Privacy Policy
Last updated 16 November 2026
AY Social Media App ("the app") is a private research tool operated by Ash Yusof, Selangor, Malaysia ("we", "the owner"). This policy explains what data the app handles, why, and how you can have it removed.
Who uses the app
The app has one user, the owner. Sign-in is restricted to a single Google account. Members of the public cannot create accounts or sign in.
Data we collect
| Source | Data | Purpose |
|---|---|---|
| The owner's own Threads, Instagram and Facebook Page accounts | Posts, replies, comments, media metadata and engagement insights (for example views and likes) | Understanding which of the owner's content performs well |
| Public posts returned by Meta's official search features | Post text, public username, post link, timestamp, media type and public engagement counts | Understanding public discussion of pet welfare topics to guide product research for Pawlah |
| Google sign-in | The owner's email address and Google account ID | Restricting access to the owner |
We only access data through Meta's official APIs, within the permissions Meta has granted. We do not access private accounts, private messages, private groups or any data a person has not made public.
How we use data
- To produce summaries, trends and themes, for example common needs raised by pet owners and rescuers.
- Analysis may be performed by an AI assistant (Anthropic's Claude) acting on the owner's instructions. The data is used only for the owner's own analysis.
- We do not use data for advertising, profiling individuals, contacting people, or making decisions about individuals.
- We do not sell, rent or share data with third parties.
Storage and security
- Data is stored in Google Cloud (Firebase) under the owner's account.
- Access tokens issued by Meta are stored in Google Secret Manager and are never displayed or logged.
- All traffic uses HTTPS. Database access is denied to everyone except the owner's verified account.
Retention
- Public posts collected through search are kept for up to 90 days, then deleted automatically. Aggregated findings that contain no usernames or post content may be kept longer.
- Data from the owner's own accounts is kept until the owner deletes it or disconnects the account.
- If a post is deleted on Meta's platforms, we remove our copy when we next detect it or on request.
Your rights and data deletion
If your public post or username appears in data held by the app and you want it removed, follow the steps on our data deletion page or email ashyusof.sb@gmail.com. We will delete it within 30 days and confirm by email. You may also ask what data we hold about you.
We aim to handle personal data in line with Malaysia's Personal Data Protection Act 2010.
Changes
We will update this page if our practices change and revise the date above.
Contact
Ash Yusof · ashyusof.sb@gmail.com