Privacy Policy

KatVid AI, a limited liability company registered in Georgia, United States ("KatVid AI", "KatVid", "we", "us" or "our"), operates the KatVid app for iPhone, the website at usekatvidai.com (katvidai.com leads to the same site), and the AI editing service behind them (together, the "Service"). This Policy explains what information we handle when you use the Service, why, who else handles it, how long it is kept, and the choices you have.

It is written around how KatVid actually works. The most important thing to know is that four kinds of information are treated very differently: your raw video, the audio extracted from it, the transcript and timing data made from that audio, and your account and billing details. Each is described below.

The videos you record in KatVid or import into it are stored on your iPhone, in the app's own storage. KatVid does not upload your raw video to us or to anyone else as part of making an AI first cut, editing, or exporting. Your cuts, edits, captions, overlays and exported videos are also made and kept on your iPhone, and exports go to your Photos library.

Because of this, we do not hold a copy of your footage and cannot restore it for you. Deleting the app, or deleting a cut in the app, removes that material from the app's storage on your device.

When you ask KatVid for an AI first cut, the app extracts the audio track from your video on your iPhone and sends only that audio, in a compressed audio file, to our servers, together with the video's length, a checksum of the audio file, and an identifier for the request. We refuse audio longer than 15 minutes.

Our servers pass the audio to our transcription provider, which returns a transcript of the speech with the start and end time of each word. Once we have normalised that transcript, we ask the provider to delete its copy of the audio and the transcript.

We then send the transcript and word timings, and nothing else about the video, to our AI provider, which proposes which parts of the speech to remove. We ask that provider not to store the request for its own use. We turn its proposal into an edit timeline and return the timeline to your iPhone, where the app applies it to your local video.

Our servers keep a record of each request: the transcript and word timings, the AI proposal and the resulting timeline, the video's length, the audio checksum and size, processing times and token counts, and the identifier of the app installation that made the request. We keep this so that a retry does not pay for the same work twice, so that we can diagnose problems, and so that we can enforce the limits in the Terms. The audio file itself is not kept on our servers after it has been passed to the transcription provider.

Profile. The app lets you add a name and TikTok handle for your own You tab. Today these are stored only on your iPhone and are not sent to us.

Account. A KatVid account is created on the website or in the app with Google sign-in, with Sign in with Apple in the app, or, where we have enabled it, with an email address and a password. With Google or Apple sign-in we receive your account identifier, the email address on that account (an Apple private relay address if you hide yours) and whether the provider has verified it; we do not receive your password for those services. For a password account we keep only a salted hash of your password (Argon2id), never the password itself. We keep the account's email address, its sign-in methods, a hashed record of each signed-in session, and the one-click links we email you for verification, password reset and connecting a purchase (as token hashes with an expiry). The subscription status is linked to the account.

Early access. If you join the early-access list on the website, we keep the email address you give (or your account's verified address when you join signed in), the creator handle if you add one, the time you agreed to be emailed, a hashed form of your network address for rate limiting, and the list status we set (waiting, invited, active or withdrawn). We use this only to send you the TestFlight invitation and beta messages you asked for and to run the beta; it is not a newsletter. If you are given beta access, your account may receive a beta allowance of AI edits for a limited time, recorded with your account and, when it is claimed from the app, with the app installation that claimed it, so that each installation can claim it only once; it is not a purchase. Email support@usekatvidai.com to be removed from the list at any time.

Support and problem reports. If you email support@usekatvidai.com, we receive what you send, including your email address. The app's "Report a problem" feature lets you choose a category and add a note; today that report, together with the cut's transcript and edit data, is saved on your iPhone and is not sent to us. If we add a way to send reports to us, we will say so here first.

App installation identity. To protect the Service from abuse, each installation of KatVid proves it is a genuine copy of the app running on a genuine iPhone using Apple's App Attest. We keep a key identifier and public key for the installation, and short-lived tokens that let the app call our servers. These do not identify you by name.

Server logs and usage. Our servers record operational events about each request, such as request identifiers, the installation identifier, timings, durations, sizes, word counts and outcome categories. Our logging is built so that it does not record audio, transcript text or credentials. We also record each processing attempt per installation to apply rate limits.

Website cookies. The website sets two cookies, both strictly necessary and both HttpOnly: "katvid_session" after you sign in, which holds a pointer to your signed-in session (never a password) for up to 30 days or until you sign out, and "katvid_oauth" (named "__Host-katvid_oauth" on the live https site) for ten minutes while a Google sign-in is in progress, which protects that sign-in against forgery. The site uses no other cookies, no local storage and no third-party scripts.

Rate limiting. To limit repeated attempts, we keep a hashed form of your network address, never the address itself, with checkout requests and with requests for sign-in, verification and reset links, and we keep a record of each password sign-in attempt (the address used, the outcome and the time). These records are removed on the schedule under "How Long We Keep Information".

Hosting logs. Our servers and the website run on Railway, whose infrastructure records requests, including your IP address, in operational logs under its own terms. Our own application logs are built not to record audio, transcript text, passwords or credentials.

We do not use analytics, advertising or crash-reporting services in the app or on the website, and we use no tracking technologies. (During a TestFlight beta, Apple itself provides the crash reports and feedback described under "Who Else Handles Your Information".) If that changes, we will update this Policy and, where the law requires it, ask for your consent first.

Device and app information. The app may read the iPhone's capabilities (such as camera and microphone availability) to work, and uses the iOS photo library only when you choose a video or save an export. These permissions are controlled in iOS Settings.

Website payments are processed by Stripe. Your card details go directly to Stripe's hosted checkout page and are handled under Stripe's privacy policy; we never see or store your full card number. From Stripe we receive and keep the email address you give at checkout (held with the checkout record only until the purchase is connected to your account, then removed from it), Stripe's identifiers for you and your subscription, the plan and billing interval, the subscription's status and dates, any promotion code you enter, and the currency Stripe charged you in. Stripe may offer to charge you in your local currency at its exchange rate; where it does, that currency is recorded with your subscription so your account page can show it.

App Store subscriptions are processed by Apple under Apple's terms and privacy policy. We receive the subscription's status, plan and dates from Apple, never your payment details.

• to provide the Service: make the AI first cut you asked for and return it to your iPhone;
• to run your account and subscription, including counting AI edits against your plan;
• to answer your support requests and investigate problems;
• to keep the Service secure and prevent abuse, including rate limiting, fraud detection and enforcing the Terms;
• to understand how the Service performs in aggregate, using the operational records described above, not your footage;
• to comply with the law, and to establish, exercise or defend legal claims.

We do not sell your personal information, and we do not use your videos, audio, transcripts or edits to advertise KatVid, as public examples, or to train AI models, unless you separately and clearly agree.

Where the law of the European Economic Area, the United Kingdom or a similar jurisdiction applies, our legal bases are: performing our contract with you (providing the Service and your plan); our legitimate interests in securing and improving the Service and preventing abuse, balanced against your rights; your consent where we ask for it; and compliance with legal obligations.

We share information only with providers that process it for us, under contracts that limit what they may do with it:

• AssemblyAI (transcription): receives the extracted audio and returns the transcript with word timings; we ask it to delete its copy of both once we have normalised the transcript.
• OpenAI (AI cut decisions): receives the transcript and word timings and returns a proposed edit; we send requests with storage for the provider's own use turned off.
• Apple: App Attest verification for app installations, and the App Store and its payment processing if you subscribe through Apple. If you test the app through TestFlight, Apple shares with us the feedback and screenshots you choose to send, crash reports, basic device information, and the name and email address you use in TestFlight, under Apple's own privacy policy.
• Google (Google sign-in): tells us the identifier, email address and verification status of the Google account you choose; Google receives the sign-in request under its own privacy policy.
• Stripe (website payments): receives your payment details directly and processes subscriptions, renewals, refunds and the billing portal; we receive the identifiers, plan, status, dates and charged currency described under Payment Information.
• Railway (hosting): runs our servers, the website and our database in the United States; its infrastructure records request logs, including IP addresses.
• Resend (account email): delivers the verification, password-reset, purchase-connection and security messages we send from noreply@usekatvidai.com to the address you give us. Resend receives your email address and the message, which never contains your password or your footage.

We may also disclose information if the law requires it, to protect the rights, safety or property of you, us or others, or as part of a sale, merger or reorganisation of our business, in which case we will tell you.

We keep information only as long as reasonably necessary for the purposes it was collected for: providing the Service and your plan, resolving support and security matters, complying with legal and tax obligations, and enforcing our agreements. When information is no longer needed for those purposes, we delete it or make it anonymous.

In practice: your raw video, cuts and exports are on your iPhone and are kept as long as you keep them. On our servers, a scheduled job applies the following periods, counted from when each record was finished or expired, and they may shorten as we learn what we need. The transcript text of a processing request and the AI proposal's content are removed 30 days after processing finishes; the request's metadata (the video's length, the audio checksum and size, timings, token counts, and the final edit timeline) stays with your account until the account is deleted. Records of individual processing attempts are deleted after 90 days. Expired sign-in challenges are deleted after one day; expired or revoked sessions and installation tokens after seven days. The content of payment-provider notifications is removed after 90 days, keeping only their identifiers and outcome. A checkout that was never completed is deleted after 30 days, and the email address given at a checkout is removed as soon as the purchase is connected to an account or the checkout expires. Installation keys are kept while the installation is active. Subscription, usage and billing records are kept for as long as tax, accounting and dispute-handling obligations require.

You can delete your KatVid account at any time in the app (You, then Settings, then Delete account) or by emailing support@usekatvidai.com from the address on the account (the account's Security page on the website explains this). Your profile, cuts and edits on your iPhone are yours to keep or remove; deleting the app removes them from the device.

When a deletion request is received, access ends at once: every signed-in session and linked iPhone is signed out, no new processing is accepted, and a website subscription is set to end at the close of the period already paid for. A short grace period follows, currently seven days, so that a request made by mistake can be reversed through support. After it, we delete the transcripts, AI proposals, processing attempts, sessions, sign-in identities, password hash and device links that belong to the account, and we revoke the installation keys of the iPhones it used.

What remains afterwards is only what accounting, fraud prevention and dispute handling require: the account's identifier with its email address removed, the subscription and billing records and the identifiers that connect them to Stripe or Apple, the record of AI edits used, the record that a trial was taken, and the record of the deletion itself. Stripe and Apple keep their own records of your payments under their own policies, and we cannot delete those for you. Deleting an account does not by itself cancel an App Store subscription; cancel that in your Apple Account's subscription settings.

We protect information in transit with encryption, limit who and what can reach our servers, require each app installation to prove it is genuine before it can use the Service, and build our logging so that audio, transcripts and credentials are not written to logs. No service can promise perfect security, so please keep your device and your account credentials secure, and tell us at support@usekatvidai.com if you believe something is wrong.

We are based in the United States. Our servers, website and database run on Railway in the United States, and our other providers process information in the United States and may also process it in other countries where they or their own providers operate. If you use the Service from outside the United States, your information is transferred to and processed in the United States, whose data-protection laws may differ from those where you live.

Where personal data is transferred internationally and the applicable law, such as that of the European Economic Area or the United Kingdom, requires a safeguard for the transfer, we or our service providers rely on a mechanism that law recognises, as applicable to the transfer. Depending on the recipient and the destination, that may be: an adequacy decision (or, for the UK, adequacy regulations) covering the destination, including for a US recipient certified under the EU-U.S. Data Privacy Framework or its UK Extension; where required, the European Commission's Standard Contractual Clauses for transfers from the EEA; where required, the UK International Data Transfer Agreement or the UK Addendum to those Clauses for transfers from the UK; or another transfer mechanism or exception the law allows. This section describes how transfers are handled; it is not itself a transfer mechanism.

Depending on where you live, you may have the right to ask us what personal information we hold about you, to receive a copy of it, to correct it, to delete it, to restrict or object to how we use it, to withdraw consent you have given, and to complain to a privacy regulator. To exercise a right, email support@usekatvidai.com. We will need enough information to confirm the request is yours, and we will respond within the time the law allows. We will not treat you differently for exercising a right.

Residents of US states with privacy laws, such as California, may have rights to know, delete and correct personal information, to opt out of its sale, sharing for targeted advertising or profiling, and to appeal a decision on a request. We do not sell personal information or share it for targeted advertising. To appeal, reply to our response and say that you want to appeal.

In the EEA and UK you may also complain to your local supervisory authority, and you may ask us which safeguard applies to an international transfer of your information and, where the law gives you that right, for a copy of it.

Our websites do not currently respond to "Do Not Track" or similar browser signals, because they do not track you.

KatVid is for people aged 18 or older. We do not knowingly collect information from anyone younger. If you believe someone under 18 has used the Service, contact us and we will delete the information we hold.

The platforms you post your videos to, the App Store and the websites we link to have their own privacy practices, which we do not control. Read their policies to understand how they handle your information.

We will update this Policy when the Service changes, for example when we add a feature or add or change a provider. If a change materially affects how we handle your information, we will tell you before it takes effect, by email, in the app or by a prominent notice on the website, and where the law requires it we will ask for your consent. The date at the top shows when the Policy was last updated.

KatVid AI

35 Crestfield Circle, Covington, GA 30016, United States

support@usekatvidai.com