Your content, clearly explained

Privacy Policy

Effective and last updated: September 23, 2026

The short version

TightenAI securely processes selected media and editing data only to provide its editing features. Temporary cloud media is deleted after processing. We do not sell your data or use it for cross-app advertising or tracking.

1. Who we are

TightenAI is provided by Tiger Ventures LLC, a United States company (“TightenAI,” “we,” “us,” or “our”). This policy applies to the TightenAI iPhone app, our website, and the services that support them.

Questions or privacy requests can be sent to tightenai@gmail.com.

2. Data we collect

CategoryExamples and purpose
AccountAn Apple or Google account identifier and the email address that provider supplies, plus a strictly necessary browser session cookie if you sign in on the website. Used for sign-in and account recovery. An optional display name or social handle you enter stays on your iPhone for personalization and is not uploaded to TightenAI.
Creator contentSelected video or analysis audio, timed transcript, captions, overlays, and cut plan. Used only to provide editing, preview, and export features.
Purchases and usageProduct, purchase source, subscription status and expiration, purchase history, credit usage, and processing duration. Used to provide paid access across the website and app, prevent fraud, and operate credit limits.
Cut feedbackThe rating and issue categories you choose, app version, cut-policy version, source duration, removed duration, trim count, and processing-attempt count. Used to measure and improve automatic-cut quality without storing the video, audio, or transcript with the feedback.
App integrityA user-linked App Attest public key and replay counter. Used to verify cost-bearing requests came from a genuine TightenAI installation.
OperationsJob identifiers, processing stages, timing, status codes, provider token counts, audio duration, and estimated cost. These content-free diagnostics are used for reliability, security, abuse prevention, and cost control.
Product analyticsContent-free app events such as onboarding completion, plan selection, processing success or failure, editor feature use, export success, and coarse duration or timing ranges. These events do not include videos, audio, transcripts, captions, filenames, creator text, or precise media metrics. You can disable this collection in the app's Privacy & data settings.

Apple processes App Store payment-card information. If website checkout is available and you choose it, RevenueCat and Stripe process the web payment. TightenAI does not receive or store your full payment-card number.

3. Why we process data

We process personal data only when a legal basis applies:

  • Provide the service: account authentication, purchases, uploads, automatic editing, exports, support, and requested account deletion are necessary to perform our agreement with you.
  • Legitimate interests: narrowly scoped security, fraud prevention, reliability, cost control, and content-free product-quality measurement help us protect and improve TightenAI. We assess these uses against your rights.
  • Legal obligations: we may retain limited transaction, tax, dispute, or compliance records when the law requires it.
  • Consent: device permissions and optional notifications are used only after you choose to enable them, and can be withdrawn in iOS Settings.

4. On-device and cloud processing

On-device mode

When an on-device editing mode is available and selected, working video, speech recognition, and cut analysis remain on your iPhone. Account and purchase services may still operate when configured.

Cloud AI mode

TightenAI prepares an analysis copy and uploads it to private cloud storage. Depending on the source and device, analysis media may include audio or video. Our providers help understand speech, timing, and edit structure so TightenAI can create a proposed cut plan. You do not need to write a prompt or choose a pacing mode.

The proposed plan is applied to the original stored on your iPhone. You can review, restore, and change edits before exporting.

5. Service providers

  • Apple provides Sign in with Apple, App Attest, App Store purchases, and device services.
  • Google provides Google account sign-in when you choose that option. Google supplies an account identifier and profile details you approve for authentication.
  • Supabase stores account identity and current entitlement information.
  • Amazon Web Services hosts private temporary media, processing jobs, usage limits, security state, and operational logs.
  • Deepgram helps understand speech and timing for the edit. TightenAI requests opt out of model improvement.
  • Anthropic helps propose cuts using TightenAI's automatic editing policy. Under its standard commercial API policy, inputs and outputs are normally deleted within 30 days, subject to its stated safety, legal, and service exceptions.
  • RevenueCat receives the TightenAI account identifier and App Store or website purchase information to validate purchases, provide entitlements, prevent fraud, and provide subscription analytics.
  • PostHog receives a TightenAI account identifier, app and device context, and the content-free product events described above so we can understand activation, reliability, and which editing features are useful. Session replay, advertising, and automatic tap or screen capture are disabled.
  • Stripe processes payment and billing information when you choose website checkout. Stripe may retain transaction, tax, fraud-prevention, and legal-compliance records under its own terms.
  • OpenAI Sites and Cloudflare host and deliver the TightenAI website and may process basic request information such as IP address, browser information, requested page, and security events.

We require providers to handle data consistently with this policy and applicable law. We do not enable advertising or attribution integrations for TightenAI.

6. Website cookies

TightenAI does not use advertising cookies, cross-site tracking pixels, or behavioral analytics cookies on its website. If you sign in, Supabase sets strictly necessary session cookies so the website can authenticate you and protect your account. These cookies cannot be disabled while using signed-in features. RevenueCat and Stripe may use their own necessary and fraud-prevention technologies on checkout or billing pages they operate.

7. Retention

  • On your iPhone: working videos, thumbnails, transcripts, and editable cut plans remain until you delete the cut or the app. Working media is excluded from iCloud backup.
  • Temporary cloud media: we actively delete it after successful processing or final failure. Remaining objects become eligible for automatic deletion after seven days; cloud deletion can complete after the eligibility date.
  • Cloud transcript and cut-plan jobs: marked to expire after seven days.
  • Cut feedback: cloud-cut ratings, selected issue categories, app version, and content-free edit metrics are marked to expire after 180 days. Ratings for on-device or older cuts remain only on your iPhone.
  • Operational logs: retained for 30 days and designed not to contain media, transcript text, authorization headers, provider keys, or signed upload URLs.
  • Product analytics: retained only as long as needed to understand adoption and reliability. You can stop future collection at any time in the app's Privacy & data settings.
  • Administrative audit records: an owner action, reason, timestamp, and opaque actor/target account identifiers are marked to expire after one year. They do not contain video, audio, transcript text, or payment-card data.
  • Anthropic API data: normally deleted by Anthropic within 30 days under its standard commercial policy, with exceptions described in that policy.
  • Account, subscription, and usage data: kept while needed to provide your account, subscription, credits, fraud prevention, and legal compliance. Active user-linked records are targeted for deletion when you delete your account, subject to the residual periods below.

8. Delete your data or withdraw permission

Delete an individual cut in the app to remove its local working copy and edit plan. To delete your account, use Settings → Delete account and data in the app or the deletion control on your website account page. This starts deletion of TightenAI cloud media, jobs, usage records, App Attest state, purchase profile, and login. A website request cannot directly erase project files stored locally on your iPhone.

Encrypted AWS recovery copies of content-free usage and cut-feedback rows may remain for up to seven days. RevenueCat may queue provider-side deletion. An upload URL issued immediately before deletion can remain valid for up to 15 minutes, but the deleted-account block prevents analysis and the seven-day storage lifecycle remains the backstop.

Deleting a TightenAI account cancels an active RevenueCat website subscription immediately. It does not cancel an Apple subscription. You can manage or cancel Apple subscriptions in your Apple Account subscription settings before deletion. Deletion does not automatically create a refund. You may also revoke Photos, camera, microphone, or notification access in iOS Settings. For help, email tightenai@gmail.com.

9. Security and international processing

We use encrypted transport, private storage, access controls, short-lived upload permissions, account authorization, App Attest, rate and spending limits, and deletion controls. No system is perfectly secure. Our service providers may process information in countries other than yours. Where required, we rely on an adequacy decision or contractual safeguards such as the European Commission's Standard Contractual Clauses.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data, object to or restrict certain processing, or appeal a request decision. Email tightenai@gmail.com to make a request. We may need to verify that the request relates to your account.

We respond to verified requests without undue delay and ordinarily within one month where the GDPR applies. You may also lodge a complaint with the data protection authority where you live, work, or believe a violation occurred.

We do not sell personal data or share it for cross-context behavioral advertising.

11. Children

TightenAI is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided personal information.

12. Changes

We may update this policy as the service changes. We will update the date above and provide additional notice when required by law.