Privacy policy

When you sign in with Google: your name, email address, profile picture and Google account ID. We do not get access to your Gmail, Drive or anything else in your Google account.

When you connect Instagram through Facebook Login, we ask for four permissions: instagram_basic, instagram_manage_insights, pages_show_list and pages_read_engagement. With them we read:

• Your Instagram profile: username, name, bio, website, profile picture, and follower, following and post counts.
• Your posts and Reels: the video, thumbnail, caption, posting time, and like and comment counts.
• Insights for your Reels and your account, such as views, reach, saves, shares and watch time.
• Audience breakdowns Instagram provides as totals: age range, gender, city and country. These are counts, not individual followers.
• The Facebook Page linked to your Instagram account, and an access token for it.

When you join with an invite key and your Instagram handle instead of connecting Instagram, we do not connect to your Instagram account and hold no access token for it. We read your public Reels — the video, caption, posting time and the public counts shown on them, such as views — through the public-data provider named below, once a day and when you press Sync now. We get no insights and no audience data. You ask us to do this by entering the key we sent to that account, for that handle.

We do not read your direct messages, your follower or following lists, posts you are tagged in, or the text of comments.

What you tell us: your display name, niche, language and the topics you pick during setup, and any instructions you give when revising a hook or script.

Public content from other accounts: to show what is working in your niche, we analyse Reels, captions and public metrics from public Instagram accounts in that niche, and public news articles. We use this to describe trends. We do not build profiles of the people behind those accounts.

How you use the app:which pages you open and which features you use — for example opening an idea's sources, copying a script, or using a board filter — and any error messages you were shown. We record these ourselves, on our own servers, to see which features help and where people get stuck. They never include anything you typed, and no third-party analytics service receives them.

Cookies: one session cookie that keeps you signed in. We do not use advertising or tracking cookies.

• To analyse your Reels: we transcribe what is said, read the text on screen, and work out the hook, format and topics of each one.
• To compare how your Reels performed and spot what works for your audience.
• To write ideas, hooks and scripts for you, based on your own past Reels.
• To keep your library up to date as you post and as your numbers change.
• To see which features are used and where people run into errors, so we can improve them.
• To run, secure and fix the service.

We do not sell your data. We do not use it for advertising. We do not use it to train our own AI models.

We use the following service providers to run Curious Journey. Each one receives only what it needs for its job:

• Oracle Cloud (Mumbai region): our servers, database and file storage.
• Vercel: hosts the website you are reading.
• Google: sign-in, and the Gemini models that read the video frames and text on screen.
• Deepgram: turns the audio of a Reel into a transcript.
• Cohere: turns transcripts, captions and summaries into search vectors, so we can find related Reels and ideas.
• OpenRouter, and the AI model providers it routes to (currently DeepSeek): reads transcripts and captions, and writes ideas and scripts.
• A public-data provider: fetches public Reels and their public metrics. It also fetches the video of your own Reels when Instagram does not give us the file, and, if you joined with your handle, it is how we read your own public Reels.
• Meta: the source of your Instagram data, under Meta’s own privacy policy.

We may also disclose data if the law requires it, or to protect the safety of our users or the service.

Your Instagram access token is encrypted with a key unique to your account before it is stored, and is never written to our logs. Data travels over HTTPS. Access to our servers is limited to the people who run the service.

We keep your data while your account is active, so your library stays complete as you post. The raw responses we receive from Instagram are kept for up to two years so we can fix errors in how we read them.

If you remove Curious Journey from your Facebook or Instagram settings, we stop collecting new data straight away. We keep what we already have, so your library is still there if you reconnect. To have it erased, ask us as described below.

Email founder@origynlabs.in from the address you signed in with, and say you want your data deleted. We will delete your account, your Instagram connection and token, your Reels, transcripts, analysis, insights and the ideas we generated for you within 30 days, and confirm by email when it is done. Copies in our encrypted backups are erased as those backups expire.

This is also the way to ask for deletion if you found this page through Facebook’s or Instagram’s app settings.

If you joined with your handle, there is nothing to remove in Facebook or Instagram: email us and we stop reading your public Reels.

To stop us collecting anything new first, remove Curious Journey in Facebook under Settings & privacy → Settings → Apps and Websites, or in Instagram under Settings → Website permissions → Apps and websites.

You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to founder@origynlabs.in. We reply within 30 days.

Curious Journey is for creators aged 18 and over. We do not knowingly collect data from anyone younger. If you believe we have, write to us and we will delete it.

If we change what we collect or how we use it, we will update this page and change the date at the top. For a significant change, we will also email you before it takes effect.

Questions or requests about your data: founder@origynlabs.in. See also our terms of service.