Privacy Policy
Last updated: 18 October 2026
This policy explains what data Negative collects and how it's used. The app is run by [owner] ("we"). Contact: hello@your-domain.com.
The short version
- Your videos never leave your device. We never see or store them.
- On-device AI uploads nothing at all.
- Studio sends only the audio of your clip, so our speech provider can write the captions. We don't store it.
- If you sign in, we keep your email and your plan. No ads, no tracking, no selling of data, no marketing emails.
- You can delete your account and its data anytime from the account menu.
What we collect
| Data | Why | How long |
|---|---|---|
| Email address, and your name if your sign-in provider (Google or Apple) shares it | To create and run your account | Until you delete your account |
| Your plan and subscription status (for example "Pro, renews 1 May") | To unlock the features you paid for | Until you delete your account |
| Studio usage counts (how many transcriptions today, minutes this month), linked to your account, or to your IP address if you're not signed in | To apply plan limits and prevent abuse | Reset every day and month; deleted with your account |
| Short-lived request counts by IP address | To block automated abuse (rate limiting) | 10 minutes |
| Standard server logs kept by our hosting provider (IP address, time, page requested) | Security and keeping the site running | As set by the hosting provider, usually a few weeks |
We don't collect your videos, we don't use analytics or advertising trackers, and we don't sell or share your data for advertising.
Studio audio
When you choose Studio, your browser sends the clip's audio (not the video) to our server, which passes it to Groq, Inc. to turn speech into text using the Whisper model. The audio is used only to create your captions. Our server doesn't save it; it's discarded when the request finishes. Groq processes it under its own privacy terms. If you'd rather nothing is uploaded, use On-device AI.
Who processes data for us
- Supabase – sign-in and account storage.
- Lemon Squeezy – payments, invoices and tax, as merchant of record. They receive your payment details directly; we never see your card number.
- Groq – Studio speech-to-text.
- jsDelivr – delivers the sign-in library to your browser.
- Hugging Face – only if the on-device AI model isn't hosted on our own server, your browser may download it from there.
- Our hosting provider – runs the website.
Some of these providers are outside your country. They are required to protect the data and use it only to provide their service to us.
Legal bases (for visitors in the EU/UK)
We process account and billing data to provide the service you asked for (contract), and usage counts and logs to keep the service secure and fair (legitimate interests). We don't rely on consent for tracking because we don't track you.
Your rights
- Delete: use Delete account in the account menu. It cancels any subscription and permanently deletes your account data from our systems. Lemon Squeezy keeps purchase records it must keep for tax law.
- Access, correct or export your data, or object to how we use it: email hello@your-domain.com. We reply within 30 days.
- You can complain to your local data protection authority.
Children
Negative is not for children under 13, and we don't knowingly collect their data. If you believe a child under 13 has created an account, email us and we'll delete it.
Emails
We only send emails needed to run your account, such as sign-in links. Lemon Squeezy sends receipts. We don't send marketing emails. If we ever do, they will only go to people who opted in, and every one will have an unsubscribe link.
Cookies and storage
We only use essential browser storage. See the Cookie Policy.
Security
The site uses HTTPS, strict security headers, and keeps secret keys only on the server. Sign-in tokens are checked on the server for every protected action.
Changes
If we change this policy, we'll update the date at the top, and tell signed-in users about important changes.