Privacy policy

1. Who we are

AI Producer is an iPhone app and the server behind it at api.ai-producer.app. It is run by [OWNER: full legal name or business name], [OWNER: postal address and country] ("we", "us"). We decide how your data is used, so we are its controller. For any privacy question, write to support@ai-producer.app.

2. What we store

We store only what the app needs to work. All of it belongs to your account and is used to run the app for you.

Your sign-in

• When you sign in with Google, we keep your Google account ID, your email address and whether Google has verified it, plus when you first and last signed in. We do not keep your name or profile photo.
• Sign-in sessions: a hashed refresh token per device and when it was last used.
• Your time zone and app language, so tokens refill and reminders fall at the right local time.
• A record that you agreed to AI processing, with the version of the text and the date.

What you create

• Profile and AI memory: your profile in My account (niche, audience, tone, the languages of your app and videos) and "What AI knows about you": the facts, style rules and topics to avoid that you or the AI saved, and examples of how you speak.
• Ideas, including their favourites, topics and "Good for" tags.
• References: the link or the uploaded video file, its file name, the video file itself, one preview frame, the AI analysis, the topic, your Want to film or Not for me mark, and how well it fits your ideas.
• Plans and scripts, with their earlier versions, hooks, hook choices and any hook templates you saved, and the background writing jobs.
• Planned shoots: the title, day and time, reminder choice, the references, ideas and script they link to, and their status (for example filmed). A shoot saved from a calendar suggestion also keeps the kind of occasion (for example a trip) and a coded ID. The code is made on your iPhone with a key that never leaves it, so we cannot work out the calendar event from it.

Tokens and AI usage

• Your token balance and a log of charges, refunds and grants.
• A record of each AI call: when, which feature, which model, how many AI tokens it used and what it cost us. We use it to enforce limits and keep costs under control.
• To stop the free monthly tokens from being claimed again by deleting and re-creating an account, we keep a pseudonymous code made from your sign-in (a keyed hash, not your email) and the month it got tokens.

Support conversations

• When you write to us in Account → Support, or tap Report on an error, we keep the conversation: your messages, our replies, the error text if any, and the app version, iOS version, device model and language it was sent from. Conversations are kept until you delete your account. Each message is also emailed to our support mailbox.
• Diagnostics only when you attach them. If you turn on "Attach app log", the report also carries the app log of the session and the state of running work. The app and the server remove sign-in tokens, keys and email addresses from it first. The log is emailed to our support mailbox as an attachment and saved as a file on the server, which is deleted after 90 days. It is never stored in the database.

Technical data

• Our server's access logs do not keep IP addresses, sign-in headers or cookies. Your IP address is used only in memory, for a short time, to limit abuse.
• Server logs record technical events (for example a failed analysis) with account IDs, and rotate automatically.
• We do not collect your location, contacts, browsing history, advertising identifiers or crash data from a third-party crash reporter.

3. What stays on your iPhone

• Calendar. If you turn on calendar suggestions, the app reads your calendar on the iPhone and matches events with your references there. Event titles, times, places and the suggestions you dismiss never leave the iPhone. Only a shoot you choose to save is sent to your account, as described above.
• Reminders. Shoot reminders and "ready" notices are local notifications scheduled by the iPhone. We do not use a push notification server.
• Voice recordings. Voice notes are kept as audio files on the iPhone. For voice input, the recording is sent through our server to Google Gemini to turn it into text, and the server does not save the audio.
• Drafts and the local copy of your ideas and references, and Lock Screen progress. Signing out removes the local copy; what has synced stays in your account.

4. AI processing by Google Gemini

AI Producer uses the Google Gemini API to analyse references, write plans and scripts, suggest hooks and stories, tidy up ideas and profile text, match references with ideas, and turn voice into text. Before the first AI step the app explains this and asks you to agree. Without that agreement the server refuses every AI call for your account.

For these features our server sends Google:

• the text of your ideas, your profile, your AI memory and the plans and scripts being written or reworked, with your instructions;
• the reference videos you import, uploaded to Google for the analysis and deleted from Google's file storage when the analysis ends;
• the audio of voice input.

Google processes this for us as a service provider under the Gemini API terms for paid services, which say it does not use the data to train its models. Under those terms Google keeps prompts and outputs for up to 55 days to detect abuse, and may process them in any country where it operates. Google's own terms are at ai.google.dev/gemini-api/terms.

AI output is generated automatically and can be wrong. See the terms.

5. Video links

When you import a link, our server fetches that public video with the open-source tool yt-dlp, only from YouTube, Instagram or TikTok. We do not sign in to these sites as you. Requests to YouTube go through a network proxy (Cloudflare WARP), so YouTube sees a Cloudflare address instead of our server's. Requests to Instagram and TikTok go directly. These sites see a request for the video from our server, not from your phone.

6. Where the data is hosted

• Server, database, video files and backups: a virtual server rented from OVHcloud in Singapore.
• Support email: the support@ai-producer.app mailbox is hosted by Hostinger, which also sends the support emails.
• This website: hosted by Hostinger as static pages, with no cookies and no tracking. [OWNER: confirm] The support form on this website sends your name, email, topic and message to our support mailbox and keeps a copy on the website's server. To limit abuse it keeps a hashed, unreadable form of your IP address for up to 2 days. If Cloudflare Web Analytics is turned on, it counts page views without cookies.

This means your data is stored outside your country, and Google may process AI requests in other countries. Where the law requires it, we rely on our providers' standard contractual clauses or similar safeguards.

7. Who else receives data

There are no ads and no tracking, we use no analytics or advertising SDKs, and we never sell or rent your data. Data reaches only:

• Google, for the Gemini API (above) and for Google Sign-In;
• OVHcloud (server hosting) and Hostinger (email and this website);
• Cloudflare, which carries our server's requests to YouTube;
• Telegram, which carries a notice to the developer that a support message arrived. It holds only the report number and app version, never your message or log;
• authorities, only when the law requires it.

8. Google user data

From Google Sign-In the app asks only for the basic scopes (your Google account ID and email address). We use them only to sign you in, to keep your data in your account and to answer your support messages. We do not use them for ads and do not share them with anyone. AI Producer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Legal bases

• Contract: your account, storing what you create, tokens, planned shoots and support.
• Consent: sending your content to Google Gemini for AI processing.
• Legitimate interests: security, abuse prevention (the sign-in code above), AI cost records and backups.

10. How long we keep data

11. Export, deletion and your rights

• Export: in Account, tap Export my data, then Share my data. You get one JSON file with everything stored for your account: sign-in details, consents, profile, ideas, references, plans, scripts and their versions, hooks, AI memory, planned shoots, support conversations, AI usage and your report files.
• Delete your account: in Account, tap Delete account and confirm. Your account and its data are removed from the database right away, with no waiting period, and the server then deletes your video files, report files and queued work. Backups that still hold the data age out within 30 days. This cannot be undone.
• Correct: you can edit or delete your ideas, references, plans, scripts, profile and AI memory in the app at any time.
• Withdraw AI consent: write to us, or delete your account. Without this consent AI features do not work.
• You can also ask us for a copy of your data, a correction, a restriction or an objection, and you can complain to your data protection authority. We answer within one month.

12. Security

The app talks to the server only over HTTPS. The database and the queue are not reachable from the internet, the server accepts administrator access by SSH key only, and stored sign-in secrets are encrypted. No system is perfectly secure, so if something goes wrong we will tell you as the law requires.

13. Age

AI Producer is for people aged 18 or older. Google's Gemini API terms do not allow apps directed at or likely to be used by people under 18. We do not knowingly collect data from children. If you think a child has an account, write to us and we will delete it.

14. Changes

If we change this policy, we update the date at the top. For important changes we tell you in the app (Account → What's new) before they apply, and we ask for your agreement again where the law requires it, for example when the AI processing text changes.

15. Contact

Back to the top