Privacy Policy

This explains what GifChat collects, why, and what you can do about it. The data controller is Cezar Drumea (Individual), Romania, [registered address to be added]. Questions or requests: support@gifchat.app.

What we collect

• Account details. Your email address, a username, and a hashed password. We never store your password itself.
• What you create. The prompts or scripts you submit, the settings you choose, and the videos produced from them.
• Usage. Minutes generated, plan status, and basic request logs including your IP address, kept to run the service and to stop abuse.
• Purchases. Plans are bought through Apple in the iPhone app. Apple processes the payment; we never see your card. We keep the subscription status Apple reports to us, so your plan and minutes work in the app and on the web.

Why we are allowed to use it

• To provide the service you asked for, which is the contract between us.
• To meet legal obligations, such as keeping records for tax.
• For our legitimate interest in keeping the service working and preventing abuse of the free allowance.

Who processes it for us

Only the services needed to run GifChat:

• Supabase — accounts, database and file storage (EU region)
• Railway — the servers that generate videos
• Vercel — hosting for this website
• OpenAI — writing scripts and choosing reactions
• ElevenLabs — synthesising the voices
• Amazon Web Services — image moderation
• Resend — sending you email
• Apple — purchases made inside the iPhone app

We do not sell your data, and we do not share it for advertising.

Cookies

Only strictly necessary ones, so there is no cookie banner. A session cookie keeps you signed in and cannot be read by JavaScript. A device identifier and a sign-in hint help us apply the one-time free allowance fairly and decide which button to show. No advertising or cross-site tracking cookies are set.

How long we keep things

• Your account and generated videos: until you delete them or delete your account.
• A one-way hash recording that a mailbox has used its free allowance: kept after deletion, so the allowance cannot simply be claimed again. It cannot be reversed into your address.
• Purchase records: as long as tax law requires.
• Request logs: a short rolling window.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere. You can delete your account yourself from Account at any time. Write to support@gifchat.appand we will respond within a month. If you are in the EU or UK you may also complain to your local data protection authority.

Transfers outside the EU

Some processors above are based in the United States. Where data leaves the EU it is transferred under the European Commission's standard contractual clauses or an equivalent safeguard.

Children

GifChat is not for anyone under 16. If you believe a child has created an account, tell us and we will remove it.