Privacy Policy
Updated 10 October 2026Who runs kurfy
kurfy is provided by Harish Sinha. For privacy questions, contact hsinha76@gmail.com. kurfy is independent of Instagram and Meta.
How Instagram sign-in works
The app opens Instagram’s website in a device WebView. You enter your credentials on Instagram’s pages, not into a kurfy account. Instagram receives and processes your sign-in, messages, posts and other activity under its own policies. kurfy checks for an Instagram session cookie and a local account identifier to know whether you are signed in. It reads profile links or names shown on Instagram’s pages to open your profile, and may keep that link in the WebView’s session storage for this account. It does not send these details to a kurfy server.
Data kept on your device
The WebView stores Instagram cookies and website data on your device so your session can continue. kurfy also stores local preferences, including onboarding and tutorial state, the date of your daily Feed allowance, remaining Feed time and the expiry time of an active Feed visit. These time records stay on your device. kurfy does not use Android Accessibility Services or Apple Screen Time permissions, monitor other apps or collect your device-wide screen time. The current app has no kurfy account, advertising SDK or analytics service. We do not operate a server that receives your Instagram password or messages.
Links and policy pages
The Instagram browser is restricted to Instagram’s website. Links to other websites are opened in your device’s external browser. kurfy’s Privacy, Terms and Safety pages are loaded from our website in a separate in-app WebView. Visiting those pages also sends a web request to our hosting provider, as described below.
Support messages
Tapping a support or contact link opens your email app with our address and a subject prefilled. You choose what to write and whether to send it. Emails we receive, including your address and any attachments, are stored in our email provider’s mailbox and used to respond to and follow up on your request. We keep correspondence while handling your request and any follow-up, then delete it when it is no longer needed, unless an applicable legal obligation requires us to retain it. To request deletion, email hsinha76@gmail.com. Signing out or uninstalling kurfy does not delete emails you have sent us.
Media you choose to send
Instagram’s website can offer a file or photo picker when you choose to upload or send media. Only the content you choose is supplied to that website. Where iOS offers camera or microphone access, the operating system asks for permission. Android currently supports selected-file uploads, not live camera or microphone capture in the WebView. Available features depend on Instagram’s website and your device. kurfy does not upload a separate copy to its own server.
The kurfy website
Our public website is hosted by Vercel. When you visit, Vercel receives connection and request information, such as your IP address, browser information and the page requested, to deliver and protect the website. Hosting records are handled by Vercel under its service terms and privacy practices. The website code does not add advertising trackers, an analytics script or a contact form. The email link opens your email app; it does not send a message by itself. For questions or requests about website data, contact hsinha76@gmail.com.
Retention and deletion
Local preferences remain until you change them or clear the app’s data, subject to your device’s storage and uninstall behavior. Signing out removes Instagram cookies, web storage and the WebView resource cache on Android, and the app’s WebKit website data on iOS. It does not delete your Instagram account or information held by Instagram. Use Instagram’s account and privacy controls for data held by Instagram. For questions about kurfy’s local data, or to request deletion of support correspondence, contact the email above.
Changes
We may update this policy when the app’s behavior changes. The date above identifies this version. Any store privacy disclosures must match the released app and the version of this policy.