Effective October 22, 2026
Konvo is an app for iPhone, Android and Mac that opens Instagram’s own website in a focused window showing your messages and friends’ stories, with the feed, Reels, and Explore hidden. There is also a browser extension that redirects instagram.com’s feed, reels, and profile pages to this site. You sign in to Instagram directly with Instagram; Konvo is not affiliated with Meta.
Android releases through build 10 are free. Later releases may offer a Google Play subscription while preserving eligible existing users’ free access. Optional Google sign-in can restore that free access on another device. Instagram still processes sign-in, messages, media and usage information through its website inside the app. For Android billing, recovery, local storage and deletion details, read the Konvo Android Privacy Policy. The purchase and app analytics descriptions below refer to the iPhone app.
We do not collect your Instagram password or save your message text. Your Instagram sign-in happens directly between you and instagram.com inside the app. By default, your Instagram session stays on your device. The optional cloud message notification connection described below shares a session with Konvo only after you explicitly enable it. You can end your Instagram session any time from Instagram’s own “Where you’re logged in” settings. The browser extension contains only static redirect rules: it runs no code on any page, and reads and transmits no data.
When this feature is available, you can choose to connect your Instagram account so Konvo can detect new messages while the app is closed. This is separate from allowing notifications in iPhone Settings. If you connect, Konvo sends a copy of your Instagram session to its notification server over an encrypted connection and stores it encrypted. This session allows the server to access your inbox. Message content is processed in memory to detect new messages; message text, attachments, sender names and previews are not saved by this service. The alert contains generic text and opens your inbox.
The service stores encrypted session and device-token data, an account identifier needed to recognize your own messages, and limited connection, read/mute and delivery metadata. Delivery records are removed after one day and message deduplication identifiers after two days. Devices that have not contacted the service for 30 days expire. We use this information to provide notifications, prevent duplicates and diagnose delivery failures. We do not use it for advertising.
For enrollment without an invitation, Apple App Attest verifies that the request comes from a genuine installation of Konvo. Apple receives a cryptographic hash, not your Instagram session or message text. The notification service stores the verification key, an encrypted Apple attestation receipt and a counter to reject replayed requests. These verification records are removed when you disconnect; incomplete enrollments expire after one day.
Disconnect in Konvo’s Message notifications settings to delete that device’s connection and queued alerts. When the last connected device disconnects, the server deletes the saved Instagram session and connection state. If you are offline, the app retains the deletion request and retries when you return online; server processing can continue until that request arrives. A hash of the random, revoked device credential is retained for up to 90 days to prevent an in-flight connection request from undoing your disconnect. This hash contains no Instagram identity or message content. Instagram can also revoke the session through its own account settings.
The following app analytics and purchase information are separate from the optional notification connection described above.
Anonymous usage events. Which onboarding screen you reached, whether sign-in succeeded, and that the app was opened. These carry a random identifier generated on your device, not your Instagram username, and never the contents of anything you read or write.
Your email address, only if you type it in. The app asks for one during setup and the step is skippable; if you skip it we have no way to contact you and nothing is stored. If you give it, we use it to ask what you think of Konvo and to tell you about changes to it. We do not sell it, and you can have it deleted by emailing the address at the bottom of this page.
Android waitlist. If you join on this website, we store your email address, signup date, and consent to receive an email about Android availability. Waitlist emails are stored in our server-side database with Upstash, not included in the waitlist analytics events. We use a temporary, keyed hash of your IP address to limit spam; it expires after one hour. You can leave the list or request deletion by emailing the address below.
Eligible students aged 13–17 can request three months of free access using a supported school email. We use the age entered during onboarding to offer this option. We check the email domain against a list of supported schools. This check does not verify mailbox ownership, age, or current enrollment. This flow does not send a verification email, and we do not add the address to a marketing list.
Konvo keeps rate-limit records in Upstash. To prevent repeated claims, we retain a keyed hash of the supplied school address linked to the anonymous subscription customer and a protected installation identifier, along with the access dates. RevenueCat manages the three-month entitlement. The student-access service does not retain the full address in its claim records, and addresses and codes are excluded from app analytics. This offer does not create an auto-renewing subscription or an automatic charge. Contact us below to request access to or deletion of these records.
Konvo on iPhone offers auto-renewable subscriptions. Purchases are made through Apple and billed to your Apple ID; we never see your payment details. RevenueCat verifies subscription status using an anonymous app identifier. We use that status to manage access and, if you opt in, send relevant trial reminders.
On iPhone, we ask for your separate, optional permission before sharing refund-related data. If you agree and later request a refund, RevenueCat may send Apple your purchase and delivery status and confirmation of your consent so Apple can assess the request. We do not send your Instagram messages, contacts or browsing activity for this purpose. Apple makes the refund decision. Declining does not affect your ability to purchase or request a refund. You can change your choice in Konvo’s Privacy menu under Refund Data Sharing. Existing customers are not opted in automatically.
On iPhone, you can opt into trial tips and reminders to return to Konvo. For these reminders, we link your notification token to your anonymous RevenueCat identifier and store your notification preference, last app activity time, time-zone offset, trial expiry and whether blocking is enabled. These records are kept in Upstash and expire 30 days after their last update. We check subscription status before sending a reminder. Turn these messages off from Konvo’s lock tab, or turn off notifications in iPhone Settings. We do not collect which apps you selected in Screen Time.
If you cancel a trial, we may ask one optional question about why. The selected reason and the order of choices are sent to PostHog under your anonymous app identifier. This survey does not collect message contents, passwords or free-text responses.
Both this website and the iPhone app use PostHog to count anonymous visits, screens reached and buttons pressed, so we can see where setup breaks. The browser extension contains no analytics.
Questions or requests: matthewchan071010@gmail.com