Privacy Policy

01Who we are

Reelipal is operated by Mighty Stone Limited, a company registered in England and Wales (company number 17286155) with its registered office at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom. Mighty Stone Limited is the data controller for the personal data described in this policy, and is registered as a fee payer with the Information Commissioner’s Office, the UK data protection authority.

02What we collect

• Account data — website email and, for Google sign-in, name and avatar; mobile anonymous User ID, authentication and installation information.
• Content data — prompts, briefs, uploaded photos, videos and audio, and generated media, stored for your account’s projects and library. Camera and photo-library access is requested when you use those features; we receive the media you choose to upload.
• Billing data — plan, credit balance, purchase identifiers, subscription status and transaction history. Stripe processes website payments; Apple processes App Store payments, with RevenueCat helping verify purchases and entitlements. We do not receive your full payment-card details.
• Usage data — operational logs, errors, device/app information and mobile screen and feature interactions. PostHog events are linked to the anonymous User ID; this is pseudonymous usage data, not unlinked anonymous statistics. PostHog may derive approximate city, region or country from the connection’s IP address; we do not request GPS location for analytics.

03How we use it

We do not sell your personal data, and we do not use your prompts or generated content to train our own models.

• To generate content, we send the prompts and reference media needed for your request to the selected AI providers, including fal.ai, Eachlabs and providers used for voice or lip-sync features.
• To authenticate accounts, maintain projects and libraries, account for credits and verify purchases and subscription access using Stripe, Apple and RevenueCat as applicable.
• To understand screen and collection visits, generation and checkout steps, and improve reliability. Mobile PostHog analytics does not record sessions or receive raw prompts, uploaded media or media URLs from our event instrumentation.

04Where your data lives

Supabase stores account and application records; Cloudflare R2 and Supabase store media; Vercel hosts the service. Providers may process data outside your country. Media links can be accessed by people you share them with. A mobile library belongs to its anonymous account and is not automatically recovered by reinstalling the app or restoring a subscription.

05Third parties we share with

Each provider processes data under its own privacy policy and our agreements with them. We share the minimum needed for the feature to work.

• AI providers, including fal.ai, Eachlabs, ElevenLabs and Sync where the selected feature uses them — the prompt, media and instructions needed for generation.
• Stripe for website payments; Apple for App Store purchases; RevenueCat for mobile purchase verification and entitlement management, including account and transaction identifiers.
• Supabase, Cloudflare and Vercel — authentication, databases, media storage, delivery and hosting.
• PostHog — mobile product analytics associated with your anonymous User ID, screen/collection names, feature events and app/device properties.
• Google for optional website sign-in; Meta for website advertising measurement where configured, as described below.

06Connected social accounts

Reelipal can publish your finished videos to your own social accounts (YouTube, TikTok, Instagram) when you explicitly connect them. Connecting grants us only the permissions needed to upload the content you choose — we never read your messages or feed, and we never post anything you did not ask us to publish.

Reelipal's use and transfer to any other application of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

If you connect a YouTube channel, Reelipal uses YouTube API Services to upload the videos you choose to publish. By connecting a YouTube account you also agree to the YouTube Terms of Service (youtube.com/t/terms); how Google handles your data is described in the Google Privacy Policy (policies.google.com/privacy).

If you connect a TikTok account, we access it only through TikTok's official developer APIs (Login Kit and the Content Posting API) and use that access solely to publish the videos you choose to post.

Access tokens for connected accounts are stored securely and deleted when you disconnect the account or delete your Reelipal account. You can also revoke Reelipal's access at any time from the platform's own security settings — see reelipal.com/data-deletion for step-by-step instructions. For Google/YouTube connections, this is your Google security settings page: myaccount.google.com/permissions.

07Retention & deletion

Content remains in your library until deleted or your account is deleted, subject to service operation and legal obligations. Deleting a creation removes it from the library; backups and provider caches or logs follow their own deletion schedules.

In the mobile app, open Settings → Delete account and confirm the request. Access ends when the request is accepted; deletion continues in the background and its status is shown in the app. This includes account content and associated PostHog analytics. Support requests and completion times are explained at reelipal.com/data-deletion.

We retain only the pseudonymous purchase, subscription and deletion records needed for duplicate-credit prevention, disputes, deletion verification and legal obligations, for as long as those purposes require. Deleting the app or account does not cancel a store subscription; manage that separately with Apple or Google Play.

08Cookies

The website uses cookies and local storage for sign-in, language, preferences and measurement. Where configured, Meta Pixel and server-side Conversions API measure website registrations and purchases; data can include page/activity details, hashed email, IP address and advertising cookie identifiers. Browser measurement follows the cookie choices and regional settings presented on the website. These website tools are separate from the mobile PostHog analytics described above.

09Your rights

Depending on where you live (e.g. GDPR in the EU, KVKK in Türkiye, CCPA in California), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. Email support@reelipal.com to exercise any of these — we respond to all requests regardless of jurisdiction.

If you are in the UK you also have the right to complain to the Information Commissioner’s Office (ico.org.uk); in the EU you can complain to your local supervisory authority. We would appreciate the chance to resolve it first at support@reelipal.com.

10Changes & contact

If this policy changes materially we will announce it on the site or by email; the “last updated” date above always reflects the current version.

Privacy questions? support@reelipal.com.