Privacy Policy

1. Information we collect

We collect information you provide, information generated through your use of the Service, and limited technical information needed to operate and secure it.

• Account information: an anonymous account and persistent device identifier are created when you first use the app. You may optionally create a portable account with Apple, Google, or a one-time code sent to your email address; we never ask for or store a password. We receive your provider identifier, name, verified email address, and authentication status as applicable. If you use Apple's Hide My Email, we receive an @privaterelay.appleid.com address instead of your personal address; Apple controls its forwarding and you may disable it through Apple.
• Email preferences: if you voluntarily opt in to product news and tips, we record your choice, time, policy version, source, locale, and confirmation that you are at least 18. We do not collect your full date of birth for this purpose.
• Content and profile data: scripts, creator profiles, preferences, AI prompts, generated text, translations, and other content you choose to sync.
• Voice and media data: voice samples, voice clones, audio, video, and related files you intentionally submit for cloud features such as voice cloning, text-to-speech, dubbing, or AI analysis.
• Subscription data: App Store product and transaction identifiers, subscription status, expiration information, and credit balances. We do not receive your full payment-card details.
• Device and usage data: app version, device and operating-system information, language, feature interactions, diagnostics, crash data, network events, and session-replay information. App analytics may infer approximate location from the IP address; this does not use GPS or precise location permission.
• Notification data: push-notification tokens and notification status when you enable notifications.
• Legacy advertising data: versions of the iOS app before 2.2.1 (build 31) may collect advertising identifiers and related signals when permitted by device settings and Apple's App Tracking Transparency framework. Version 2.2.1 (build 31) and later remove this collection capability.

2. On-device and cloud processing

Many recording, teleprompter, subtitle, framing, and background-removal operations are performed on your device. Content stays on your device unless you choose a feature that requires cloud processing, syncing, backup, sharing, or upload.

Cloud features may transmit the selected text, audio, video, voice sample, or generated output to our backend and the providers needed to complete your request.

On the PromptFy web app, your videos and media stay in your browser's storage on your computer; only the project file (cuts, texts, settings) syncs to your account. Files you choose to send to another device are stored encrypted in transit in Cloudflare R2 and deleted after 7 days. Caption transcription on the web sends only the selected clip's audio through our backend to ElevenLabs; our backend does not store that audio. Web voice isolation runs locally with DeepFilterNet3: it removes noise and room sound without uploading your audio, and it does not separate music from speech.

3. How we use information

• Provide, authenticate, sync, maintain, and secure the Service.
• Generate scripts, translations, narration, voice clones, dubbing, and other requested outputs.
• Manage subscriptions, credits, usage limits, purchases, and entitlements.
• Deliver notifications and respond to support or privacy requests.
• Send product news and tips only when you have explicitly opted in, and maintain consent, unsubscribe, bounce, and suppression records.
• Measure product performance, understand feature use, prevent abuse, diagnose failures, and improve the Service.
• In legacy versions of the iOS app before 2.2.1 (build 31) only, show advertising to eligible users and personalize it only when permission and applicable law allow.
• Comply with legal obligations and enforce our Terms of Use.

4. Legal bases

Depending on your location and the activity involved, we process information to perform our contract with you, with your consent, to comply with legal obligations, and for legitimate interests such as security, fraud prevention, support, analytics, and service improvement. You may withdraw consent where consent is the applicable basis.

5. Service providers and sharing

We do not sell your personal information. We share information only as needed to operate requested features, comply with law, protect rights and safety, or complete a business transaction subject to appropriate safeguards.

• Apple: App Store payments, subscriptions, Sign in with Apple, and push notifications.
• Google Firebase and Google AI/Gemini: analytics, crash reporting, remote configuration, app integrity, AI generation, translation, and selected AI-assisted features.
• Amplitude: product analytics, network and interaction analytics, and session replay.
• Google AdMob: used only by legacy versions of the iOS app before 2.2.1 (build 31), subject to device permissions and consent choices. It is removed from build 31 and later.
• ElevenLabs: voice cloning, text-to-speech, and dubbing.
• TikTok: direct sharing only when you choose to share content through TikTok.
• Railway and Cloudflare R2: backend hosting, processing infrastructure, and object storage.
• Resend: delivery of opted-in product emails and management of delivery, bounce, unsubscribe, and suppression events.
• Stripe: web subscriptions and credit packs, invoices, and payment methods. We do not receive your full card number.
• ElevenLabs (web app): speech-to-text for captions of the clips you choose. Web voice isolation runs on your computer and does not use ElevenLabs.
• Browser push services (for example Google, Apple, Mozilla): delivery of web notifications you enable.

6. Analytics, session replay, and legacy advertising

Firebase Analytics and Amplitude help us understand screens viewed, actions taken, app lifecycle events, performance, and failures. Amplitude Session Replay may record visual representations of interactions in the app. Avoid entering sensitive information into free-form fields when it is not needed for a feature.

Starting with version 2.2.1 (build 31) of the iOS app, PromptFy contains no Google AdMob SDK, displays no third-party ads, does not collect the advertising identifier, and does not request App Tracking Transparency permission. Firebase Analytics uses its Core variant without IDFA capability, with advertising storage, advertising user data and ad personalization disabled. Remaining product analytics and diagnostics are not used to track users across apps or websites owned by other companies. Earlier versions of the iOS app may still display ads and request tracking permission; update the app to remove those components.

On the PromptFy website, we use Google Analytics and, when configured, Amplitude to measure visits, reading, and download-link clicks. These tools can store a browser identifier. Website Amplitude has no session replay or automatic form capture; we disable IP collection and strip URL query strings and fragments. A future authenticated web flow can associate events with an internal account ID rather than an email address; an anonymous website visit does not identify an app installation. You can block or delete these cookies in your browser settings, or use a browser extension that blocks analytics; the website works the same either way. The website does not show ads and sets no advertising cookies.

7. Retention and deletion

We retain account data while your account is active and for as long as reasonably necessary to provide the Service, resolve disputes, prevent fraud, meet legal or accounting obligations, and enforce agreements. Retention varies by data type and provider.

You can delete your PromptFy account in the app under Settings. This removes account-linked records from our active database. Some artifacts held by external voice-processing or object-storage providers are not currently removed automatically with in-app account deletion; contact us to request deletion of those artifacts. Cached copies, backups, security logs, and transaction records required by law may remain as permitted by applicable retention obligations.

Deleting PromptFy does not cancel an App Store subscription. Subscriptions must be managed in your Apple ID settings.

Consent and suppression records may be retained after opt-out or account deletion when reasonably necessary to demonstrate your choice, comply with law, and make sure we do not send messages you declined. Apple private-relay forwarding remains under Apple's control.

Web subscriptions are billed by Stripe and can be canceled at any time in Account > Manage subscription; canceling stops renewal at the end of the paid period. Deleting PromptFy does not cancel a Stripe subscription by itself. Device-to-device transfers expire and are deleted 7 days after sending.

8. Security

We use technical and organizational safeguards designed to protect information, including authenticated access, encrypted transport, app-integrity controls, access restrictions, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International transfers

Our providers may process information in Brazil, the United States, Europe, and other countries. Where required, we use contractual, organizational, or other safeguards for international transfers.

10. Your choices and rights

Depending on your location, including under Brazil's LGPD, you may request confirmation of processing, access, correction, portability, information about sharing, anonymization, restriction, objection, withdrawal of consent, or deletion, subject to legal exceptions. You may also change camera, microphone, photo-library, notification, and tracking permissions in device settings. You can withdraw email-marketing consent in the app or through the unsubscribe mechanism included in marketing messages.

11. Children

PromptFy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Optional marketing email enrollment requires confirmation that the user is at least 18. If you believe a child has provided information, contact us so we can investigate and take appropriate action.

12. Changes and contact

We may update this Policy as the Service, providers, or legal requirements change. We will update the date above and provide additional notice when appropriate. Contact IVLS Tech at support@promptfyapp.com for privacy requests or questions.