Privacy policy

1. What stays on your device

• Videos and audio: saved straight to your device storage. We have no cloud copy.
• On-device processing: background segmentation, face detection and blurring, and gesture recognition all run on your phone's own hardware. No frame is sent anywhere for analysis.
• Teleprompter scripts: stored on this phone only, in a separate space per account, never uploaded or backed up, and never recorded into the video itself. A recording made with the prompter open keeps a copy of the script it was read from, on this phone, for as long as the recording exists.
• Settings and editor drafts: layouts, filters, camera preferences and unfinished edits are stored on the device, and included in your own Android backup if you use one.

2. Signing in is optional

You can record, edit and use the gallery without an account. Signing in with Google turns on the teleprompter and lets you message us. If you sign in, we store:

• Your Google account ID, email address, name and profile photo URL.
• The support messages you send us, and which of our replies you have read.

This is kept in Firebase Authentication and Google Cloud Firestore, encrypted, and restricted to your account and us — no other user can read it. We use it only to give you the features you signed in for and to reply to you: never sold, shared, or used for ads or marketing. We keep it until you delete your account (see section 6).

3. Crash reports and analytics

Whether or not you sign in, the app uses Google Firebase for:

• Crash reports (Crashlytics): stack trace, app and OS version, and device model.
• Usage analytics (Analytics): Firebase's automatic data (app opens, sessions, screens, device model, OS, language and region). UnKover shows no ads. Version 2.6 and earlier also collected the Android advertising ID; later versions do not.
• App integrity (App Check): confirms requests come from a genuine install.

We use this to find and fix crashes and to understand which features are used, so we can keep the app working and improve it. None of this includes your video, audio or anything you filmed.

4. Permissions

• Camera and microphone: capturing video and audio. Processed locally, never transmitted.
• Photos and videos: saving recordings to your gallery and picking existing videos to edit. You can grant access to selected items only.
• Notifications: telling you when we reply to a support message. Optional; you can turn them off at any time.
• Internet access: signing in, support messages, and the crash reports and analytics in section 3. Your video and audio never use it.
• Vibration: haptic feedback on controls.

5. Third-party services

We use Google services, governed by the Google Privacy Policy:

• Firebase Authentication and Google Sign-In: optional sign-in
• Cloud Firestore: storing your support threads
• Firebase Crashlytics and Analytics: crash reports and usage stats
• Google Play services: app delivery and on-device model support

We use no other third-party analytics, advertising, or tracking services.

Google may process this data on servers in the United States and other countries. Google protects these transfers with the safeguards set out in its data processing terms, including the European Commission's standard contractual clauses.

6. Your data: access, correction and deletion

You can ask for a copy of the personal data we hold about you (your account record and your support messages), or ask us to correct it. From version 2.7, you can download that copy yourself in the app: Settings › My account › Download my data. Or email us from the address on your account and we will reply within one month. Your videos, scripts, settings and drafts never reach us, so they are not part of it: you can view or delete them on your phone yourself.

• Videos: delete them from the app or your gallery. We never have a copy.
• Account: Settings › My account › Delete account removes your sign-in and that account's scripts on this phone. Without the app, see the account deletion page.
• Teleprompter scripts: removed when you delete them, delete your account, clear the app's storage or uninstall. The copy kept with a recording goes when you delete that recording.
• Support messages: not removed with your account. Email us and we will delete them.
• Crash and analytics data: kept for up to 14 months.

7. Children

UnKover is not directed at children under 13, and we do not knowingly collect their data. If you believe we have, contact us and we will delete it.

8. Changes

If what we collect changes, we update this page and the date above.

9. Contact

Questions, or requests to access, correct or delete your data: potato.lab.cc@gmail.com