Privacy Policy

Effective June 25, 2026. This policy covers the ClipCapsule iOS app and the website at clipcapsule.app.

1. Who we are

ClipCapsule is operated by KCORBOT LLC, a Delaware limited liability company. References to “ClipCapsule,” “we,” “us,” or “our” mean KCORBOT LLC. References to “you” mean the person using the ClipCapsule app or website.

For privacy-related questions or to exercise any of the rights described below, contact privacy@clipcapsule.app.

A registered mailing address is available on request and will be published here at public launch.

2. Data we collect

We collect only what we need to run ClipCapsule for you:

Account data

When you sign in with Apple, we receive your Apple ID and, on first sign-in only, the name and email address Apple chooses to share. If you use Apple's “Hide My Email” relay, we never see your real address. If you create an account with email and password (fallback path), we store your email address and a salted hash of your password — never the password itself.

Your videos

ClipCapsule's scene detection, cover-frame selection, scene classification, face detection, and title/summary generation all run on your device. Your raw videos do not leave your phone unless you turn on cloud sync. When cloud sync is on, the videos and derived clips you choose to sync are encrypted in transit (HTTPS) and encrypted at rest in our storage provider.

Processing metadata

Per-clip metadata — titles, summaries, clip start/end timestamps, face counts, scene tags — is generated from your content. It is treated with the same protections as the video itself: never sold, never used to train shared models, only synced when you turn sync on.

Technical and log data

Our backend logs receive your IP address, the user-agent string of your device, request timestamps, and the API endpoint hit. Logs are retained for up to 30 days for security and abuse-prevention purposes and then automatically purged.

Crash and error reports

When the app crashes, we use Sentry to capture the crash. The report contains your device model, iOS version, app version, and a stack trace. We do not intentionally include the contents of any video, your name, your email, or any other identifier. If a stack trace incidentally captures a fragment of user data, we treat it as personal data and apply the same retention and deletion rules.

Analytics (opt-out by default-on)

When usage analytics are enabled, we use PostHog to record anonymized product events (e.g. “capsule created,” “sync enabled”). You can turn analytics off at any time from the iOS app's Account screen. We do not use cross-app tracking. We do not use the iOS IDFA.

Subscription and billing

All subscriptions are processed by Apple via In-App Purchase. We do not receive or store your credit-card or payment-method details. We do receive an anonymized App Store subscription receipt that tells us which plan you're on and when it renews.

3. How we use your data

We use the data we collect to:

  • Run and maintain your account and your library
  • Sync your content between your devices if you turn sync on
  • Share content with family members you have explicitly invited
  • Send transactional emails (sign-in confirmations, security alerts, account-deletion confirmations)
  • Detect and prevent abuse, fraud, and security incidents
  • Diagnose and fix bugs and crashes
  • Improve the product based on aggregated, de-identified usage signals (when analytics are enabled)
  • Comply with our legal obligations

We do not sell or rent your personal information. We do not use your videos or derived metadata to train machine-learning models for any other user or product. We do not run advertising in the app.

5. Service providers we share data with

We share the minimum data necessary with a small number of vendors, each under a written data-processing agreement:

  • Apple — Sign in with Apple, App Store IAP, and (when available on your device) Apple Intelligence Foundation Models for on-device generation. Apple processes data under its own privacy policy.
  • Supabase — managed Postgres, authentication, and storage. Hosts your account record and (if sync is on) your encrypted videos and metadata.
  • Cloudflare — edge networking and, in a future release, R2 object storage. No content is stored on Cloudflare R2 today.
  • Sentry — crash and error reporting.
  • Resend — transactional email delivery (sign-in, account-deletion confirmations).
  • PostHog — product analytics, only when you have analytics enabled.
  • Vercel — hosting for the marketing site and backend API routes.

We do not share data with advertisers or data brokers. We do not participate in cross-app tracking.

6. Your rights

Regardless of where you live, you can exercise the following rights over your data. To use any of them, write to privacy@clipcapsule.app or use the in-app controls in the Account screen.

  • Access — request a copy of the personal data we hold about you.
  • Export (portability) — request a machine-readable export of your account data and library. We currently provide JSON for account data and your original video files for content.
  • Correct — fix inaccurate data, including changing your display name or email address.
  • Delete— delete your account and library. Tap “Delete account” in the iOS Account screen, or email us. See Retention below for timing.
  • Restrict or object — ask us to pause certain processing.
  • Withdraw consent — turn off analytics or any other consent-based processing.
  • Complain — lodge a complaint with your local data protection authority. In the EU, you can find yours at edpb.europa.eu.

California (CCPA / CPRA)

If you are a California resident, you also have the right to know the categories of personal information we have collected, sold, or shared in the previous 12 months and the categories of third parties with whom we shared it. We do not sell or share your personal information for cross-context behavioral advertising. You will not be discriminated against for exercising your CCPA rights.

We respond to verifiable consumer requests within 45 days, with one permitted 45-day extension if needed.

7. Retention

We keep personal data only as long as we need it to provide the service or to meet a legal obligation:

  • Account and content — kept while your account is active. When you delete your account, we begin deletion immediately and complete it within 30 days. Backups containing your data are purged on the same 30-day cycle.
  • Server logs — up to 30 days.
  • Crash reports — up to 90 days.
  • Anonymized analytics — up to 13 months in aggregated form.
  • Billing records — as long as required by tax and accounting law (typically 7 years).

8. Security

We use HTTPS / TLS for all data in transit. Content stored in our cloud is encrypted at rest. Account passwords are stored as salted hashes; we never store or have access to your plaintext password. Database access is gated by row-level security so one account cannot read another account's rows. We follow the principle of least privilege for internal access. No system is perfectly secure; we will notify affected users in line with applicable breach- notification law if anything happens.

9. International transfers

Our infrastructure is operated in the United States. If you are using ClipCapsule from outside the United States, you understand and agree that your data will be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses or other approved transfer mechanisms.

10. Children

ClipCapsule is rated 12+ on the App Store and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact privacy@clipcapsule.app and we will delete it.

11. Changes

If we change this policy in a material way, we will notify you in the app or by email at least 30 days before the change takes effect. For non-material changes (typos, clarifications) we will update the effective date at the top of this page.

12. Contact

For any privacy question, request, or complaint: privacy@clipcapsule.app. For general legal questions: legal@clipcapsule.app.