Privacy Policy

CaptionAddr is developed and operated by Dynsell LLC ("we," "us," or "our"). This Privacy Policy explains how information is handled when you use the CaptionAddr iOS and iPadOS app, this website, or contact support.

1. Video, Audio, Captions, and Exports

CaptionAddr lets you choose one video through Apple's Photos picker. The app copies or moves the selected file into local app storage, extracts temporary audio as needed, transcribes speech with a local Whisper Small English model, and lets you edit caption words, timing, font, weight, text treatment, size, placement, outline, background styling, and optional watermark locally.

Your source video, extracted audio, transcript text, caption timing, project edits, and exported movie are not uploaded to Dynsell LLC or Firebase for transcription. Imported projects and generated files stay on your device unless you choose to save an export to Photos or share it through iOS.

2. Local App Data and Preferences

CaptionAddr stores app settings and local workflow state on your device. This includes the current project session, imported media copy, generated caption document, published export copy, temporary working files, local diagnostics, progress calibration data, haptics and appearance preferences, watermark preference, accepted Terms version, the local date when you accepted the Terms, and local markers used to avoid resending one-time activation milestones.

CaptionAddr also stores an anonymous purchase identity in the iOS Keychain so App Store subscription access can be restored on the same device when supported. This keychain value may survive app deletion and reinstall on the same device, depending on iOS behavior and device state.

When you start your first export, CaptionAddr may ask iOS for notification permission so it can show an export-complete notification. Notification permission is managed by iOS Settings, and CaptionAddr does not use Firebase Cloud Messaging or marketing push notifications.

3. Bundled Model and Fallback Delivery

CaptionAddr includes Whisper Small English model resources and tokenizer resources in the app bundle so the normal shipping workflow does not require a separate model download. The app verifies configured model checksums before use.

CaptionAddr has a configured fallback that can download model files from Hugging Face (huggingface.co) if the bundled model is unavailable or a build is configured to use remote fallback delivery. If this fallback is used, Hugging Face may receive standard network request information, such as IP address, request time, and user agent, to deliver model files. Your video, audio, captions, and exports are not sent with model verification or model delivery requests.

4. Purchases and Subscriptions

CaptionAddr Pro is purchased through Apple's App Store. Apple processes payment information, billing, renewals, cancellations, refunds, and subscription management. We do not receive your credit card number, bank details, billing address, or Apple ID password.

To verify Pro access, CaptionAddr may process StoreKit product IDs, transaction IDs, original transaction IDs, purchase dates, expiration dates, revocation dates, renewal status, subscription group identifiers, environment, App Store status values, and an app account token used for subscription reconciliation. This information is used to determine whether Pro features should be available, restore access, reconcile App Store Server Notifications, and prevent entitlement abuse.

5. Firebase Services

CaptionAddr uses Firebase services from Google LLC for app infrastructure. The app uses Firebase Authentication for anonymous authentication when subscription-related backend access is needed, Cloud Firestore for server-side entitlement and subscription records plus aggregate activation counters, Cloud Functions for subscription entitlement sync, activation counting, and App Store notification handling, Firebase App Check to help protect backend calls, and Firebase Crashlytics for crash diagnostics. CaptionAddr does not include Firebase Analytics, Firebase Cloud Messaging, advertising SDKs, or App Tracking Transparency prompts.

• Anonymous Authentication: Firebase may generate and store anonymous identifiers for authentication and entitlement sync. We do not ask you to create a named CaptionAddr account. Free users who never interact with subscription features may not trigger Firebase Authentication in normal use.
• Cloud Firestore: Subscription entitlement records, transaction metadata, customer token records, user entitlement mirrors, App Store notification records, rate-limit records, maintenance records, and sharded daily activation totals are stored in Cloud Firestore. Subscription records may include anonymous Firebase user IDs, app account tokens, transaction IDs, original transaction IDs, product IDs, subscription status, purchase dates, expiration and revocation dates, renewal status, subscription group identifiers, environment, App Check app ID, and related App Store metadata. Activation totals contain only date, app version, build number, shard number, and counts for fixed milestone names.
• Cloud Functions: Firebase Functions may receive function invocation metadata, including request metadata needed to service entitlement sync and activation counter requests.
• App Store Server Notifications: Apple may send subscription lifecycle notifications (such as renewals, cancellations, and billing events) to our server. These notifications are processed by Cloud Functions and stored in Cloud Firestore to keep entitlement records current.
• App Check: App Check may use Apple DeviceCheck data in release builds to help verify that backend requests come from the genuine app.
• Activation Metrics: CaptionAddr sends a fixed set of content-free milestone names such as studio opened, video import succeeded, captions ready, export started, export saved, export failed, first export saved, repeat export saved, and share opened. The function immediately increments one of 32 daily aggregate shards by app version and build. It does not create raw event records or store Firebase user IDs, installation IDs, filenames, media details, video duration, transcript text, caption text, styling choices, or per-install profiles with these counters.
• Crashlytics: Crash reports and non-fatal error reports may include stack traces, device and OS information, app version, build number, hardware identifier, support tier, operation names, operation duration, error strings, logs, and limited operation metadata. We do not intentionally attach your videos, audio, transcript text, caption timing, or exports to crash reports.
• Performance Diagnostics: CaptionAddr records operation timing and Apple MetricKit diagnostic payloads locally on your device. Current app code does not submit successful local performance telemetry to Cloud Functions in normal user flows. Failed operations may be reported to Crashlytics as non-fatal diagnostic events, without your media or caption content. The backend includes a rate-limited performance telemetry callable for controlled smoke tests and future diagnostics; if used, it stores anonymous Firebase user ID, App Check app ID, sanitized client metadata, operation summaries, metric summaries, and timestamps.

Google's privacy policy is available at policies.google.com/privacy.

6. App Privacy Summary

For App Store privacy disclosures, CaptionAddr does not use data for tracking or advertising, and does not include Firebase Analytics. The current app privacy disclosure covers user ID, device ID, purchase history, product interaction, crash data, performance data, and other diagnostic data. Product Interaction is disclosed as not linked to the user, not used for tracking, and used for Analytics. Other Diagnostic Data is also disclosed for a non-tracking Analytics purpose to match bundled Firebase and Google SDK privacy manifests.

User ID refers to anonymous Firebase user IDs and the app account token used for subscription reconciliation. Device ID refers to Firebase installation, App Check, and diagnostic identifiers. Purchase history refers to StoreKit transaction and entitlement metadata. Product interaction refers to the aggregate workflow counters described above. Crash, performance, and other diagnostic data refer to Crashlytics, local MetricKit diagnostics, operation timing, device and OS metadata, app version, build number, hardware identifier, support tier, operation names, duration, error strings, function invocation metadata, Firebase SDK diagnostic metadata, and logs used to keep the app reliable.

CaptionAddr does not automatically collect your email address in the app. If you choose to email support, we receive the email address and message content you send through your mail provider.

7. Website and Support Email

This static website is hosted on Netlify for public product, support, privacy, license, and legal information. Netlify may collect standard web server logs, including IP address, browser type, and pages visited, as part of its hosting service. Netlify's privacy policy is available at netlify.com/privacy.

If you email CaptionAddr@gmail.com, we receive your email address and the information you choose to include. We use support emails to respond to your request, diagnose issues you report, and maintain support records.

8. How We Use Information

We use the limited information described above to:

• Provide and maintain CaptionAddr's local caption workflow.
• Deliver and verify the on-device transcription model.
• Verify subscription status and manage Pro entitlements.
• Protect backend services from abuse.
• Measure whether the core import-to-export workflow succeeds and improve product usability.
• Diagnose crashes, reliability problems, and device support issues.
• Respond to support requests and legal obligations.

9. Sharing

We do not sell your personal information or share it for cross-context behavioral advertising. We share information only with service providers needed to operate CaptionAddr, including Apple for App Store purchases, Google Firebase for the services described above, Hugging Face if remote model fallback is used, Netlify for website hosting, email providers for support messages, or when required by law.

10. Retention

Videos, audio, captions, project files, and exported movies are stored on your device and remain under your control. Uninstalling the app may remove local app data; exported videos saved to Photos must be deleted from Photos separately.

The anonymous purchase identity stored in the iOS Keychain may remain after uninstall so same-device subscription recovery can work. You can remove it by erasing the device or through other iOS keychain-clearing mechanisms controlled by Apple.

Server-side records are retained only as long as reasonably necessary to operate, audit, restore, and reconcile entitlements, prevent abuse, and satisfy business or legal needs. Current scheduled lifecycle maintenance deletes certain records on approximately the following schedule:

• Stale anonymous user records: deleted after approximately 30 days of inactivity if no paid history exists.
• App Store notification records: deleted after approximately 90 days.
• Transaction records: deleted after approximately 180 days.
• Rate-limit records: deleted after approximately 7 days.

Activation metrics are retained as sharded daily totals by app version and build. CaptionAddr does not retain a raw activation event stream or a user-level or installation-level activation history.

Customer and subscription entitlement summaries may be retained longer where needed to maintain subscription access, support restores, reconcile Apple subscription state, prevent abuse, or meet business and legal obligations. Support emails are retained as long as reasonably necessary for support and business records.

Local diagnostic logs and MetricKit payload files are stored on your device, rotated or trimmed locally, and are not uploaded to Dynsell LLC servers by the current app in normal user flows.

11. Security

We use reasonable technical and organizational measures appropriate to the app's design. Local processing limits the exposure of your media content. Network requests for model delivery, Apple purchases, Firebase functions, App Check, and crash diagnostics use transport security provided by the platform and service providers.

12. Children

CaptionAddr is not directed to children under 13. If you believe a child has provided personal information to us through support or another channel, contact us and we will take appropriate steps.

13. Your Choices

• Local media: You control the videos and exports on your device. Reset the current project in the app or remove the app to remove app-stored local project data, and delete exported videos from Photos separately.
• Subscriptions: Manage or cancel CaptionAddr Pro in Apple ID subscription settings or at apps.apple.com/account/subscriptions.
• Notifications: Manage export-completion notification permission in iOS Settings.
• Watermark, haptics, and appearance: Manage these preferences in CaptionAddr settings.
• Support email: Do not include sensitive information in support emails unless it is necessary for the request.
• Data requests: Contact us to request access, deletion, or correction of information reasonably associated with your use of CaptionAddr.

14. California and Other Privacy Rights

Depending on your location, you may have rights to request access, deletion, correction, portability, or limits on certain processing. We do not sell personal information or share it for cross-context behavioral advertising. To exercise privacy rights, contact us at CaptionAddr@gmail.com.

15. International Processing

Service providers such as Apple, Google Firebase, hosting providers, and email providers may process information in the United States and other countries where they operate. Those locations may have data protection laws different from those in your jurisdiction.

16. Changes

We may update this Privacy Policy as CaptionAddr changes. When we update it, we will revise the "Last Updated" date on this page.

17. Contact

• Entity: Dynsell LLC
• Mailing address: 2856 NE Sedalia Loop, Bend, OR 97701
• Email: CaptionAddr@gmail.com
• Website: https://captionaddr.com