Privacy Policy

The short version

Dialed does not collect your data. There is no Dialed account, no Dialed server holding anything you read, and no analytics.

Dialed shows you Instagram's own web pages inside the app. Before a post reaches your screen, the app reads the caption that is already on the page and classifies it on your device using Apple's on-device model. The caption is not sent anywhere. The verdict is not sent anywhere.

Two honest caveats, which the rest of this document explains properly:

1. You are on Instagram. Everything you do in the app happens on Instagram's own page, and Instagram sees it exactly as if you had used its website in a browser. That is governed by Instagram's privacy policy, not ours.
2. Buying a subscription is a transaction. Apple processes the purchase, and RevenueCat receives your purchase state and an anonymous identifier so we know whether your subscription is active. Neither receives anything about what you read or filter. See section 5.

1. Who we are

Dialed is published by Dialed Labs LLC, a Texas limited liability company ("Dialed", "we", "us", "our").

Address: 2300 Nueces St Apt NU-102B, Austin, TX 78705

For the purposes of the UK GDPR and the EU GDPR, we are the controller for the limited processing described in section 5. For everything described in section 3 we are not a controller at all, because the data never reaches us.

2. Who this policy covers

This policy covers the Dialed iOS app.

It does not cover Instagram, which is a separate service operated by Meta Platforms, Inc. Dialed is not affiliated with, endorsed by, or connected to Instagram or Meta.

3. What stays on your device

The app stores the following on your phone only, in the app's own storage. None of it is transmitted to us, and we have no way to read it.

The account names in that list are the one piece of this that identifies other people, so it is worth being precise: they are names you typed or tapped yourself, they are stored as plain text on your device, and they are used for nothing except deciding whether to hide a post.

Your device backup includes it. The settings and counts above are ordinary app storage, so if you have iCloud Backup or encrypted local backups switched on, they are included in your device's backup like any other app's data. That backup is between you and Apple; we have no access to it. Turning off iCloud Backup for Dialed in iOS Settings excludes it.

No post, caption, image or video is ever written to disk. What your activity data is, stated plainly rather than as "just counts": whole numbers and dates, some of them labelled with your own topic names, and some of them bucketed by hour of the day — which taken together describe when you use the app and roughly what you look at, though never which posts. The de-duplication that makes those counts honest does need post identifiers, so it is kept in memory for the current session only and is never saved. That is a deliberate constraint, stated in the source: ActivityStats.swift's header says that if someone later wants to persist it to fix a counter across launches, the correct answer is to accept the less precise counter.

The "Filtered out" list lives in memory and dies with the session. So the app can show you what it hid and why — including the exact caption the classifier read — it keeps a running list while the app is open. It is capped (200 items), each caption is truncated, it is cleared whenever you change your filter, and nothing in it is written to disk. Close the app and it is gone.

What Instagram's own page stores on your device

When you sign in, you sign in on Instagram's own login page, loaded inside the app. iOS's web engine then stores Instagram's cookies, local storage and cache in the app's private container, the same way Safari would. That is how you stay signed in.

• We never see or transmit your Instagram password. It is typed into Instagram's page and sent to Instagram.
• We do not read your Instagram session. The app checks only whether an unexpired sessionid cookie for instagram.com exists, so it can tell whether you are signed in and go inert if you are not. It does not read the value.
• Signing out of Instagram, or deleting the app, removes that data from your device.

4. What is never collected

To be explicit, because the whole product rests on it:

• No posts, reels, stories, captions, images, videos or messages are sent to us, uploaded, or stored anywhere by us.
• No browsing activity. Not which accounts you look at, not what you searched, not how long you spent on a post.
• No classification results. What the model decided about a post stays on the phone.
• No analytics, no crash reporting, no advertising, no tracking. The app contains no analytics SDK and no ad SDK, and it does not use Apple's advertising identifier. It does not ask for tracking permission because it has nothing to track with — the privacy manifest declares NSPrivacyTracking false and no tracking domains.
• No contacts, photos, location, microphone or camera data. The app requests none of these permissions. Instagram's own page can ask for your camera or microphone on its own behalf — its story camera, for example. When that happens the prompt comes from iOS for Instagram's benefit, not ours: Dialed does not receive, record or store anything from it.
• No account. Dialed does not create one, and does not ask for your email, name or phone number.

5. The one thing that leaves the device: your subscription

Buying a subscription is a transaction, and a transaction cannot be private to your phone.

Apple. Purchases are sold and processed by Apple through In-App Purchase and billed to your Apple Account. We never see your card details. Apple tells us only whether an entitlement is active. Apple's handling of the purchase is governed by Apple's privacy policy.

RevenueCat. We use RevenueCat to manage subscriptions. When you buy, restore or renew, RevenueCat receives an anonymous app user identifier that it generates (not your name, email or Apple ID), your purchase and receipt state, and the technical information its SDK sends with a request — including your IP address, which it uses to infer a country, plus your device model and OS version. It does not receive anything about what you read or filter. We use it to know whether your subscription is active and to sign promotional offers.

RevenueCat acts as our processor. Its privacy policy is at https://www.revenuecat.com/privacy.

No other third party receives anything. The app talks to no server of ours — we operate none for the app — and it loads no third-party script, pixel or font of its own. The only network traffic the app generates besides the store is Instagram's own page loading, which is Instagram's traffic.

6. The on-device model

Classification runs through Apple's on-device Foundation Models framework on devices that support it.

• The caption is handed to a model running on your phone. It is not sent to Apple, to us, or to anyone else. It does not use Apple's Private Cloud Compute.
• The app creates a fresh model session per request and keeps no transcript.
• On a device where Apple Intelligence is unavailable, topic classification does not run at all. Dialed tells you so during setup rather than appearing to filter and silently not doing it, and it offers the two things that work without a model: removing whole sections of Instagram, and your never-show account list. Nothing is sent off the device to compensate — there is no server-side classifier to fall back to, by design.

7. Children

Dialed is not directed at children. You must be at least 16 years old to use it (owner's decision, 2026-10-20; the App Store rating is 16+ to match, and onboarding asks you to confirm it).

We do not knowingly collect personal information from children, and because we collect no personal information from anyone, we hold nothing to delete if we learn that a child has used the app. If you are a parent or guardian and have a question, write to us at support@usedialed.app.

Dialed asks you to confirm your age; it does not verify it.

8. Your rights

Because we hold no personal data about you, most data rights have nothing to act on: there is no record of you for us to produce, correct, export or erase. That is not a disclaimer — it is the design, and section 10 tells you how to check it.

Where you do have rights, here is how they work:

• Your data on the device is yours. You can see your settings and activity in the app's menu, change them at any time, and remove them by deleting the app. Deleting the app removes the settings, the activity counts and Instagram's stored session from your device.
• Deleting the app does not cancel a subscription. Cancel through Settings → your Apple Account → Subscriptions.
• The subscription record. If RevenueCat is in use, you may ask us to delete the anonymous purchase record associated with your installation. Write to support@usedialed.app. Note that Apple keeps its own record of the transaction regardless, and that deleting the record may end your ability to restore the purchase on a new device.
• If you are in the EEA or UK: our lawful basis for the subscription processing in section 5 is the performance of a contract with you (providing and restoring the subscription you bought). You have the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your supervisory authority — in the UK, the Information Commissioner's Office.
• If you are in California: we do not sell your personal information, and we do not "share" it for cross-context behavioural advertising, as those terms are defined by the CCPA/CPRA. We have not sold or shared it in the preceding 12 months. We do not use or disclose sensitive personal information for any purpose requiring a right to limit.
• We do not use your data to train any model. There is nothing to train on.

9. Security, retention and deletion

• Data on your device is protected by iOS's own app sandbox and device encryption. Use a passcode.
• Retention on the device: settings last until you change them or delete the app; activity counts reset daily; the "Filtered out" list lasts only while the app is open.
• Retention by us: we retain nothing about your use of the app, because we receive nothing. RevenueCat keeps the purchase record for as long as your subscription is active, and afterwards only for as long as it needs to for accounting and tax purposes.
• Diagnostics. The app can write a local diagnostic log, used in development to understand how Instagram's page behaves. It is written only when the app is launched with a diagnostic flag, which is not something a normal install can do. It is never uploaded.

10. How to check any of this

Claims like these should be verifiable, so:

• The app's privacy manifest (PrivacyInfo.xcprivacy) declares no tracking, no tracking domains and no collected data types, and Apple shows the resulting labels on the App Store product page.
• You can watch the app's network traffic with any HTTPS proxy. You will see Instagram's own requests, Apple's store requests and RevenueCat's — and nothing of ours, because we run no server.
• Turn on Airplane Mode and the filter still works, because the model is on your phone.

11. Changes to this policy

We may update this policy. If a change materially affects how your information is handled, we will give notice in the app or at the published URL above before it takes effect. The date at the top always shows the current version.

12. Contact

support@usedialed.app — for this policy, for a privacy question, or for a request under any of the rights above.

We acknowledge within 2 business days and aim to resolve within 10 business days. Where a legal deadline is shorter, it applies instead — a GDPR or UK GDPR rights request is answered within one month.

---