Your content, clearly explained
Privacy Policy
Effective and last updated: September 23, 2026
The short version
TightenAI securely processes selected media and editing data only to provide its editing features. Temporary cloud media is deleted after processing. We do not sell your data or use it for cross-app advertising or tracking.
1. Who we are
TightenAI is provided by Tiger Ventures LLC, a United States company (“TightenAI,” “we,” “us,” or “our”). This policy applies to the TightenAI iPhone app, our website, and the services that support them.
Questions or privacy requests can be sent to tightenai@gmail.com.
2. Data we collect
Apple processes App Store payment-card information. If website checkout is available and you choose it, RevenueCat and Stripe process the web payment. TightenAI does not receive or store your full payment-card number.
3. Why we process data
We process personal data only when a legal basis applies:
- Provide the service: account authentication, purchases, uploads, automatic editing, exports, support, and requested account deletion are necessary to perform our agreement with you.
- Legitimate interests: narrowly scoped security, fraud prevention, reliability, cost control, and content-free product-quality measurement help us protect and improve TightenAI. We assess these uses against your rights.
- Legal obligations: we may retain limited transaction, tax, dispute, or compliance records when the law requires it.
- Consent: device permissions and optional notifications are used only after you choose to enable them, and can be withdrawn in iOS Settings.
4. On-device and cloud processing
On-device mode
When an on-device editing mode is available and selected, working video, speech recognition, and cut analysis remain on your iPhone. Account and purchase services may still operate when configured.
Cloud AI mode
TightenAI prepares an analysis copy and uploads it to private cloud storage. Depending on the source and device, analysis media may include audio or video. Our providers help understand speech, timing, and edit structure so TightenAI can create a proposed cut plan. You do not need to write a prompt or choose a pacing mode.
The proposed plan is applied to the original stored on your iPhone. You can review, restore, and change edits before exporting.
5. Service providers
- Apple provides Sign in with Apple, App Attest, App Store purchases, and device services.
- Google provides Google account sign-in when you choose that option. Google supplies an account identifier and profile details you approve for authentication.
- Supabase stores account identity and current entitlement information.
- Amazon Web Services hosts private temporary media, processing jobs, usage limits, security state, and operational logs.
- Deepgram helps understand speech and timing for the edit. TightenAI requests opt out of model improvement.
- Anthropic helps propose cuts using TightenAI's automatic editing policy. Under its standard commercial API policy, inputs and outputs are normally deleted within 30 days, subject to its stated safety, legal, and service exceptions.
- RevenueCat receives the TightenAI account identifier and App Store or website purchase information to validate purchases, provide entitlements, prevent fraud, and provide subscription analytics.
- PostHog receives a TightenAI account identifier, app and device context, and the content-free product events described above so we can understand activation, reliability, and which editing features are useful. Session replay, advertising, and automatic tap or screen capture are disabled.
- Stripe processes payment and billing information when you choose website checkout. Stripe may retain transaction, tax, fraud-prevention, and legal-compliance records under its own terms.
- OpenAI Sites and Cloudflare host and deliver the TightenAI website and may process basic request information such as IP address, browser information, requested page, and security events.
We require providers to handle data consistently with this policy and applicable law. We do not enable advertising or attribution integrations for TightenAI.
6. Website cookies
TightenAI does not use advertising cookies, cross-site tracking pixels, or behavioral analytics cookies on its website. If you sign in, Supabase sets strictly necessary session cookies so the website can authenticate you and protect your account. These cookies cannot be disabled while using signed-in features. RevenueCat and Stripe may use their own necessary and fraud-prevention technologies on checkout or billing pages they operate.
7. Retention
- On your iPhone: working videos, thumbnails, transcripts, and editable cut plans remain until you delete the cut or the app. Working media is excluded from iCloud backup.
- Temporary cloud media: we actively delete it after successful processing or final failure. Remaining objects become eligible for automatic deletion after seven days; cloud deletion can complete after the eligibility date.
- Cloud transcript and cut-plan jobs: marked to expire after seven days.
- Cut feedback: cloud-cut ratings, selected issue categories, app version, and content-free edit metrics are marked to expire after 180 days. Ratings for on-device or older cuts remain only on your iPhone.
- Operational logs: retained for 30 days and designed not to contain media, transcript text, authorization headers, provider keys, or signed upload URLs.
- Product analytics: retained only as long as needed to understand adoption and reliability. You can stop future collection at any time in the app's Privacy & data settings.
- Administrative audit records: an owner action, reason, timestamp, and opaque actor/target account identifiers are marked to expire after one year. They do not contain video, audio, transcript text, or payment-card data.
- Anthropic API data: normally deleted by Anthropic within 30 days under its standard commercial policy, with exceptions described in that policy.
- Account, subscription, and usage data: kept while needed to provide your account, subscription, credits, fraud prevention, and legal compliance. Active user-linked records are targeted for deletion when you delete your account, subject to the residual periods below.
8. Delete your data or withdraw permission
Delete an individual cut in the app to remove its local working copy and edit plan. To delete your account, use Settings → Delete account and data in the app or the deletion control on your website account page. This starts deletion of TightenAI cloud media, jobs, usage records, App Attest state, purchase profile, and login. A website request cannot directly erase project files stored locally on your iPhone.
Encrypted AWS recovery copies of content-free usage and cut-feedback rows may remain for up to seven days. RevenueCat may queue provider-side deletion. An upload URL issued immediately before deletion can remain valid for up to 15 minutes, but the deleted-account block prevents analysis and the seven-day storage lifecycle remains the backstop.
Deleting a TightenAI account cancels an active RevenueCat website subscription immediately. It does not cancel an Apple subscription. You can manage or cancel Apple subscriptions in your Apple Account subscription settings before deletion. Deletion does not automatically create a refund. You may also revoke Photos, camera, microphone, or notification access in iOS Settings. For help, email tightenai@gmail.com.
9. Security and international processing
We use encrypted transport, private storage, access controls, short-lived upload permissions, account authorization, App Attest, rate and spending limits, and deletion controls. No system is perfectly secure. Our service providers may process information in countries other than yours. Where required, we rely on an adequacy decision or contractual safeguards such as the European Commission's Standard Contractual Clauses.
10. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal data, object to or restrict certain processing, or appeal a request decision. Email tightenai@gmail.com to make a request. We may need to verify that the request relates to your account.
We respond to verified requests without undue delay and ordinarily within one month where the GDPR applies. You may also lodge a complaint with the data protection authority where you live, work, or believe a violation occurred.
We do not sell personal data or share it for cross-context behavioral advertising.
11. Children
TightenAI is not directed to children under 13, and we do not knowingly collect personal information from them. Contact us if you believe a child has provided personal information.
12. Changes
We may update this policy as the service changes. We will update the date above and provide additional notice when required by law.