Privacy Policy
Effective 29 Oct 2026
- RepostZero never sees or stores your TikTok password.
- Your TikTok session, repost list and clean-up history stay on your iPhone. We don’t upload them anywhere.
- There is no RepostZero account, no advertising and no cross-app tracking.
- Delete the app and your data on the device is gone.
Who we are
RepostZero (the iOS app and the website repostzero.app) is published by 2020 Apps SIA (“we”, “us”), a limited liability company registered in the Commercial Register of the Republic of Latvia under number 40203288491, with its registered address at Dārzaugļu iela 1B, Rīga, LV-1012, Latvia. We are the developer behind go2020apps.com. We are the controller of the limited personal data described below. Contact: hello@repostzero.app.
How the app works, and what that means for your data
RepostZero opens TikTok’s own sign-in page inside the app. When you sign in, TikTok stores its session in the app’s private browser storage on your device - exactly as a browser would. At your request, the app uses that session on your device to list the reposts on your profile and to remove the ones you select.
This processing happens on your iPhone. Your TikTok credentials, session, repost list, creators, captions and clean-up history are not sent to us and we have no server that could receive them. Your interactions with TikTok are governed by TikTok’s own privacy policy.
Data we do process
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Purchases - Apple tells the app whether you have an active Pro subscription. We never see your payment card or Apple ID details. | To unlock Pro | Contract |
| App configuration - the app fetches settings from Google Firebase Remote Config. Google receives technical data such as an app instance identifier, IP address and device/OS version. | To keep the app working when TikTok changes its website, without forcing an update | Legitimate interests |
| Diagnostics - only if you opted in to share analytics with app developers in iOS settings, Apple gives us aggregated, de-identified crash and usage reports. | To fix bugs | Consent (given to Apple) |
| Emails you send us or a waitlist sign-up - your address and message. | To reply, or to send the one notice you asked for | Legitimate interests / consent |
| Website requests - our host Cloudflare processes IP addresses and request data to deliver and protect repostzero.app; fonts are loaded from Google Fonts. | To serve and secure the website | Legitimate interests |
We do not sell or “share” personal information (as those terms are defined under the California Consumer Privacy Act and similar US state laws), we do not use data for targeted advertising, and we do not track you across other companies’ apps or websites - so the app does not ask for tracking permission.
Service providers
- Apple - App Store distribution, payments, optional diagnostics.
- Google (Firebase Remote Config, Google Fonts) - app configuration and website fonts.
- Cloudflare - website hosting, security and email forwarding.
Some providers are located outside your country, including in the United States. Where data leaves the EEA or UK, transfers rely on the EU-US Data Privacy Framework or Standard Contractual Clauses.
How long we keep data
- On your device: until you tap Disconnect TikTok in Settings (removes the session) or delete the app (removes everything).
- Emails: as long as needed to handle your request, then deleted within 24 months. Waitlist addresses are deleted once we send the launch notice.
- Website logs: kept by Cloudflare for a short period for security.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR, or California and other US state privacy laws), you can ask to access, correct, delete or port your personal data, object to or restrict processing, and withdraw consent. Because we hold almost nothing about you, most requests are answered by your device itself; for anything else write to hello@repostzero.app. We answer within 30 days and won’t treat you differently for exercising your rights. You can also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, dvi.gov.lv) or with the data protection authority where you live.
Security
Your TikTok session is kept in the app’s sandboxed storage, protected by iOS. Connections to Apple, Google, Cloudflare and TikTok use HTTPS. No method is perfectly secure, but keeping data on your device means there is no central database of users to breach.
Children
RepostZero is not directed at children. You must meet TikTok’s minimum age in your country and be at least 13 (16 in the EEA) to use it. If you believe a child has sent us personal data, contact us and we will delete it.
Changes
We’ll update this page and the date above when this policy changes, and highlight material changes in the app.