Legal

Privacy Policy

Last updated: 07/07/2026

Colossus is a third-party client for federated networks. This page informs you about the policies regarding the collection, use and disclosure of personal information when using the app.

1. Overview

Colossus is a third-party client for federated networks. The app connects to the servers of the instance of your choice to display your timeline, publish content, and interact with other users. You must have an account on a compatible instance and accept its Privacy Policy and Terms of Service to use the app.

The app uses Apple's translation technology to translate posts on-device. Apple manages the language dictionary downloads. Apple's Privacy Policy applies to data handled by Apple.

If you reside in the European Union, your personal data will be processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation ("GDPR"), as well as any other applicable local regulations.

2. Information we collect and do not collect

Information we process:

  • Session: The app stores OAuth tokens and session data securely in the device Keychain to authenticate you with your instance's servers. Your password is never entered into or stored in the app.
  • Instance data: The app accesses your timeline, profile, notifications and other data from your account through the protocol's public API. This data is processed locally on your device.

Information we do NOT collect:

  • We do not maintain our own servers or a centralized user backend.
  • We do not collect usage analytics, behavioral metrics or telemetry.
  • We do not collect information about your device's location.
  • We do not sell or share data for marketing or advertising purposes.
  • No translation data is sent to external servers. Translations are processed locally on the device.

3. Local storage and security

OAuth tokens and session data are stored securely in the iOS Keychain. Cached translations and app preferences are stored locally on the device.

Colossus does not guarantee absolute security, but strives to apply the security best practices recommended for Apple platforms. You can erase all stored information by uninstalling the app.

4. Children

Colossus is intended for users over 17 years of age, in line with typical requirements for federated social networks. We do not knowingly collect information from minors.

If you are a parent or guardian and believe that a minor has used the app, you can contact the developer.

5. User rights

To the extent that the app does not create centralized accounts or maintain its own backend of personal data, you retain control over most of the information directly on your device.

Depending on your jurisdiction, you may have rights such as:

  • Accessing the data held about you.
  • Rectifying inaccurate information.
  • Requesting the deletion of locally stored data (for example, by clearing history or uninstalling the app).
  • Restricting or objecting to certain processing.

To exercise these rights beyond what you can manage from the app itself or the operating system, you can contact the developer.

If you are in the European Union, these rights correspond, among others, to those provided for in the GDPR (access, rectification, erasure, restriction of processing, objection and data portability). You may also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence.

6. Legal basis and scope (GDPR)

Where the GDPR applies, the main legal basis for the processing of your data by Colossus is the necessity of such processing to provide the service you request (art. 6.1.b GDPR: performance of a contract or pre-contractual measures taken at the data subject's request).

In certain cases, processing may also be based on your consent (art. 6.1.a GDPR), for example when you decide to enable certain optional features or submit particularly sensitive information. You may withdraw your consent at any time from the app settings or by ceasing to use the corresponding features.

7. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the app, in the third-party services used or in the applicable legal requirements.

When a new version of the policy is published, the "Last updated" date at the beginning of this document will be updated. We recommend reviewing it periodically.

8. Support

If you have questions, comments or requests related to this Privacy Policy or to data processing in Colossus, see the support page.

This Privacy Policy is provided for informational purposes only and may require additional adaptation by a legal professional according to the laws and regulations applicable in your country or region.