Fitra Social Analytics Privacy Policy

Last updated: 15 August 2026

1. About this policy

Fitra Healing is operated by Fitra Healing ("Fitra Healing", "we", "us" or "our").

This Privacy Policy explains how the Fitra Social Analytics application (the "Application") collects, uses, stores, discloses and deletes information obtained when an authorised user connects a Facebook, Instagram or TikTok account.

The Application is a read-only reporting and content-analysis service. It helps Fitra Healing understand the performance of social media accounts and content that Fitra Healing owns or is authorised to manage.

This policy covers the Application and its social-media API integrations. It does not describe how counselling, mentoring or other client health information is handled. Those activities require separate privacy information appropriate to Fitra Healing's professional services.

2. Information we collect

When an authorised user connects a supported social-media account, we may collect the following information, depending on the permissions granted and the data made available by the platform:

• Account identifiers, usernames, display names, profile images and account type.
• Page, profile, business, advertising-account and media identifiers.
• Public post and video information, such as captions, descriptions, publication dates, duration, thumbnails and links.
• Performance information, such as views, reach, impressions, likes, reactions, comments counts, shares, saves, follower counts and other available aggregated insights.
• Advertising performance information where an authorised Fitra Healing advertising account is connected and read-only advertising access has been granted.
• Authorisation information, such as access tokens, refresh tokens, granted permissions, token expiry dates and connection status.
• Limited technical and security information generated when the Application is used, such as access time, error logs, device or browser information and IP address.
• Communications sent to us about access, correction, privacy, support or data-deletion requests.

The exact information available is controlled by Meta, TikTok or YouTube and by the permissions approved by the authorised user.

3. Information we do not request through the Application

The Application does not request or store a user's Facebook, Instagram or TikTok password. Authentication occurs on the relevant platform through its official authorisation process.

The Application is not designed to collect counselling notes, health records, payment-card details, private messages, follower lists or the text of individual comments. If the Application's functions change, this policy and the permission request will be updated before the new information is collected.

4. Why we collect and use information

We collect and use information only as reasonably necessary to:

• Connect and authenticate authorised Fitra Healing social-media accounts.
• Produce internal social-media performance reports and dashboards.
• Compare the performance of posts, videos, campaigns and platforms.
• Identify content topics, formats and publishing practices that perform effectively.
• Maintain daily or periodic analytics snapshots where platform metrics change over time.
• Diagnose errors, protect the Application and prevent unauthorised access.
• Respond to access, correction, support, complaint and deletion requests.
• Comply with applicable laws and the requirements of Meta and TikTok.

We do not use information obtained through the Application to make clinical, employment, credit, insurance or other high-impact decisions about individuals.

5. Authority and consent

An account is connected only after an authorised user completes the relevant Facebook, Instagram or TikTok authorisation process and grants the displayed permissions.

The user may decline a permission or disconnect the Application. Some reports may not work if required read-only permissions are not granted.

6. Disclosure of information

We may disclose information only to:

• Fitra Healing personnel and contractors who need access to operate, secure or analyse the Application.
• Service providers that host, back up, secure, monitor or maintain the Application, subject to appropriate confidentiality and security controls.
• Meta and TikTok when required to authenticate accounts, retrieve authorised information, revoke access or comply with their platform requirements.
• Professional advisers, regulators, courts, law-enforcement bodies or other parties where disclosure is authorised or required by law.

We do not sell personal information or exchange it for advertising lists or other benefits.

7. Overseas processing

Meta, TikTok and some technology service providers operate internationally. Information may therefore be processed or stored outside Australia and in other countries where those platforms operate.

Before the Application moves into production, this section will be updated to identify the countries used by Fitra Healing's selected hosting and backup providers where it is practical to do so.

8. Storage and security

We take reasonable steps to protect information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures for the production Application will include:

• Encryption in transit using HTTPS.
• Encrypted storage for platform tokens and other secrets.
• Access controls limited to authorised personnel.
• Separate storage of secrets from application source code.
• Logging, monitoring, software updates and periodic access review.
• Read-only platform permissions wherever available.

No internet-connected service can be guaranteed to be completely secure. If an eligible data breach is likely to cause serious harm, we will assess and respond to it in accordance with applicable Australian law.

9. Retention and deletion

We retain information only for as long as reasonably necessary for the purposes described in this policy, platform requirements and applicable law.

Our intended production retention rules are:

• Access and refresh tokens are revoked or deleted as soon as reasonably practicable after an account is disconnected or a verified deletion request is approved.
• Active account and analytics data associated with the request is deleted within 30 days after verification, unless retention is required by law.
• Residual copies in protected backups are removed through the normal backup cycle within 90 days and are not restored to active use.
• Security and audit records may be retained where reasonably necessary to investigate misuse, document deletion or meet legal obligations.

Aggregated or de-identified statistics that no longer identify an account or individual may be retained.

10. Access and correction

You may request access to personal information we hold about you or ask us to correct inaccurate information. Contact us using the details below. We may need to verify your identity and authority over the relevant account before acting.

11. Withdrawing access and requesting deletion

You may disconnect the Application through the connected platform's app or permissions settings. You may also request deletion by following our User Data Deletion Instructions at:

fitrahealing.net/data-deletion

Removing platform access stops future API collection, but a separate deletion request may still be needed to delete information previously imported into the Application.

12. Privacy complaints

If you have a privacy question or complaint, contact us at [email protected]. Include enough information for us to understand the issue, but do not send passwords, access tokens, identity documents or sensitive health information by ordinary email.

We will acknowledge the complaint and aim to provide a substantive response within 30 days. If you are not satisfied, you may be entitled to contact the Office of the Australian Information Commissioner at oaic.gov.au.

13. Changes to this policy

We may update this policy when the Application, platform permissions, service providers or legal requirements change. The current version and its effective date will be published on this page. Material changes will be communicated where reasonably appropriate.

14. Contact

Fitra Healing
Operated by: Fitra Healing
Email: [email protected]
Website: fitrahealing.net