Studio: Video Editor
Privacy policy
Summary: Studio edits your videos and screen recordings on your own device: they never leave it, are not uploaded to any server and are saved where you choose. Subtitles are also transcribed on the device; the audio is not sent to any server. There are no accounts or sign-up. On Android and Windows, so that the free trial is one per device, we store an encrypted device identifier and the date of first use. The free mobile and tablet version shows Google AdMob ads, personalized only if you consent. We use Firebase Analytics for anonymous usage statistics and RevenueCat to manage the Pro subscription. There are no ads on Mac and Windows, but you can unlock a tool on your computer by watching an ad on your phone: for that we store on our server a random, encrypted identifier of the computer, the unlock requests and, if you accept notifications, your phone’s notification token. If you want, you can use your own AI with your own key: what is sent goes straight from your device to that provider, only after your consent, and Studio neither stores it nor routes it through any server of ours.
Who is responsible
Gabriel Micó Victoria, developer of Studio. For any question about your data, or to exercise your rights, write to gabrielmicovictoria@gmail.com.
Your videos and recordings stay on your device
- The videos you open, your screen recordings and your projects are edited and saved on your device. Studio does not send them to any server of the developer or of third parties.
- Subtitles are transcribed on the device itself. The audio is not sent to any server.
- Only if you turn it on, the “Use your own AI” feature sends text or a frame to the AI provider you choose, with your key (see below). If you do not turn it on, nothing is sent.
- The “Create with Google AI” button only opens
gemini.google.comin your browser, with your own Google account. The app sends no videos or data of yours to Google. What you do in Gemini is governed by Google's privacy policy.
Third-party services
| Service | Purpose | What it receives |
|---|---|---|
| Google AdMob | Ads in the free mobile and tablet version. No ads on Mac or Windows. | Technical device and app data (IP address, model, system version, ad interaction). If you consent, the device advertising identifier to show personalized ads. |
| Firebase Analytics (Google) | Anonymous usage statistics to improve the app. | Usage events, device model, system version and language, with an installation identifier. The app does not use the IDFA for analytics. On Mac and Windows it is off by default: it is only turned on if you tick “Share anonymous usage statistics” in the app menu (on Windows, the window menu: the icon in the title bar or Alt+Space). On Windows it is sent straight to Google Analytics (Measurement Protocol) and only counts app opens and sessions, with a random identifier stored on the computer that is deleted when you untick the box; as with any connection, Google receives the IP address. Nothing about your videos, projects or screen is ever sent. |
| RevenueCat | Manage the Pro subscription and check whether it is active. | An anonymous purchase ID and the subscription status. It does not receive your name or email. Payments are charged by Apple, Google or Microsoft, not by the app. |
| Supabase (our server) | Making the 7-day trial one per device on Android and Windows, and checking whether the app must be updated (minimum version). | On Android and Windows: the encrypted device identifier (SHA-256 hash) and the date of first use. On all platforms, as with any connection, the IP address when asking for the minimum version, not stored with any data about you. If you unlock the computer with your phone: the random identifier of the computer (encrypted with SHA-256), the unlock requests and, if you accept notifications, your phone’s notification token (see “Unlock your computer with your phone”). Nothing else: no videos, no name, no email. |
| Hugging Face | Mac and Windows only, and only if you choose “More accuracy” for subtitles: downloading the large speech model. | As with any download, your IP address. Nothing of yours is sent: transcription is still done on your computer. |
| Your AI provider (optional) | Only if you turn on “Use your own AI”: Anthropic (Claude), OpenAI (ChatGPT), Google (Gemini) or another compatible one you set up. | What is explained in “Use your own AI”, with your key and your consent. It does not go through our servers. |
Ads and consent
The free mobile and tablet version shows Google AdMob ads. When you first open the app, Google's consent form (UMP) asks you in the European Economic Area, the United Kingdom and Switzerland, and also offers the privacy choices required in some US states. On iOS, Apple's App Tracking Transparency (ATT) prompt is shown as well. AdMob can use the advertising identifier for personalized ads only if you consent; otherwise ads are not personalized. You can change your choice at any time in the app settings (privacy options) and in your device's system ad settings.
There is also an optional rewarded ad, tool by tool: if you choose to watch it, it unlocks only the Pro tool you tapped for 20 minutes. Each tool needs its own ad, and watching another one for the same tool adds 20 more minutes. Trimming is free and needs no ad. We store on your device, for each tool, the time its allowance ends; it never leaves the device. The ad is served by Google AdMob, as described above.
Unlock your computer with your phone
There are no ads on Mac and Windows. If you want to use a Pro tool without a subscription, the computer shows a QR code and, when you scan it with Studio on your phone and watch a rewarded ad all the way through, that tool is unlocked for 20 minutes on the computer. It is optional and there are no accounts or passwords.
- What we store on our server (Supabase):
- A random identifier of the computer, invented by the app and kept in the system keychain (Keychain on Mac, Credential Locker on Windows). On the server we store it only encrypted (SHA-256 hash).
- The unlock requests: a random single-use code that expires after 10 minutes, the requested tool, the date and its status, and the time each tool’s unlocked time ends.
- Only if you accept notifications on the phone, the phone’s notification token (and its platform), to let you know the computer is asking to be unlocked. Notifications are sent through Google (Firebase Cloud Messaging) and, on iPhone and iPad, Apple (APNs). If you do not accept them, the QR works just the same.
- Google (AdMob) notifies our server: when a rewarded ad is watched all the way through, AdMob sends our server a signed confirmation (server-side verification) with the request code. Only then is the time added. If you close the ad early, nothing is unlocked.
- There are no accounts. The phone and the computer are linked only by those random identifiers, which carry no name, email or videos, are not used for advertising and are not shared with anyone.
- You can unlink the phone and the computer at any time from Studio’s Settings, which deletes the link and the notification token.
Pro subscription and 7-day trial
- After installing the app you get 7 days of full Pro, with no card and no charge. The trial is managed by the app itself and is not a purchase or a store trial offer. When it ends, the app goes back to the free version unless you subscribe.
- The trial is one per device: uninstalling and reinstalling does not give you another 7 days.
- iPhone, iPad and Mac: nothing is sent. The date of the first download comes from Apple, signed (AppTransaction).
- Android and Windows: the app stores on our server (Supabase) an encrypted device identifier (a SHA-256 hash of the ANDROID_ID on Android, or of the system ID for publisher on Windows) together with the date of first use. It is used only to know whether that device has already had the trial: it is not used for anything else, it is not shared with anyone, it is not used for advertising and it does not identify you.
- Pro costs €1.99 per month or €14.99 per year (the store shows the price for your country) and can be cancelled in the store (Apple, Google or Microsoft) at any time.
- The server's reply is signed (Ed25519 digital signature) so that nobody can forge it to extend the trial. The app checks the signature on your device. All that is signed is the server's time, whether it is the first time, and a random number the app invents on each request: it carries no personal data.
- Payment is handled and charged by the store; the app never sees your card.
Use your own AI (optional)
Studio can work with the AI you already use (Claude, ChatGPT, Gemini or another compatible one) to edit by talking, write social media texts, create the thumbnail with AI or translate subtitles. It is optional and off until you paste your own API key.
- What is sent, depending on the feature you use:
- Edit by talking: your instruction and a description of the project (names and durations of the clips and, if there is one, the subtitle transcript). Never the video or the audio.
- Social media texts and Translate subtitles: the subtitle text.
- Thumbnail with AI inside: the frame you pick and your text, to Gemini.
- To whom: only to the provider you choose (Anthropic, OpenAI, Google, or the compatible address you type, which can be a program on your own computer). The call goes straight from your device to that provider: it does not go through any Studio server.
- With your key, not ours: you create the key in your provider account and it is stored encrypted in the system keychain (Keychain on iPhone, iPad and Mac; Keystore on Android; Credential Locker on Windows). It does not leave your device except to identify you to that provider. You can test it and delete it at any time. Usage is billed to your provider account, not to us.
- With your consent: before the first use with each provider, a window tells you what will be sent and to whom, and it is only sent if you tap “Accept”. With “No”, nothing is sent.
- Studio does not store it: neither we nor any server of ours receive that data or your key. What the provider does with it is governed by its own privacy policy and terms; read them before accepting.
Permissions
- Camera: for the video reaction and to record video.
- Microphone: to record your voice in recordings and video reactions.
- Photos and gallery: to open your videos and save the results.
- Screen recording: to record what happens on screen when you start it; the system shows an indicator while recording.
You can withdraw any permission in your device settings.
How long data is kept
- Videos, recordings and projects: on your device, until you delete them or uninstall the app.
- Local app data (settings, trial state): until you uninstall the app.
- Trial record (Android and Windows: encrypted identifier and date): while the app remains available, so the trial stays one per device. You can ask for it to be deleted.
- Computer unlock (encrypted computer identifier, requests and the phone’s notification token): requests are deleted shortly after they expire; the link and the token, until you unlink from Settings. You can ask for them to be deleted.
- Your AI key: encrypted on your device, until you tap “Delete my key” or uninstall the app.
- Analytics, advertising and subscription: according to the retention periods of Google (Firebase, AdMob) and RevenueCat.
How to delete your data
Uninstall the app to delete everything stored on your device. AdMob, Firebase and RevenueCat data can be reset or deleted: reset the advertising identifier in your system settings, or write to gabrielmicovictoria@gmail.com and we will handle deletion with those services and of the trial record and the computer-unlock data on our server. The link between phone and computer can also be deleted from Settings, with “Unlink”.
Children
Studio is not directed at children and does not knowingly collect data from minors. If you believe a minor has provided data, write to gabrielmicovictoria@gmail.com and we will delete it.
Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data (GDPR) at any time by writing to gabrielmicovictoria@gmail.com. Since Studio has no accounts and your videos never leave the device, almost everything is on your device, where you can delete it yourself. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es) or your country's authority.
Legal basis: the subscription and the computer unlock, to provide the service you requested; phone notifications, with your consent when you accept them in the system; personalized ads, usage analytics and sending data to your AI provider, with your consent, which you can withdraw at any time; non-personalized ads, legitimate interest in funding the free version.
Changes
If the app changes what it does with data, this page is updated first and the date below changes.