Auto Captions for Video AI Privacy Policy

Last updated: April 7, 2026

Yevhenii Bondarenko is committed to protecting your privacy. We want you to understand what information we collect, use, and store. This document explains the privacy rules applicable to information collected or submitted when you access, install, or use the Auto Captions for Video AI mobile application (hereinafter – the "Mobile application") and related services ("Services").

This privacy policy will help you understand how Yevhenii Bondarenko, individual developer ("we", "our", or "us") collects, uses, stores and deletes our users' ("you" or "your") Personal Data. If you do not agree with this Policy, please do not use our application. Your continued use of the Mobile application and/or our Services will signify your acceptance of this Policy.

EACH USER MUST CAREFULLY READ AND COMPLY WITH THIS POLICY. BY USING THE MOBILE APPLICATION AND RELATED SERVICES YOU CONFIRM THAT YOU AGREE TO THE TERMS OF OUR PRIVACY POLICY. IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY IN GENERAL OR ANY PART OF IT, YOU SHOULD WITHHOLD FROM USING THE MOBILE APPLICATION AND RELATED SERVICES. YOU ALSO AGREE THAT YOUR PERSONAL DATA, COLLECTED BY US, IS TRANSFERRED WITH YOUR CONSENT.

From time to time, we may change or update this Policy. Your continued use of the Services constitutes your acceptance of the then-effective Policy.

Our Terms of Service, including their limitation on liability, apply to this Policy.

1. DEFINITIONS

The Auto Captions for Video AI mobile application or the Mobile application provides tools for video creators to generate, edit, and export AI-powered captions and subtitles for videos. Speech-to-text and related AI features may be provided by OpenAI, L.L.C. and/or other third-party AI providers. A complete description of the application's features can be found in our TERMS OF SERVICE.

The term "Services" means the Auto Captions for Video AI mobile application, its features, related software, support, legal pages, and accompanying documentation related to the application and its functionality.

The Owner or "we", ("us", "our") means Yevhenii Bondarenko, individual developer.

The Administration – the person (persons) authorised by Yevhenii Bondarenko to implement management of the Mobile application and other actions related to its usage.

The User means a person (individual) who has an access to the functionality of the Mobile application and/or otherwise uses our Services.

Account – record which contains data that User reports when registering via the Mobile application. It contains data needed for the User authorisation when using the Mobile application.

Registration – the procedure of creating an account.
For the purposes of this Privacy Policy, the term "Personal Data" means any information relating to an identified or identifiable natural person. The term "Personal Data" does not include any information that has been anonymized, such that the natural person to which such information relates is not identifiable.

Controller means a person, which determines the purposes and means of the personal data processing.

Processor means a person, which processes personal data on behalf of the Controller.

Yevhenii Bondarenko determines the purposes and means of the personal data processing and acts as the Controller for personal data described in this Privacy Policy. There may also be third-party service providers that process personal data on our behalf as processors.
The other terms and notions used in this Policy shall be understood in accordance with the TERMS OF SERVICE, unless otherwise specified in this Privacy Policy.

2. Information We Collect

We collect information in several ways to provide and improve our Service to you.

Information You Provide Directly:

• Account Information: When you create an account, we collect your email address. If you register using "Sign in with Apple," we may collect your first name, last name and email address, depending on the permissions you grant.
• User Content: We may store caption projects, generated transcription text, subtitle text, and related project data that you create or import into the application. We do not upload or store your full video files on our servers unless this is explicitly required for a specific feature and disclosed to you at that time. Media files generally remain on your device.
• User Profile Information: We may ask you to voluntarily provide additional information such as your goals for using the app, preferred languages, or where you plan to publish your videos. This information helps us improve and tailor our Service.
• Communications: If you contact us for support, we will collect your email address and the contents of your support ticket to assist you.

Information Collected Automatically:

• Device and Usage Information: We collect certain information about your device and how you interact with our Service. This data is collected and processed on our own server for basic analytics and includes: device model, operating system version, application version, two randomly generated unique identifiers (UUIDs), the date and time of your use, your device's time zone, your IP address, language settings, and theme (light/dark mode).
• Meta (Facebook) SDK — Automatic App Events (ads measurement): We use the Meta (Facebook) SDK solely for automatic App Events to measure and attribute conversions from our advertising on Meta platforms and to assess campaign performance. We do not send our own custom events through this SDK, do not use Facebook Login, and do not display ads inside the app via this SDK.
  Categories of data the Meta SDK may process (depending on iOS settings/permissions):
  • Identifiers: IDFV and IDFA (only with your explicit consent via iOS AppTrackingTransparency/ATT).
  • Device & App Technical Data: device type/model, OS version, app version/build, language/region settings, time zone, and similar technical attributes.
  • Network Data: IP address (which may infer coarse location such as country/region) and timestamps.
  • App Event Data: event type and context (e.g., lifecycle events and purchase-related metadata such as value and currency, where applicable), plus diagnostics for ads measurement and fraud prevention.
  Meta may act as an independent controller for certain data it receives through the SDK and will process it under its own terms and privacy policy. For details, see the Meta Privacy Policy. We may also receive aggregated attribution via Apple SKAdNetwork.

3. How We Use Your Information

We use the information we collect for various purposes:

• To Provide and Maintain our Service: To operate the app, manage your account, store your projects, and generate transcriptions or subtitles.
• To Communicate with You: To send you verification codes, password reset links, purchase confirmations, and other technical or transactional emails.
• For Marketing and Promotions: To send you emails about discounts, tips, recommendations, feature announcements, and other promotional content. You may opt out of receiving these communications at any time by following the unsubscribe link in the email.
• To Optimize Performance: We may use your IP address to determine the closest server or service region for AI processing, which enhances the speed and reliability of the service, and for diagnostic purposes.
• To Improve Our Service: To understand how our users interact with the app, to diagnose and fix technical issues (crashes), and to develop new features.
• For Security: To protect the security and integrity of our Service and our users' data.
• Advertising Measurement & Attribution (Meta): We run advertising campaigns on Meta platforms (e.g., Facebook, Instagram) and use the SDK’s automatic App Events to measure and attribute conversions from our ads and to assess campaign performance. We do not display ads inside the app via the Meta SDK and we do not use Facebook Login or social features.

We use your email address for the following purposes:

• To manage your account;
• To send a password reset code;
• To send you periodic news about the product and announcements and suggestions;
• To communicate with you about the Services or reply to your messages;
• To send marketing information regarding our products. You can opt out of receiving marketing messages by following the instructions in those messages.

We use device information to resolve technical issues, troubleshoot problems, improve compatibility, and maintain the security and stability of the Services.

3.1. App Tracking Transparency (ATT) and SKAdNetwork

Before any access to the iOS advertising identifier (IDFA), we show the system prompt for AppTrackingTransparency (ATT). If you decline or later disable tracking in iOS (Settings → Privacy & Security → Tracking), we do not access IDFA. In that case, ads measurement and attribution rely on aggregated signals such as Apple SKAdNetwork and other non-IDFA mechanisms provided by the platform.

4. PERSONAL DATA SECURITY

We take appropriate technical and organizational security measures to protect your personal data:

• we use appropriate security measures in the workplace to protect your personal information from loss, theft, misuse or unauthorized access. Access to your data is available only to persons who need it to perform tasks related to the Services;
• where applicable, we use encryption, access control and passwords to protect your information collected and stored by us from unauthorized access and disclosure. However, no method of transmission via the Internet or electronic storage is 100% secure. Therefore, while we strive to protect your personal information, we cannot guarantee its absolute security. By using the Services, you expressly acknowledge and agree that we cannot guarantee the security of any information provided or received by us through the Services, and that any information received from you through our Services is provided at your own risk. If you have reason to believe that your interaction with the application is no longer secure, please contact us immediately.

If you believe that your privacy has not been treated in accordance with our Policy, or if someone has attempted to abuse our Services or acted improperly, please contact us directly at the following address info.girex@gmail.com.

5. PROVIDING ACCESS TO YOUR PERSONAL DATA

We do not sell your personal data. We may share your information with third-party service providers only in the ways that are described in this Privacy Policy.

• AI Service Providers: We may use OpenAI and/or other third-party AI providers to perform speech-to-text transcription and related AI processing. We only send the data reasonably necessary to provide the requested feature.
• Infrastructure Providers: Our application backend, database, and user data may be hosted on cloud infrastructure providers, including Amazon Web Services (AWS), with infrastructure that may be located in the United States or other jurisdictions. For AI processing, we may use service providers in different regions around the world. We may use your IP address or other network information to route requests efficiently and improve performance.
• Analytics/Measurement Providers: We use the Meta (Facebook) SDK solely for automatic App Events to measure and attribute conversions from our ads on Meta platforms and to assess campaign performance. Meta may act as an independent controller for certain data it receives via the SDK and process it under its own terms and privacy policy (see Meta Privacy Policy).
• We reserve the right to disclose your Personal Data as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, or legal process. We will notify affected users about any requests for their account information, unless prohibited from doing so by law or court order.

6. YOUR RIGHTS AND CONTROL

You as the Personal Data subject have the rights in accordance with the provisions of the General Data Protection Regulation (EU) 2016/679. You agree that the way of implementation of your rights is subject to the terms of this Privacy Policy. The following paragraphs are the way to implement some of your rights under the provisions of the General Data Protection Regulation.

WE TAKE ALL MEASURES TO COMPLY WITH THE GDPR REQUIREMENTS, HOWEVER, YOU, AS A USER, SHOULD TAKE INTO ACCOUNT THAT THE RELATIONSHIP BETWEEN YOU AND US IS GOVERNED BY THE LEGISLATION OF UKRAINE, IN PARTICULAR THE LAW OF UKRAINE "ON THE PROTECTION OF PERSONAL DATA". UKRAINIAN LEGISLATION IS APPLICABLE LAW UNDER THIS PRIVACY POLICY AND OUR TERMS OF USE.

Your principal rights under data protection law in relation to your Personal Data are:

• Request access to your Personal Data;
• Request correction of your Personal Data or supplementation of your Personal Data for completeness;
• Request erasure of your Personal Data under certain circumstances;
• Request restriction of processing of your Personal Data under certain circumstances;
• Request transfer of your Personal Data to another entity under certain circumstances;
• Withdraw consent to the processing of your Personal Data where the processing is based on your consent, without affecting the lawfulness of processing based on consent before its withdrawal;
• The right to data portability;
• The right to lodge a complaint to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority in the European Economic Area (EEA). We recommend you contact us to resolve your questions and inquiries to the extent permitted by law, and we will reply promptly.

We offer you the opportunity to make certain choices and control over processing your personal data. These means of control may include access to personal data collected by us; correct, update or delete your personal data that we store; if you wish to opt out of data collection, please contact us at the following address: info.girex@gmail.com. If you submit a request, please note that we may request certain information from you in order to verify your identity and find your information. It should also be noted that we will delete your personal information if we are not legally required to store it, including the following cases:

• if your account issue remains unsolved, such as an unresolved claim or dispute, then your data will be stored until the issue is resolved;
• if we are required to store your personal data in order to fulfill our legal, tax, audit and accounting obligations, we will only store the necessary personal information for the period required by applicable law;
• if it is necessary for our legitimate business interests, such as preventing fraud or ensuring the safety of our users.

CCPA/CPRA: We do not sell your personal information. To measure and attribute our ads on Meta platforms, we may share limited data strictly necessary for conversion measurement. We configure the Meta (Facebook) SDK in a minimal data mode and transmit only automatic App Events and technical data; we access IDFA only with your explicit AppTrackingTransparency (ATT) consent.

If you wish to implement any of the above-mentioned rights, please contact us at info.girex@gmail.com.

7. DATA STORAGE

We retain your personal data for different periods depending on the type of data:

• Transcriptions: Audio transcriptions generated by our AI service are stored on our servers for 30 days and are then permanently deleted.
• Other Information: All other data, including your account information, project data, and profile data, is retained for as long as necessary to provide the Services or as long as you have an account on our server. We also store Personal Data necessary to fulfill our legal obligations for the required period of time in accordance with applicable law or seven years. We may correct, supplement or delete incomplete or inaccurate information. If you delete your account, we will take steps to delete this information in a timely manner.
• App Events (Meta SDK): Automatic events used for ads measurement/attribution are typically retained for up to 24 months unless a different period is required by law or operational necessity.

The information you provide to us may be periodically archived or stored by us in accordance with the backup processes that are performed during normal data disaster recovery.

YOU AGREE THAT YOUR PERSONAL DATA MAY BE PROCESSED AND STORED BY US AND/OR OUR COUNTERPARTIES DURING THE PERIOD OF TIME THAT IS PRACTICALLY NECESSARY TO FULFILL THE AIMS AND PURPOSES THAT IMPACT WITH FUNCTIONAL PURPOSE OF THE MOBILE APPLICATION.

8. CHILDREN'S PRIVACY

By using our Services, you represent and warrant that you are at least eighteen (18) years of age and/or have reached the age of majority in the jurisdiction in which you reside and from which you access the Services where you have reached the age of eighteen (18 years). If you have not reached the age of eighteen (18) and/or have not reached the age of majority in the jurisdiction in which you reside and from which you access the Services, you are strictly prohibited from accessing them. We do not use the Services to deliberately request data from children under the age of eighteen (18). We request that such persons not provide Personal Data through our Services. If you become aware or have reason to believe that a child under the age of 18 has shared any information with us, please contact us at info.girex@gmail.com and we will take appropriate measures for removal of such information from our Services.

9. INTERNATIONAL DATA TRANSFERS

Personal data of our users may be stored and processed on servers in the USA or other jurisdictions. For the specific purpose of AI transcription or related AI features, data may be processed by service providers operating in different regions, chosen based on proximity, capacity, or technical requirements for optimal performance. Your Personal Data may also be temporarily stored and processed in other jurisdictions, including Ukraine.

The data transferred to OpenAI or other third-party AI providers is stored according to their applicable terms and policies. We conduct a global business and may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

Where App Events data is processed by Meta (Facebook) for ads measurement/attribution, it may be transferred to and processed in jurisdictions where Meta operates (e.g., the United States and the European Union). We rely on appropriate safeguards for such transfers and implement technical and organizational measures to protect your information.

10. POLICY UPDATES

This Privacy Policy will remain in effect until it is replaced by a new policy. We may update this policy at our discretion, so you should check this page periodically, as its terms may change. The latest version of the policy will display the date of the "last update" at the top of the page. If you further use our Services, this will mean that you accept the current version of the policy and understand its terms.

11. OUR DETAILS

This Services are owned and operated by Yevhenii Bondarenko, individual developer.

You can contact us by email: info.girex@gmail.com