Privacy Policy

Last updated: March 6, 2026

Overview

Broadside is a cross-platform social media composer built by Hyperfocused Engineer. Your privacy matters. This policy explains what data the app handles and how.

Data Storage

All your data stays on your device:

Posts, drafts, and history are stored locally using AsyncStorage.
OAuth tokens are stored securely using the device's secure enclave (expo-secure-store).
AI API keys you provide are stored in the device's secure storage and never transmitted to our servers.

Third-Party Services

When you connect accounts or use AI features, Broadside communicates directly with the respective platform APIs:

Social platforms (Twitter, LinkedIn, Reddit): OAuth tokens are used to post on your behalf. Broadside uses a Cloudflare Worker for token refresh only.
AI providers (Claude, OpenAI, Gemini): If you provide an API key, your content is sent to the selected provider for reformatting. No content is stored server-side.
Share sheet (Instagram, WhatsApp, Facebook): Content is passed to the native OS share interface. No data leaves the device until you confirm the share.

Data We Do Not Collect

We do not collect analytics or telemetry.
We do not store your posts, credentials, or API keys on any server.
We do not sell or share your data with third parties.

Contact

Questions? Open an issue on GitHub.