Privacy Policy for Panaram

Information Panaram Collects

Panaram collects only the information needed to connect to Instagram, import photos you choose, and display your grid inside the app.

Instagram Account Information

When you choose to connect Instagram, Panaram uses Instagram OAuth to ask for permission to access your Instagram account through Meta's Instagram API. Depending on the permissions approved by Meta and by you, Panaram may access:

• Your Instagram username.
• Recent Instagram media metadata, including media IDs, captions, media type, timestamps, and image or video thumbnail URLs.
• Image data or video thumbnail image data needed to display your grid in Panaram.
• An Instagram access token used to make authorized requests to the Instagram API.

Panaram does not ask for your Instagram password. Authentication is handled through Instagram and Meta.

Photos You Import Manually

If you add photos from your device photo library, Panaram imports only the photos you select. Panaram does not scan your full photo library.

Local App Data

Panaram stores grid data on your device, including imported images, thumbnails, captions, Instagram media IDs, timestamps, hidden or deleted state, and the order you choose for your grid.

Panaram stores your Instagram access token in the iOS Keychain. Panaram stores your Instagram username and token expiration date in local app preferences.

Technical Information

When Panaram communicates with Instagram, Meta, or Panaram's token exchange endpoint at https://panaram.app/api/instagram/token, standard technical information may be processed by those services, such as IP address, request time, response status, and device or network information needed to operate and secure the service.

How Panaram Uses Information

Panaram uses information to:

• Connect your Instagram account after you approve access.
• Exchange an Instagram authorization code for an access token.
• Sync recent Instagram media into your local preview grid.
• Display, crop, cache, rearrange, hide, reset, preview, and delete photos inside Panaram.
• Track token expiration and reconnect or refresh access when needed.
• Diagnose errors, prevent abuse, and keep the service working.

Panaram does not post to Instagram, edit your Instagram account, delete your Instagram content, send messages, or modify your original Instagram media.

Sharing and Third Parties

Panaram does not sell your personal information. Panaram shares or processes information only as needed for the app to work:

• Instagram receives OAuth and API requests when you connect and sync your Instagram account. Meta's use of information is governed by Meta's own terms and privacy policies.
• Panaram's token exchange endpoint receives the temporary Instagram authorization code and redirect URI so it can complete the OAuth token exchange. The endpoint is used because Instagram token exchange requires server-side app credentials.
• Apple provides the operating system, Keychain, Photos picker, and local app storage used by Panaram.

Panaram does not store your Instagram access token on its backend after the token exchange response is returned to the app. Operational server logs may contain limited technical records needed for security, debugging, and reliability.

Data Storage and Retention

Most Panaram data is stored locally on your device.

• Instagram access tokens are stored in the iOS Keychain.
• Imported and synced photos, thumbnails, captions, media IDs, timestamps, and grid order are stored locally by the app.
• In-memory image caching is used to improve performance while the app is running.
• Panaram keeps local grid data until you delete it, disconnect Instagram, uninstall the app, or the operating system removes app data.

When you disconnect Instagram in Panaram, the app removes the stored Instagram access token, username, and synced grid posts from local storage.

Your Choices and Controls

You can:

• Choose whether to connect Instagram.
• Choose which photos to import manually from your device.
• Delete photos from the Panaram grid.
• Rearrange or reset your local grid.
• Disconnect Instagram from inside the app.
• Revoke Panaram's Instagram access from your Instagram or Meta account settings.
• Delete the app to remove local app data from your device, subject to normal iOS backup and storage behavior.

Data Deletion Requests

To request deletion of information associated with Panaram, contact base@primaryindex.org.

Because Panaram primarily stores information locally on your device, the fastest way to delete local Panaram data is to disconnect Instagram in the app and/or delete the app from your device. If any server-side operational records are associated with your request, we will delete or de-identify them unless retention is required for security, legal, or operational reasons.

Security

Panaram uses platform security features such as iOS Keychain for access token storage and HTTPS for network communication. No method of transmission or storage is completely secure, but Panaram is designed to limit collection and keep sensitive data on your device where possible.

Children

Panaram is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information through Panaram, contact at base@primaryindex.org.

International Processing

If you use Panaram, information may be processed in the country where you live and in other countries where Meta, Apple, or Panaram's service providers operate. Data protection laws may differ from those in your location.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and make the revised policy available through the app or the Panaram website.

Contact

Panaram privacy contact: base@primaryindex.org