Privacy Policy

1. Information we collect

Account information

When you create an account with an email one-time code, Google, or Apple, we receive your email address and a unique account identifier. If you use Sign in with Apple, we receive the name you choose to share and an Apple private relay address if you hide your email. We store your display name if you provide one.

What you tell the director

The answers you give the interview — a peak moment, a mood, free-text notes — along with any story titles and the prompts you type in the Director’s Console.

Clip metadata

For each clip you select, we send: duration, capture date and time, a scene category, sharpness and audio-level scores, face and motion counts, and the city name derived from the photo’s GPS metadata when present. We do not send GPS coordinates, faces, or the media itself.

Credits and purchases

Your credit balance and a ledger of credit grants and spends. Purchases are processed by Apple; we receive transaction identifiers, product identifiers, subscription status, renewal dates, and refund or revocation notices. We never see your card number.

Usage and diagnostic data

Which screens you open, taps on key actions, app version and device model, and crash or error reports. We use Firebase Analytics and Firebase Crashlytics, which assign a random installation identifier.

What we do not collect

Your photo or video files, your contacts, precise location, health data, browsing history, or your advertising identifier. We do not track you across other companies’ apps or websites, and we do not show ads.

2. How we use it

• Create and secure your account, and keep you signed in.
• Analyze your clips, choose a story arc, and build your first cut and later recuts.
• Track credits and keep your subscription status accurate, including renewals, billing grace, refunds, and revocations reported by Apple.
• Save your projects so you can reopen and re-export them.
• Understand which features work, diagnose crashes, and fix them.
• Respond to support requests and enforce our terms.
• Meet legal, tax, and accounting obligations.

If you are in the EEA or UK, our legal bases are: performance of a contract (providing the app and the services you ask for), legitimate interests (improving the app, preventing abuse, securing our systems), and consent where we ask for it. You can withdraw consent at any time.

3. What stays on your device

Imported photos and videos, generated videos you have not exported, thumbnails, and project timelines are stored in the app’s sandbox on your device. Deleting the app removes them. Exported files you save to Camera Roll are outside the app and remain until you delete them in Photos.

4. Sharing

We share data only with service providers that process it for us under contract:

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We may disclose data if required by law, to protect rights or safety, or as part of a merger or acquisition, in which case this policy continues to apply until updated.

Your footage is never sent to any of these providers.

5. International transfers

Our backend is hosted by Supabase, and our providers may process data in the United States and other countries. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.

6. Retention

• Account data: until you delete your account, then deleted or de-identified within 30 days, except records we must keep for tax, accounting, or fraud prevention for the period the law requires.
• Prompts and clip metadata: retained with the project until you delete the project or your account.
• Diagnostics: 90 days, then deleted or aggregated.
• Purchase and subscription records: retained as long as required for accounting and tax.

7. Security

Data is encrypted in transit with HTTPS/TLS. Media is processed on device rather than in the cloud. Access to our backend is limited to authenticated users, enforced with row-level security. No system is perfect; if a breach affects you, we will notify you as the law requires.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your data, to object to processing, and to withdraw consent. To exercise any of these, email support@toptake.co or use Profile → Delete account in the app, which removes your account and its projects. You can also appeal a decision by replying to our response.

You can delete your account in the app at any time. If you cannot sign in, email us from the address on the account and we will verify and delete it.

You may lodge a complaint with your local data protection authority. In the EEA, that is the authority in your country of residence; in the UK, the ICO.

9. Children

TopTake is not directed to children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect data from children. If you believe a child created an account, contact us and we will delete it.

10. Cookies and similar technologies

The TopTake website sets no cookies and runs no analytics. In the app, Firebase uses a local installation identifier as described above. You can stop analytics collection by deleting the app or contacting us. Crash reporting is on for all builds.

11. Changes

If we make a material change, we will update this page and, where appropriate, tell you in the app before the change takes effect.

12. Contact

Questions about this policy or your data? Email support@toptake.co. We will provide our current postal address on request.