Privacy Policy
This policy explains what data we process, and why, when you use the PopSub iOS app and the popsubapp.com website. In short: your videos stay on your device, we don’t sell your data, and we don’t track you for advertising.
Controller: Eymen Altunbaş and Süleyman Çayır (PopSub developers) — contact: destek@popsubapp.com
1. What stays on your device
Your videos, photos and editing projects are stored only on your device; they are not uploaded to our servers.
2. Data we process
- Account information: If you sign up with email, your email address and your password (stored encrypted). If you sign in with Apple, the user identifier Apple sends us and, if you choose to share it, your email address; you can use Apple’s “Hide My Email” option.
- Audio for captions: When you want to create captions, only the audio of the relevant section is sent to our server and passed on to our speech recognition provider. The audio file is kept in a private storage area that only our server can access, and only for as long as processing takes; once the captions are done (or if the job is canceled or fails), it is deleted from our server within a few minutes. Caption results are cleared automatically after a certain period.
- Usage and quota records: To calculate your free and paid caption time, we record which job took how long.
- Purchase information: Subscriptions and purchases are made through Apple. We never see your payment details; we only store the transaction information Apple sends us to verify your subscription.
3. Legal basis
- Providing the service: We process your account information, the audio for captions, usage and quota records and subscription verification data because this is necessary to provide the service under our contract with you (Art. 6(1)(b) GDPR; for users in Turkey, Art. 5(2)(c) KVKK).
- Legal obligation: We keep purchase records to comply with our legal obligations (Art. 6(1)(c) GDPR; Art. 5(2)(ç) KVKK).
4. Service providers and data transfers
To provide the service, we work with the following providers and share data with them only for this purpose:
- Supabase: account, database and temporary file infrastructure (servers in the EU region).
- Deepgram: speech recognition, to convert audio into text.
- Apple: Sign in with Apple and in-app purchases.
Our Supabase servers are located in the EU region. Deepgram is a US-based provider; we send audio to Deepgram’s EU endpoint (api.eu.deepgram.com). Where personal data is transferred to countries outside the EU/EEA, we rely on the safeguards offered by the respective provider. These providers’ own data processing terms also apply.
5. What we don’t do
- We don’t sell or rent your personal data.
- We don’t track you for advertising and don’t use third-party advertising SDKs.
- We don’t use your audio recordings to train our own AI models.
6. Retention and account deletion
We keep account and usage data for as long as your account is open. When you delete your account in the app via Account → Delete account, your account data on our server and any audio files still being processed are deleted; if you signed in with Apple, that connection is also revoked. The projects on your device remain. Records that must be kept due to legal obligations (e.g. purchase records) are retained only for as long as required.
7. Your rights
Under the GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK) and other applicable legislation, you have the right to:
- access your data (Art. 15 GDPR);
- have inaccurate data corrected (Art. 16 GDPR);
- have your data deleted (Art. 17 GDPR);
- restrict processing (Art. 18 GDPR);
- receive your data in a portable format (Art. 20 GDPR);
- object to processing (Art. 21 GDPR).
To make a request, write to destek@popsubapp.com.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR). In Turkey, you can apply to the Personal Data Protection Board (KVKK).
8. Children
PopSub is not directed at children under 13, and we do not knowingly collect data from children of that age.
9. Website
popsubapp.com does not use cookies and contains no analytics tools. Fonts are served directly from popsubapp.com; no third-party font services such as Google Fonts are used.
10. Changes
If we update this policy, we will change the date on this page; we will also announce significant changes in the app.