PRIVACY POLICY
Last Updated: 30th October 2026
This policy explains what personal information Teleprompter Studio (the website, the web app and the Android and iOS apps, together the "Service") collects, why, how long it is kept and the choices you have. We have kept it short and specific: if something is not listed here, we do not collect it.
1. Who we are
The Service is provided by Affirm Digital Products Limited, a company registered in England and Wales (company number 17492996) ("we", "us", "our"). We are the data controller for the personal information described in this policy.
Address: 124 City Road, London, EC1V 2NX · Email: support@affirmdigitalproducts.com
2. The short version
- Your recordings never leave your device. Video and audio are recorded and stored on your phone or computer. We never upload, see or keep them. Recordings you make while signed in are encrypted on the device with a key that belongs to your account, so someone else using the same device can't open them after you sign out.
- No account is needed to write scripts and record. Without an account, everything stays on your device and nothing about you is sent to us.
- An account holds your email address (and your name, if you sign in with Google or Apple), so you can sign in and, on Pro, sync your scripts between devices.
- AI assistants only if you connect them. On Pro you can let an AI assistant (such as Claude, Gemini, ChatGPT or Copilot) work on your scripts. It only gets access after you choose "Allow", and you can disconnect it at any time. We never send your scripts to an AI provider ourselves, and we do not use them to train AI.
- No advertising, no tracking, no analytics. We do not sell or share your information for marketing.
- Payments are handled by our payment provider, not by us. We never see your card details.
3. Information we collect
3.1 On your device only (never sent to us)
- Your recordings (video and audio from your camera and microphone), their thumbnails and any captions or transcripts you export.
- Your scripts, folders and settings, unless you are on Pro with sync turned on (see 3.3).
- In the iPhone and iPad app, your script titles, folder names and read times are shared with Siri, Shortcuts and Spotlight on your device so you can ask for a script by name (on iOS 18 and later they are also added to your device's Spotlight index). This stays on your device and is handled by Apple under its terms.
- Camera and microphone access is used only to show your preview and make recordings on your device. The apps may ask permission to save recordings to your photo library or files when you choose to.
3.2 If you create an account
- Email address: to identify your account, sign you in and send you account emails (sign-up codes, password resets and important notices about your account).
- Name: only if you choose "Continue with Google" or "Continue with Apple", which share your name and email address with us. We never receive your Google or Apple password. With Apple you can choose "Hide my email": Apple then gives us a private address that forwards to you, and we use it as your account's email.
- Linked sign-ins: if you use Google or Apple with the same email address as an existing account, we attach that sign-in to your account (we keep Google's or Apple's identifier for you), so you have one account however you sign in.
- Password: if you sign up with email, your password is held by our sign-in provider (Amazon Cognito) in a protected, hashed form. We cannot see it.
- Recordings key: a random key for your account, which your devices fetch while you're signed in to encrypt and open your recordings. It reveals nothing on its own (your recordings never reach us), and it is deleted with your account.
- Sign-in records: when your account was created and when it was last used, so we can keep your account secure and apply the retention rules in section 6.
3.3 If you have Pro
- Your synced library: the scripts, folders and settings you choose to sync, so they appear on all your devices, including each script's version history (its last five saved versions and any change from an AI assistant waiting for your review). Recordings are never synced.
- Subscription status: whether you are on Pro, when it renews or ends, and the reference numbers our payment provider uses for your subscription.
3.4 If you connect an AI assistant (Pro)
- Connection records: which assistants or apps you have connected (their name and technical identifier), the permissions you granted, when you connected each one and when it was last used, so you can see and disconnect them on My account.
- Access tokens and app credentials: the tokens that let a connected assistant act for you, and any personal access tokens or app credentials you create. We store these only in a scrambled (hashed) form that cannot be turned back into the token.
- Registered apps: when an assistant registers itself with us, or you register an app by hand, we keep the app's name and the web addresses it uses to sign in. When an assistant identifies itself with a published details document, we fetch that document from the assistant's website and keep a copy for up to a day.
- What the assistant receives: when a connected assistant asks, we send it the scripts, titles, folder names and script settings (such as pace, pause lengths and delivery cues) it needs to do what you asked. The assistant's provider then processes that information under its own terms and privacy policy, as an independent organisation that you have chosen; a model running on your own computer (for example through Ollama) keeps it there. If you switch on "Siri & Shortcuts can edit scripts" in the iPhone or iPad app, a token named "Siri" is created and kept in your device's Keychain; a shortcut you build can then read and update scripts, and any AI model you use in that shortcut (such as Apple's on-device model, Private Cloud Compute or ChatGPT) processes the text under its provider's terms. Check your assistant's settings for whether your conversations are stored or used to improve its models.
- Automatic safety checks: to protect you from hidden or harmful instructions in script text (sometimes called "prompt injection"), we automatically remove invisible characters from text that assistants read and save, and flag text that looks like instructions aimed at an AI. A flag is stored with the change so the app can ask you to check it. These checks never make decisions about you; they only add a warning.
- Usage records: which tool an assistant used, for which account and whether it succeeded, kept in our technical logs (see 3.6). We never log the text of your scripts. We also count recent requests per account to apply usage limits; these counts delete themselves automatically.
3.5 Payments Purchases are made through Freemius, which acts as the merchant of record: it takes the payment, handles tax and sends your receipts. Freemius collects your name, email address, billing country/address and payment details under its own privacy policy. It tells us your email address, your plan and the status of your subscription so we can switch Pro on or off. We never receive or store your card details.
3.6 Security and abuse prevention
- To stop misuse (for example, someone requesting sign-up codes over and over, or repeated failed sign-ins by an app), we briefly record your IP address alongside a count of recent requests. These records delete themselves automatically, normally within 48 hours.
- Our servers keep technical logs (such as errors and request times) to keep the Service running and secure. They are kept for no more than 30 days.
3.7 Contacting us If you email us, we keep the correspondence for as long as needed to help you and for our records.
4. Why we use your information (and our legal basis)
- To provide the Service you asked for: your account, sign-in, sync and Pro features (performance of a contract).
- To take and manage payments through our payment provider (performance of a contract and legal obligation for tax and accounting records).
- To connect the AI assistants you choose and let them work on your scripts when you ask (performance of a contract).
- To keep the Service secure and prevent abuse, including the automatic safety checks on script text read or saved by AI assistants (legitimate interests: protecting you and the Service).
- To send you account emails that you need: sign-up codes, password resets, notices that a payment has failed, or that an inactive account is about to be removed (performance of a contract / legitimate interests). We do not send marketing emails without asking you first.
5. Who we share it with
We use a small number of trusted providers who process information on our behalf, under contracts that require them to protect it:
- Amazon Web Services (Cognito, DynamoDB, Lambda, SES, CloudFront, S3): sign-in, your synced library, account emails and hosting the website and app. Data is stored in the United Kingdom (London region); website content is delivered through a worldwide network.
- Google: "Continue with Google", if you choose it.
- Apple: "Continue with Apple", if you choose it, including forwarding our emails to you if you use "Hide my email".
- Freemius: payments, tax, receipts and subscription management, as merchant of record (United States and other countries).
- Google Play and the Apple App Store: downloading the apps, under their own terms.
AI assistants you connect. When you connect an AI assistant, we disclose your scripts and related settings to that assistant at your direction, as described in 3.4. Its provider (for example Anthropic, Google, OpenAI or Microsoft) is not our processor: it handles that information as an independent controller under its own terms, which may involve processing outside the UK. You can stop this at any time by disconnecting the assistant.
Where a provider processes information outside the UK, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum or an adequacy decision.
We do not sell your personal information, and we only disclose it to others if the law requires us to.
6. How long we keep it
- Unconfirmed sign-ups: if you start signing up but never confirm your email address, the account is deleted after 24 hours.
- Inactive free accounts: a free account that has not been signed in to or used for 12 months is deleted, together with any information we hold for it. We will email you before this happens so you can keep the account by signing in.
- Pro after a failed payment: if a renewal payment fails, Pro stays active while the payment is retried. If it is not resolved within 20 days, your account returns to the free plan.
- Synced library after Pro ends: if your account returns to the free plan (cancelled, expired or unpaid), your synced library is kept for about 3 months so you can pick up where you left off if you resubscribe. After that it is deleted from our servers. The copy on your devices is not affected.
- Deleting your account: you can delete your account at any time from My account (in the app or at teleprompterstudio.affirmdigitalproducts.com/account/). This immediately deletes your sign-in account, your synced library, your AI assistant connections and tokens, and our record of your plan, and cancels any auto-renewing subscription. Information an AI provider already received is held under that provider's terms. Freemius keeps its payment and invoice records for as long as the law requires.
- AI assistant connections: kept until you disconnect the assistant or delete your account. Access tokens expire after 1 hour and sign-in refresh tokens after 90 days (or as soon as you disconnect); personal access tokens and app credentials last until you revoke them. Connections stop working if your account returns to the free plan, and AI changes you had not kept are undone. Cached app details are kept for up to a day.
- Security records and logs: as set out in 3.6.
7. Your rights
Under UK data protection law you have the right to:
- access the personal information we hold about you;
- have it corrected if it is wrong;
- have it deleted (you can also do this yourself; see section 6);
- restrict or object to how we use it;
- receive a copy in a portable format; and
- withdraw consent where we rely on it.
To use any of these rights, email support@affirmdigitalproducts.com. We will reply within one month. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), but please contact us first so we can try to put it right.
8. Cookies and browser storage
We do not use advertising, analytics or tracking cookies. The website and apps store information in your browser or app storage only to make the Service work, for example your scripts and recordings, your settings, that you accepted the licence agreement, and your sign-in session. Signing out removes your scripts and settings from that device (on Pro they stay in your account) and leaves your recordings there, encrypted. A private or incognito browser window keeps nothing once it is closed. Clearing your browser or app data removes it all (and anything not synced or saved elsewhere).
9. Children
The Service is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.
10. Security
Information is encrypted in transit (HTTPS) and at rest with our hosting provider, access is limited to what is needed to run the Service, and passwords and access tokens are never stored in a readable form. AI assistants can only reach your account after you approve them, can only read, create and edit scripts (never delete them, see your recordings or change your account), and their changes wait for your review. No system is perfectly secure, but we take reasonable steps to protect your information.
11. Changes to this policy
If we change this policy, we will update the date at the top. If a change materially affects how we use your information, we will tell you in the app or by email before it takes effect.
12. Contact
Affirm Digital Products Limited (company number 17492996) 124 City Road, London, EC1V 2NX Email: support@affirmdigitalproducts.com