Privacy Policy
Last updated: August 2, 2026
This Privacy Policy explains how Reelio (“we”, “us”) collects, uses and protects your personal data when you use the Reelio iOS app and this website. We keep it in plain language, because you should actually be able to read it.
Controller: Omar Ashour, Rügländer Straße 6, 91522 Ansbach, Germany — email: support@reel-io.com
1. The short version
- Your videos are uploaded only so our AI can analyze them, then deleted automatically — we keep the results, not your footage.
- We never post to your social accounts — we never even connect to them.
- We don’t sell your data and we don’t use your videos for advertising.
- If you join the website waitlist, we use your email only for early access, launch updates and the promised waitlist benefit.
- You can delete your account and all associated data at any time, directly in the app — section 6 lists the few minimal records we have to keep afterwards.
2. Data we collect
Account data
When you create an account: your email address, display name, chosen avatar, and the content preferences you pick during onboarding (niches, target audiences, goals, audience size). If you continue as a guest, we store a device identifier instead of an account.
Videos and analysis results
The video you upload for analysis is used only to generate your results and is then deleted automatically (see section 6). We retain the AI-generated results (scores, verdicts, fixes, captions, hook rewrites, cover images, playbooks) and technical metadata about each analysis (e.g. video duration, processing tokens, timestamps) — but not the original video.
Purchase data
Your subscription status and check balance, plus the opaque identifier Apple assigns to your subscription, which we store alongside your account so that renewals are applied to the right account. Payments are processed entirely by Apple — we never see your payment details.
Usage and diagnostics
Anonymous-by-default product analytics (screens visited, features used, crashes) so we can understand what to improve, plus a push notification token if you enable notifications.
Website waitlist data
If you join the waitlist, we collect your email address, signup time and an approximate country derived by our hosting provider. We also use a short-lived, IP-based counter to prevent automated signup abuse; the counter expires after one hour.
3. What we use it for
- Providing the service — analyzing your videos and showing your history and progress (Art. 6(1)(b) GDPR, contract performance).
- Personalization — tailoring feedback, trends and playbooks to your niche and goals (Art. 6(1)(b) GDPR).
- Fair-use enforcement — counting checks and preventing abuse of free quotas (Art. 6(1)(f) GDPR, legitimate interest).
- Notifications — analysis-ready and progress notifications, only if you opt in (Art. 6(1)(a) GDPR, consent).
- Improving the product — aggregated analytics and crash reports (Art. 6(1)(f) GDPR).
- Waitlist, launch and product updates — confirming your signup, providing early access, applying your waitlist benefit, telling you when Reelio launches and sending occasional updates about the product, based on the request you make when submitting the form (Art. 6(1)(a) GDPR, consent). You can withdraw at any time, and every such email carries an unsubscribe link.
- Account emails — if you create an account, we send a short welcome series when you sign up, a reminder when your monthly free check becomes available, a confirmation if you subscribe to Pro, and notices about your subscription (that it is about to end, or that it has ended) (Art. 6(1)(b) GDPR, contract performance, and Art. 6(1)(f) GDPR, legitimate interest in helping you use what you signed up for). The tips and monthly reminders carry an unsubscribe link; emails needed to run your account, such as sign-in codes and subscription notices, do not.
4. AI processing of your videos
To generate your analysis, your video is processed by a third-party AI model provider (Google Gemini). The video is transmitted securely for the sole purpose of generating your results and is subject to the provider’s API data protection terms; API content is not used by Google to train its models. Once the analysis completes, the video is deleted from our storage. Your analysis results belong to your account, and your videos are never published or shared with other users.
5. Service providers we rely on
- Supabase — database, authentication and secure video storage.
- Google Gemini API — AI analysis of uploaded videos and generation of feedback and covers.
- Apple — App Store distribution, in-app purchases and push notification delivery (APNs).
- Superwall — displaying and testing our paywall and subscription offers.
- PostHog (EU cloud) — product analytics, hosted in the European Union.
- Sentry — crash and error diagnostics; configured not to collect your IP address.
- Cloudflare — website hosting, security and storage of the waitlist in Cloudflare KV.
- Resend — sending our emails: sign-in codes, account and welcome emails, waitlist confirmation, launch announcements and product updates.
Where providers process data outside the EU/EEA, transfers are safeguarded by the EU–US Data Privacy Framework or Standard Contractual Clauses.
6. How long we keep your data
Uploaded videos are not stored long-term. Your video is deleted from our storage as soon as its analysis finishes — and within 24 hours at the latest if an analysis is interrupted before it completes. We keep only the results of each analysis (scores, feedback and the generated cover image), never the original footage.
Your analysis results and account data are kept for as long as your account exists, so you can track your progress over time. When you delete your account, your personal data and analysis history are deleted. We may retain minimal records where the law requires it (e.g. purchase records for tax purposes) and minimal abuse-prevention flags (e.g. that a device already used its free checks).
If you have ever subscribed to Pro, deleting your account leaves one further minimal record behind: the opaque identifier Apple assigns to that subscription, together with a one-way hash (SHA-256) of the email address the deleted account used. The address itself is erased at the moment of deletion, and the hash cannot be turned back into it. We keep this record because one Apple subscription belongs to exactly one Reelio account: it stops the same subscription being activated on a second account, and it lets our support team give you your Pro access back if you return — by hashing the address you contact us from and checking it against the stored hash (Art. 6(1)(f) GDPR, legitimate interest in preventing subscription sharing and in resolving billing problems). It holds no name, no readable email address and no payment data. We keep it for as long as that purpose lasts, because an Apple subscription identifier can reach us again at any time; you can ask us to erase it sooner by emailing support@reel-io.com, but once it is gone we can no longer restore a subscription that was bought under the deleted account.
Waitlist records are kept while you remain subscribed to our launch and product updates, so we can apply the promised early-access benefit and keep you informed. We delete them as soon as you unsubscribe or withdraw your consent — via the unsubscribe link in any update email, or by emailingsupport@reel-io.com — and in any case no later than six months after the last email you engaged with. The IP-based abuse counter expires automatically after one hour.
7. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15),
- correct inaccurate data (Art. 16),
- have your data deleted (Art. 17),
- restrict processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interests (Art. 21),
- withdraw any consent at any time (Art. 7(3)),
- lodge a complaint with a supervisory authority (Art. 77).
The fastest way to delete app data is in the app: Profile → Delete Account. To remove a waitlist email, withdraw consent or make any other request, email support@reel-io.com.
8. Children
Reelio is not directed at children under 16. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.
9. This website
This website does not set cookies or run third-party advertising trackers. Apart from the optional waitlist form described above, it does not collect information directly from you. Server access logs (IP address, requested page, timestamp) may be processed briefly by Cloudflare for security and delivery (Art. 6(1)(f) GDPR, legitimate interest).
10. Changes to this policy
We will update this policy as the product evolves and note the date of the latest revision at the top. For significant changes we will inform you in the app.
