Privacy Policy
Last updated: October 8, 2026
Subtillo ("we", "our", or "the app") is developed by Muhammed Kahraman. This Privacy Policy explains how we collect, use, and protect your information when you use our mobile application and related services.
1. Information We Collect
Account Information
- Email address, full name, and password when you create an account
- Account identifiers if you sign in with a social provider (Apple Sign In or Google Sign-In)
Content You Provide
- Video and audio files you upload for subtitle generation
- Generated transcripts and translations derived from your content
Device & Usage Information
- Device model, OS version, app version, and locale (collected only when error or crash reports are sent)
- Usage statistics such as number of videos processed, minutes used, and processing time
- Sign-in session records: for each device signed in to your account, when the session started and was last renewed, the device's user agent (app and operating system version), and the IP address used
Payment Information
- Subscription and transaction data processed through Apple In-App Purchases. We do not directly collect or store credit card details.
2. How We Use Your Information
- Provide our service: Transcribe and translate your video/audio content
- Account management: Authenticate your identity, keep you signed in, limit simultaneous sign-ins to 3 devices, protect your account against misuse, and manage your subscription
- Improve the app: Diagnose errors, fix crashes, and enhance performance
- Communicate with you: Send password reset emails and processing notifications
3. Third-Party Services and AI Processing
- Deepgram: We send the audio extracted from your uploaded video or audio file for speech recognition. Requests use
mip_opt_out=trueso this content is not used to train Deepgram models. - OpenAI: We send transcript/subtitle text for translation. Our API requests use
store:false. OpenAI API data is not used to train models by default; abuse-monitoring logs may be retained for up to 30 days under our current configuration. - Cloudflare R2: Stores uploaded source media and related service files.
- RevenueCat and Apple: Process and verify subscriptions, purchases, entitlements, and transaction identifiers. We do not receive your full payment-card details.
- Authentication providers: Apple Sign In, Google Sign-In, and our account infrastructure process the identifiers and credentials needed to authenticate your account.
These providers receive only the data needed for their stated purpose. Uploaded media is not sent to OpenAI for translation; only transcript/subtitle text is sent.
3a. Optional ChatGPT Connection
The optional Subtillo ChatGPT plugin is operated by Subtillo and connects your Subtillo account to ChatGPT, a service provided by OpenAI. Availability may be limited during rollout. Connecting is not required to use the mobile app. Before access is granted, you must sign in to Subtillo and explicitly approve the displayed account permissions. Your Subtillo password is not shared with ChatGPT.
Depending on the permissions you approve and the tools you request, the connection can share account display information and available usage, project names and status, original and translated subtitle text and timing, styles and preferences, and processing or export status with ChatGPT. Source media, short rendered previews and exported videos or subtitle files can be made available within ChatGPT through temporary authorized links. A video you choose to import from a ChatGPT attachment is transferred to Subtillo for processing. Only provide content you have the right to share.
Tool requests and results used in your conversation are processed by ChatGPT/OpenAI. Subtillo receives the tool arguments and files needed for the requested operation, rather than a copy of your entire chat history. ChatGPT processing, retention and any use for model improvement depend on your ChatGPT plan, settings and OpenAI’s applicable terms and privacy policy. The OpenAI API translation settings described above do not apply to your ChatGPT conversations. Subtillo cannot delete copies already retained by ChatGPT.
We store connection identifiers, granted permissions, approval and revocation records, hashed access and refresh tokens, and project drafts and preferences to operate and secure the connection. Drafts and preferences are retained with the project or account, subject to the retention and deletion rules below. You can revoke future access in Subtillo under Settings → ChatGPT Connections, and remove the connection in ChatGPT. Revoking does not delete existing Subtillo projects or earlier ChatGPT conversations or downloads; manage or delete those separately. No new payment flow is introduced in ChatGPT. Processing that uses your allowance requires a separate usage confirmation.
For ChatGPT privacy information and controls, see OpenAI’s Privacy Policy and your ChatGPT data controls.
4. Data Storage & Security
Your account data and processed content are stored on secured infrastructure, including Cloudflare R2 for source media. Passwords are hashed and never stored in plain text. Communication is encrypted via HTTPS. You can delete individual projects in the app, which removes their stored source and generated content from our active systems.
5. Data Retention
- Your account data is retained as long as your account is active.
- Uploaded video/audio files and generated transcripts, translations, and subtitles are stored for continued access until you delete the project or account, subject to operational backups and legal obligations.
- OpenAI may retain abuse-monitoring logs for up to 30 days under the API configuration currently used by Subtillo.
- Error and crash logs are retained for diagnostic purposes and periodically purged.
- Sign-in session records are kept as part of your account's security history and are deleted when your account deletion is finalized.
6. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction or deletion of your data
- Request deletion of your account
Please note that even after account deletion, we may retain certain data as required by law or for legitimate business purposes, including but not limited to: payment and subscription records, error and crash logs, anonymized usage statistics, account activity history, and records related to abuse or policy violations. To exercise any of these rights, contact us at the email address below.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at: