Privacy Policy
Last updated: November 6, 2026
This Privacy Policy describes how the mobile application Instacast ("the Application", "the App"), developed by Matteo Venturi ("the Developer", "we", "us", or "our"), collects, uses, retains, and protects user information in compliance with applicable data protection laws (including the General Data Protection Regulation - GDPR EU 2016/679) and the Google Play Developer Policy requirements.
1. Data Controller
The Data Controller responsible for the processing of your data is:
Matteo Venturi
Contact email: info@instacast.stream
GitHub profile: github.com/matteoventuri7
2. Fundamental Principles & Privacy by Design
Instacast is designed adhering strictly to the principle of data minimization (Privacy by Design & by Default):
- No proprietary data harvesting servers: Instacast does not transmit or store your personal information, listening patterns, or credentials on any remote servers operated by us.
- Local processing and storage: All data essential for the application to function (channels, playlists, playback history, and listening progress) is stored exclusively on your device within your smartphone's protected storage (encrypted local Room/SQLite database).
- No data selling or sharing: We do not sell, rent, monetize, or disclose any user data to advertising brokers, marketing networks, or third parties.
3. Data Processed and Purpose of Use
a) Shared URLs and Media Content
When you use Android's native share feature ("Share to Instacast") or paste a link into the App, the Application receives solely the URL of the selected Instagram video or Reel. This URL is used temporarily by the App to resolve the audio stream and enable streaming playback or local caching for in-car listening.
b) Optional Instagram Account Login via WebView
The App provides an optional login capability to allow you to browse and sync your saved Instagram posts and Reels. This process occurs entirely inside an isolated WebView supplied by the Android operating system:
- Your credentials and password are submitted directly to the official Instagram/Meta servers. The Developer never has, and never will have, access to or visibility of your credentials.
- Generated session cookies remain strictly confined to the application's secure sandbox on the user's device.
- You may terminate and revoke the session at any time by tapping "Log Out" within the App or by clearing the application storage via Android system settings.
c) Playback Technical Data and Local Cache
Extracted audio files are cached temporarily on your device via the ExoPlayer media caching engine to prevent playback interruptions while driving through tunnels or areas lacking cellular reception. Cache files are managed and recycled automatically by the application and can be cleared at any time.
4. Required Android Permissions and Justification
In accordance with Google Play policies, below is the complete list of permissions requested by the Application along with their specific functional purposes:
- : Required to retrieve audio streams for shared posts and display public creator metadata.
- : Used to detect network connectivity, optimize media buffering, and prevent unnecessary connection attempts.
- & : Essential to maintain uninterrupted audio playback when the phone screen is off or while running other apps, such as GPS navigation (Google Maps, Waze).
- : Required to display media playback controls (play, pause, skip track) on the lock screen and in the Android notification drawer.
5. Integration with Android Auto (Google Car App Library)
Instacast implements the standard androidx.media3.session.MediaLibraryService protocol and androidx.car.app.CarAppService. These services communicate only media track metadata (title, artist, artwork) and player playback state to your vehicle's head unit to enable steering wheel controls and dashboard display. No driving telemetry, vehicular speed, or GPS location data is ever collected or stored by Instacast.
6. Third-Party Services, Data Visible to Meta, and Account Risks
Instacast interacts solely with the following external services:
-
Instagram / Meta Platforms, Inc. (and Meta Platforms Ireland Ltd.): The App sends direct web requests to Instagram servers to retrieve information about profiles, Reels, and associated media streams.
What Meta sees: Because network requests originate directly from the user's device, Instagram/Meta receives the user's IP address and technical network parameters and, if the user has signed in via the optional WebView, may associate these requests with their account. Meta's handling of this data is governed by its own privacy statement (Instagram / Meta Privacy Policy).
Account risks: Accessing content via third-party applications may not be permitted under Instagram's Terms of Use and may trigger Meta's automated anti-abuse systems, potentially leading to temporary restrictions or account suspension. Users utilize the login feature entirely at their own risk and may use the App without logging in. - Google Play Services and Android Platform (Google LLC): Used for application distribution, updates, core media libraries, and Android Auto framework support.
Instacast does not include commercial tracking SDKs (such as the Facebook SDK, Google AdMob, or marketing analytics), nor does it implement any remote telemetry or third-party tracking libraries.
Non-Affiliation Disclaimer: Instacast is an independent application and is not affiliated with, sponsored by, or endorsed by Instagram or Meta Platforms, Inc. The names "Instagram", "Reels", and associated logos are registered trademarks of Meta Platforms, Inc.
7. Data Retention and Deletion
Because all data is stored exclusively on your local device:
- You can delete your listening history or specific channels/playlists at any time directly within the App's user interface.
- Uninstalling the App immediately and permanently erases all stored data (local database, session cookies, cached audio).
- If you require assistance or have inquiries regarding data deletion, you may reach out to us at info@instacast.stream.
8. Data Subject Rights (GDPR)
As an individual residing in the European Union or other jurisdictions with applicable privacy laws, you have the right to access, rectify, update, erase, or restrict the processing of your personal data. Because the Application does not operate central user accounts or cloud storage, you exercise these rights directly through device-level control and data deletion, or by submitting a request to the contact address provided.
9. Children's Privacy
The Application is not directed toward children under 13 years of age (or the minimum legal age required in your jurisdiction). We do not knowingly collect personal data from children.
10. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy to reflect technological updates or evolving legal requirements. In the event of material updates, we will revise the date at the top of this document and publish the latest version on this public URL accessible from the Google Play Store.
11. Contact Us
For any questions, concerns, or inquiries regarding the privacy practices of Instacast, you may contact:
Matteo Venturi: info@instacast.stream