Privacy Policy

Last updated: 11 August 2026

The short version: CutRoll processes your videos entirely on your iPhone. Your footage is never uploaded, never sent to us, and never shared with anyone. There is no account and no login. The only things that ever leave your phone are Apple-handled purchases and anonymous usage counts — which you can switch off in Settings.

What CutRoll accesses on your device

Photos you choose. CutRoll uses Apple's system photo picker, which hands the app only the specific items you select. The app does not request full photo library access and cannot browse your library on its own.
Working copies. When you add a clip to a project, CutRoll stores a copy inside its own app container so editing stays fast and your originals are never modified. Deleting a project deletes its copies.
Capture dates and metadata already in your clips. Recipes such as Trip Timeline group clips by the day they were shot, read from the metadata already attached to the file. CutRoll does not request live location access.
Audio in your clips. Recipes that cut to sound, such as Beat Cut and Outfit Switch, decode your audio on-device to find beats. The audio is analysed in memory and never sent anywhere.
Saved exports. When you export, CutRoll writes the finished video to a "CutRoll" album in your Photos library, with your permission.

What leaves your device

Your videos, photos and audio never do. The only outbound data is:

Purchases. Subscriptions and one-time purchases are handled entirely by Apple through StoreKit. CutRoll never sees your payment details. Your Pro status is derived from Apple's receipt on your device.
Anonymous usage statistics. CutRoll counts which features get used — events like "an export finished" or "a recipe was applied" — so we know what to improve. See the next section for exactly what that means.

That is the whole list. Everything else stays on your iPhone, and editing works fully offline.

Anonymous usage statistics

CutRoll uses TelemetryDeck, a privacy-focused analytics service based in Germany, to count feature usage. Signals are anonymized on your device before they are sent: TelemetryDeck receives a one-way hashed identifier it cannot reverse, and we never see it at all.

What a signal contains: an event name from a fixed list (for example "export completed"), technical facts like export quality or which screen opened the paywall, and general device information such as iOS version.
What a signal never contains: your videos, photos or audio, project names, anything you type, your name, email, precise location, or any advertising identifier.
Not used for tracking. Nothing is shared with ad networks or data brokers, and nothing links your activity across other apps or websites.
Your choice. Turn off "Share anonymous usage" in the app's Settings at any time and no further signals are sent, effective immediately.

What we do not collect

Your name, email address or phone number — there is no account.
Your videos, photos, audio, or any content derived from them.
Personally identifiable analytics. Usage counts are anonymous, can never be tied back to you, and can be switched off in Settings.
Advertising identifiers. CutRoll shows no ads and works with no ad networks.
Your precise or background location.

Data retention and deletion

Everything CutRoll stores lives on your iPhone. Deleting a project removes its media copies and thumbnails. Deleting the app removes everything at once. Because we hold no personal data on any server, there is nothing for us to delete on your behalf and no data-export request to make — but you're welcome to write and ask us anything.

Children

CutRoll is not directed at children under 13, and we do not knowingly collect any personal information from them.

Changes to this policy

If this policy changes in a way that affects how your data is handled, we will update the date at the top of this page and note the change in the app's release notes.

Contact

Questions about privacy? Email cutroll@justinpolidori.it.