Privacy

1. Who we are

TidyTake is the controller of the personal data described here. Write to privacy@tidytake.com with any question about this notice or to exercise a right under it.

2. What we collect

Account data: your email address, the sign-in method you used, the date the account was created, and the interface language you chose.

Project data: the title you gave a project, its duration, the transcript text, the cut plan, and the settings used for the export. Transcript text is content you created and is linked to your account.

Device data: the platform, the app version and the date each device was last seen, so you can recognise your own devices and sign out of one you no longer have.

Subscription data: the status of your subscription, which store it came from, and when it renews. Card details are never seen by us; the store or our payment provider handles them.

Product events: which screens are opened and which actions succeed or fail, so we can find broken flows. Events carry an account id, never the content of your video or transcript.

Diagnostics: crash reports, which contain the state of the app at the moment it failed and no user content.

3. What never leaves your phone

Video and image frames. Every stage that touches the picture — decoding, cutting, captioning, rendering the export — runs on the device. Nothing we run accepts a video file, and we have nowhere to put one.

Audio, unless you turn on the cloud lane for a language that has no on-device model. That is off by default, is asked for on a screen that names the vendor, and can be switched off again at any time in Settings.

4. Deciding the cut

To choose which take to keep, TidyTake sends the transcript text, the pause timings and your script if you added one to a cut decision service, running under our own account. We ask for your agreement before the first time this happens, and cutting is disabled until you agree. The service is named on that screen.

It processes the request on our behalf and does not train on it. We keep a cache of cut results so that repeating the same cut costs nothing; that cache holds no account identifier and expires after 90 days.

5. The cloud transcription lane

Where a language has no on-device speech model, or where a phone is below the floor we can run on, transcription happens on our servers instead. Only the audio track is sent; the picture is never extracted or uploaded.

The audio is deleted as soon as the transcript is produced, and automatically within one day regardless. The vendor for each language is named on the consent screen before you agree, and retention at the vendor is set to zero where the vendor offers that setting.

6. Legal bases

Where the UK GDPR or EU GDPR applies: we process account, project and subscription data to perform our contract with you; product events and diagnostics on our legitimate interest in a working product, which you can object to by turning analytics off in Settings; transcript processing and the cloud audio lane on your consent, which you may withdraw at any time.

7. Sharing

We share only with the processors listed above, each under a contract that limits them to our instructions. We do not sell personal information, we do not share it for cross-context behavioural advertising, and we do not use it to build profiles for anyone else.

We may disclose data if the law requires it, and we will tell you unless we are forbidden from doing so.

8. Retention

Account, project and device records last as long as your account. Delete the account and they are removed within 30 days, including from backups on their normal rotation.

Cloud-lane job records expire after seven days. The cut cache expires after 90 days and carries no account identifier. Product events are kept for twelve months.

9. Your rights

You can ask for a copy of your data, correct it, delete it, or object to processing based on legitimate interest. Delete your account from Settings inside the app, or write to privacy@tidytake.com if you cannot get in.

If you are in the UK or the EU you may complain to your data protection authority. We would rather you told us first so we can fix it.

10. Children

TidyTake is not for children under 13, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.

11. International transfers

Our servers run in the United States. Where data moves from the UK or the EU we rely on the standard contractual clauses and the UK addendum with each processor.

12. Changes

If we change this notice in a way that matters we will tell you in the app before the change takes effect, and the date at the top will move.