Privacy Policy

Last updated: 19 August 2026

This Privacy Policy describes how Clipsmasher ("the App", "we", "us") handles your information. The short version: your videos and projects never leave your device. Two small things are sent: purchase status, and, when the App cannot carry out an editing instruction you typed, that sentence, so the missing feature can be built. Both are described below.

1. Data we collect

Clipsmasher has no user accounts, no sign-up, no advertising SDKs and no analytics. Editing works entirely offline. If you purchase Clipsmasher Pro, purchase and subscription status is processed as described in section 5.

The one other thing that leaves your device is described in section 6: an editing instruction the App could not carry out. Nothing identifies you or your device, and no media is ever included.

2. Your media files

When you import videos, audio or images into the App, copies are stored in the App's private storage on your device so your projects keep working even if the originals move. These files:

• never leave your device;
• are not accessible to other apps;
• are deleted when you remove them from the App, delete the associated project, or uninstall the App.

Videos you export are saved to your device's gallery at your request, and sharing an exported video uses your device's standard share function - where it goes from there is up to you and the app you share it with.

3. Permissions the App requests

• Photos / media access - used solely to let you pick videos, music and images to import, and to save your exported videos to the gallery.
• Camera - only if you choose to record a clip or take a photo directly into a project. The App never opens the camera on its own.
• Microphone and speech recognition - only while you dictate an editing instruction, so it can be turned into text. Recognition uses your device's own speech service; no recording is kept and no audio is sent to us.

On macOS the App is sandboxed and reads only the files you hand it, through the open dialog or by dropping them on the window. It has no access to the rest of your disk, and it does not open the Photos library unless you point the picker at it.

The App does not access your contacts or your location, and has no code that reads either. (iOS asks us to declare a location description because the photo library component we use can read the location tags stored inside your own photos; Clipsmasher never requests that permission and never reads those tags.)

4. Children's privacy

The App has no accounts, no profiles and no advertising, and nothing it sends identifies anyone. We do not knowingly collect personal information from any user of any age.

5. Purchases and third-party services

Clipsmasher offers an optional paid upgrade (Clipsmasher Pro). How it is sold depends on where you are running it, and the two routes are separate.

On iPhone and Android, payments are handled by the Apple App Store or Google Play - we never see or store your payment details. To unlock Pro on your device the App uses RevenueCat to validate purchases and manage subscription status. RevenueCat receives a pseudonymous app-generated identifier and purchase history for this App; it does not receive your name, email, contacts or any of your media. See RevenueCat's privacy policy for details.

On macOS, Pro is bought from Stripe and unlocked with a licence key. Stripe handles the payment and the email address you give it at checkout; we never see or store your card details. When you paste the key into the App, the App sends the key, a random identifier generated on first run, and a device name to our licence server so that the licence can be counted against its seats. Two things about that:

• the identifier is 16 random bytes made when the App first runs. It is deliberately not a serial number, a MAC address or anything else read off your machine - it identifies an installation and nothing else;
• the device name is your computer's own network name, the one macOS shows in Sharing settings, so that you can tell your machines apart when you move a licence. If that name contains your own name, that is the name we receive. Change it in System Settings before activating if you would rather it did not.

Beyond that and section 6, the App does not integrate any analytics, advertising or tracking services. The app stores (Google Play / Apple App Store) may process data such as install statistics under their own privacy policies, which we do not control - see Google's Privacy Policy and Apple's Privacy Policy. The Mac download itself is served from GitHub, which will see the request for the file as any web server would.

6. Editing instructions the App could not carry out

You tell Clipsmasher what to do in your own words. When it cannot work out what an instruction means, that sentence is recorded on your device and sent to us so the missing capability can be added - it is how the App gets better at understanding people.

What is sent:

• the instruction you typed or dictated, and the part of it that could not be understood;
• the App version and which build it is - iOS, Android or macOS.

What is not sent:

• any file name - names are replaced with <file> on your device before anything is sent, so "PXL_20260727_093539253.mp4" is recorded as "<file>";
• any video, audio, image, project or export - no media of any kind;
• any name, email, account, advertising identifier or device identifier. There is nothing in what we receive that can be traced back to you or to your machine.

Identical wording from different people is stored once with a counter, so what we hold is a list of phrasings and how often each was tried. These are kept until the App understands them, then deleted. The App also downloads a list of alternative phrasings so that wordings other people have tried start working on your copy without waiting for an update; that download contains no personal data of any kind.

If you would rather send nothing, keep the App offline - everything except in-app purchases works with no connection at all.

7. Data retention and deletion

All App data (projects, imported media, templates and exports kept in App storage) lives only on your device. You can delete it at any time by deleting items within the App or by uninstalling the App. We hold no copies of any of it, so there is nothing for us to delete on our side beyond the instruction text described in section 6. Purchase records are retained by the app store and RevenueCat, or by Stripe and our licence server for a Mac licence, as required to keep your Pro entitlement working across reinstalls; you can request deletion by contacting us at the address below.

8. Changes to this policy

If a future version of the App changes how data is handled, we will update this policy and revise the "Last updated" date above before the change takes effect.

9. Contact

Questions about this policy? Email clipsmasherapp@gmail.com.