VideoBro Privacy Policy

This Privacy Policy describes how VideoBro ("we", "our", or "the App") collects, uses, and shares information when you use the VideoBro iOS application and related services. We try to keep this short and concrete. If anything below is unclear, email us — we will answer.

1. Who we are

VideoBro is operated by Drewy Olsen as a sole proprietorship. The contact for privacy matters is privacy@videobro.app. For users in the European Economic Area or United Kingdom, the same contact serves as our point of contact for data-protection inquiries.

2. Information we collect

2.1 Information you provide

• Account information: email address, username, password (stored only as a bcrypt hash), and optional profile photo.
• Apple Sign-In: if you sign in with Apple, we receive a stable Apple identifier (sub) and your email (which may be Apple's relay address).
• Age confirmation: a self-attested statement that you are at least 13 years old.
• User-generated content: the video clips you record, tape titles, and the names of collaborators you invite.

2.2 Information collected automatically

• Device identifiers: Apple's identifierForVendor UUID, used for guest-mode continuity, free-trial-eligibility signals, and abuse detection.
• Push notification tokens: APNs tokens, used only to deliver notifications you have opted into.
• Server access logs: IP address, timestamp, request path, and the user ID making the request. Retained for up to 30 days.
• Product analytics events: coarse-grained events such as upload, develop, share, used to understand product usage. Retained for up to 180 days.

2.3 Information we do not collect

• We do not embed third-party advertising or marketing trackers (no Facebook SDK, no Google Analytics, no AppsFlyer, no Branch).
• We do not sell your personal information.
• We do not perform cross-app or cross-website tracking. NSPrivacyTracking is set to false in our iOS Privacy Manifest.

3. How we use your information

4. Sub-processors and third parties

We share data with the following sub-processors, each only for the operational purpose stated:

Each provider operates under their own privacy policy and data-processing agreement. We do not sell or rent your personal information to anyone.

5. International data transfers

Our servers and sub-processors are primarily located in the United States. If you use VideoBro from the European Economic Area, the United Kingdom, or another jurisdiction outside the United States, your data will be transferred to the United States. Where required, transfers rely on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework as applicable.

6. Your rights

You can exercise the following rights at any time:

• Access & export: request a machine-readable copy of your data by emailing privacy@videobro.app.
• Correction: change your username, email, and profile photo from inside the app.
• Deletion: request permanent deletion of your account and its content from the in-app Profile screen ("Delete Account"). We hold everything for 30 days before removing anything — signing back in at any point during that window cancels the deletion and restores your account exactly as it was, with nothing lost. After 30 days, deletion is permanent: it cascades through clips, tapes, R2 storage, push tokens, and analytics records, and cannot be undone.
• Withdraw consent: stop using the app and delete your account at any time.
• Complain to a regulator: if you believe we have mishandled your data, you may complain to your local data protection authority (e.g., the ICO in the UK, your national DPA in the EU, or the California Privacy Protection Agency in the US).

For California residents, you have additional rights under the CCPA, including the right to know what categories of personal information we collect, the right to deletion (covered above), and the right to non-discrimination. We do not "sell" or "share" personal information for cross-context behavioral advertising as those terms are defined under the CCPA.

7. Data retention

• Account & content, active use: retained for as long as your account is active.
• Account deletion: a 30-day grace period after you request deletion. Signing back in during that window cancels the deletion and restores everything; after it, your account and content are permanently removed.
• Lapsed Pro subscriptions: if your Pro subscription is cancelled or expires, we keep your full library intact for up to 12 months, and email you a few reminders along the way to re-subscribe or download your videos first. After that period, your account is trimmed down to what the Free plan includes (your most recent tapes and developed films, up to the Free plan's limits). A finished film that other members still hold is never removed by this process — it stays for everyone. A tape you share with other people is protected for as long as anyone on it has a paid plan; if nobody on the tape does, it can be trimmed like the rest of your library, and we email your collaborators several times first so nothing disappears on them unannounced.
• Developed tapes that go quiet: after you develop a tape, we keep the working tape and its raw clips around so you can keep filming into it. If that tape then goes 12 months with no clips added, removed, or edited, we delete the working tape and the raw footage behind it. The finished film stays in your Cabinet — this process never removes a developed film, and it never touches a tape whose clips aren't already in a finished film. We email you twice first: about a month out, and again about a week out. This one is about the tape going quiet rather than about your plan, so it applies to shared tapes too — the film your crew made together stays; the raw clips behind it don't.
• Server access logs: up to 30 days.
• Product analytics events: up to 180 days.
• Notification log: up to 90 days.
• Tape activity feed: up to 30 days from each event.
• Backups: rolling 30-day backups of operational data, separate from the account-deletion grace period above; deletion requests propagate to backups within 30 days of becoming permanent.

8. Children

VideoBro is not directed to children under 13. We require all account holders to confirm they are at least 13 years old at signup. If we learn we have collected information from a user under 13 without verifiable parental consent, we will delete it. If you are a parent or guardian and believe your child has provided us with information, contact privacy@videobro.app.

9. Security

We use Apple Transport Security (TLS) for all network traffic, store passwords as bcrypt hashes, store auth tokens in the iOS Keychain, and run regular security reviews. No system is perfectly secure, and we cannot guarantee that personal information will never be accessed or disclosed in a way inconsistent with this policy. If you believe your account has been compromised, contact us at privacy@videobro.app.

10. Push notifications

If you opt into notifications, payloads delivered via Apple Push Notification service may include the username of a collaborator who joined a tape or added a clip. These payloads transit Apple's infrastructure as part of the standard APNs flow. You can disable notifications at any time in iOS Settings.

11. Changes to this policy

We may update this policy. The current version is always at /privacy. Material changes will be announced in-app or via email; continued use after the effective date constitutes acceptance.

12. Contact

Email: privacy@videobro.app

Terms of Service