when the business marked your visit (or when you told us you went), which of your posts or stories fulfill the deal (their Instagram identifier, link and time) and their numbers, and, if the app asks you to confirm them when you send them, the three disclosure checks (that you mentioned the business, turned on the paid partnership label, and said it was an ad or a gift from the business) and when you confirmed them, and, if you step back, when and your note to the business. At the close, you and the business each answer one private question about the deal. For a story, which Instagram removes after 24 hours, we keep one image of the story you published for the deal as evidence that it was published.
We never see your Instagram password: you sign in on Meta’s own page.
Our hosting and security providers also record technical data, like IP addresses, when you use RANKT or our website.
3. How we use your information
We use your data to calculate your CreatorScore and show you your insights in the app, to run the deals you choose to take part in, to keep RANKT working and secure, to enforce our terms, including spotting attempts to manipulate a score, and to understand how RANKT is used so we can improve it. We don’t sell your data, use it for advertising, or share it for anyone else’s own purposes. The only business that receives anything about you is the one whose deal you accepted, as section 4 describes.
When RANKT says verified, it means that the numbers come from your own Instagram account, read through Meta’s official API with your permission, and, for a deal, that what you published existed. It never means that your followers are real, that your audience is authentic, or that a post produced sales.
4. What a business sees when you take part in its deal
Nothing about you reaches a business until you accept the terms of its deal. From then on, that business, and only that business, receives:
Its door page: a private web page, without login, that only the business receives, with your Instagram handle, your tier and the day and time you plan to visit, so its staff can recognize you and mark your visit. During our pilot in Miami, RANKT may also send this to the business in a message.
The piece you publish for the deal (its link, or the image of a story), so the business can confirm it.
The receipt of the deal, which you consent to when you accept the terms: your handle, your tier and your CreatorScore at the time of the deal, the dates of your visit and of your post, the image of the story (or the link to the post or reel) you published for that deal, and its numbers. For a story, the same eight numbers you see in the app: reach, views, shares, replies, interactions, profile visits, follows and navigation. For a post or a reel: reach, views, likes, comments, saves and shares.
Your note, if you step back after your visit, shared privately with that business through RANKT. It is never public.
A business never receives your email address or your answer to the private question at the close. Our terms for businesses let a business use a receipt only to evaluate that deal: it may not sell it, combine it with other data, use it to make decisions about employment, credit, housing or insurance, or build lists of creators with it, and it must delete it when we ask.
What your credential shows about your deals. Once one of your deals is completed or missed, your shareable credential may show how many of your deals count and the share you completed, for example “3 collaborations · 66% completed”. Deals you stepped back from, or that a business cancelled, don’t count. Anyone you show or share your credential with can see that line.
5. Where your data lives
Your data is stored with Supabase, our infrastructure provider. Other providers handle specific jobs:
PostHog provides product analytics: events about how the app is used, attached to an opaque account identifier rather than your name, email or Instagram handle. Some events include your tier or your score at that moment. We don’t use advertising SDKs, we don’t track you across other apps or websites, and no one else does it through RANKT. That’s why a browser’s Do Not Track signal doesn’t change anything we do.
Resend delivers the email we send. It receives the addresses and the text of each email.
Sentry receives crash reports: technical details of the error and of your device, with the same opaque account identifier.
Cloudflare hosts our websites.
We share your data with the providers that help us run RANKT, including those above; with Meta, which you connect to directly; with the notification services in section 6; with the business of a deal you accept, as section 4 describes; and when the law requires it, to protect RANKT or its users, or as part of a merger, acquisition or sale of RANKT’s business. We don’t sell it.
6. Push notifications
If you turn notifications on, we store a push token for your device and your notification preference. We use them to tell you once a week that your reading is in, and when something in a deal needs you or changes. Notifications go through Expo, which passes them to Apple or Google for delivery; we send them the token and the notification. We delete the token when you turn notifications off, sign out on that device, or the app is no longer installed on it. You can turn notifications off in the app’s settings or in your phone’s settings.
7. How long we keep each piece of data, and who keeps it
Your account and profile, including your age range: while your account exists.
Your Instagram access token and the Instagram data we read: until you delete your account. Your daily followers and reach: up to 120 days.
Your weekly score history: while your account exists, even if you disconnect Instagram.
The records of your deals: while your account exists.
The image of a deal’s story: until 30 days after the deal closes.
A receipt a business already received: kept by that business, which must delete it when we ask (section 4).
Your push token: until you turn notifications off, sign out on that device or uninstall the app. Weekly notification records: while your account exists.
Records of disconnection and deletion requests, without your Instagram data: up to two years.
Product analytics events: while your account exists; when you delete it, we ask PostHog to delete them.
Crash reports: up to 90 days in Sentry.
RANKT’s access on Meta’s side: until you remove RANKT in your Instagram settings (section 8).
Backup copies: up to 30 days after the original is deleted.
8. Disconnect, delete, and your other choices
Remove RANKT from Instagram: in Instagram’s settings, remove RANKT from your apps and websites. That ends our access to your Instagram account.
Delete your account: in the app’s settings, choose Delete account. Deletion is permanent: we delete your profile, your Instagram connection and data, your score history, your deal records and their images, and we ask PostHog to delete your analytics events. Backup copies are deleted within 30 days. A business keeps the receipt page of a deal you completed, without your handle, your numbers, your tier, your score or the image. A copy of a receipt the business already saved, crash reports in Sentry (section 7) and RANKT’s access on Meta’s side are outside this deletion.
To review or correct your information, write to info@ranktapp.com.
You can also see our Data Deletion page or email info@ranktapp.com. Depending on where you live, you may have additional rights under applicable law; contact us to exercise them.
9. Security
We protect your data with reasonable technical and organizational measures, including encryption of your Instagram access token. To report a security vulnerability, write to info@ranktapp.com (also published at /.well-known/security.txt). If a breach affects your data, we will notify you as the law requires.
10. Age
You must be 18 or older to use RANKT. We do not knowingly collect data from anyone under 18; if we learn that someone under 18 has an account, we close it. A deal at a place that requires guests to be 21 or older is shown only to people who told us they are 21 or older, and the place may check your ID.
11. Changes to this policy
We may update this policy as RANKT evolves. We will update the date above and, for significant changes, notify you in the app.
12. If you represent a business
When a business joins RANKT, or asks to through our business page, we collect the business name, type and area, its Instagram handle, a contact person’s name and phone or email, and what it can offer creators. For a business with deals, we also store its address, a cover photo and its logo, which creators see in the app. We use this to run the business’s deals and to contact it about RANKT. We keep a request from our business page for up to 12 months if the business doesn’t start deals, and a business’s contact details for up to 12 months after its last deal or our last contact, whichever is later. A business, or the person who wrote to us for it, can ask us to delete that information sooner at info@ranktapp.com.
When someone accepts RANKT’s terms for a business, we keep their name, title and email, with the version of the terms and the date, as the record of that agreement, while the business uses RANKT and for five years after its last deal, even if the business asks us to delete its other information.