BeTheClip Privacy Policy

1. Your media and projects

Import, preview, editing, downloads and export use storage on your device. We do not upload your imported video, audio, thumbnails, editing project or exported file to a BeTheClip media cloud. The app accesses files you select through Android's file or media picker and saves outputs when you ask. Removing an account does not remove these local files. Android or your device backup/transfer settings may create additional copies outside the app.

When you choose system sharing or a target app, Android gives that app access to the selected output. You complete publication in the target app. That service's terms and privacy policy then apply; opening it does not prove that your video was published.

2. Links, websites and module updates

When you ask to parse or download a link, the app connects to the source website and its media hosts from your device. Those services receive the requested URL, your network IP address, user agent and requests needed to deliver the media. Some public pages are opened in an in-app WebView and can load third-party resources, cookies and site storage under the website's policies. Do not paste confidential links or credentials.

The app contacts BeTheClip's Cloudflare-hosted module service for a manifest and Python extractor archive, or the configured upstream source, to maintain download compatibility. These requests disclose connection IP, request metadata and the requested module/version, not your local video library. Source links are not sent to the module-manifest service. Native app libraries are updated with the app. A website or module update can change download availability.

3. Account and security data

If you create an account, we process your email address, chosen display name, internal user ID, verification status, account timestamps and a password hash for email sign-in. For an enabled external sign-in method, we process the provider's identifier and returned profile details, and authentication credentials needed to link or verify that identity. We do not receive your Google password.

Sessions and account-security requests include session credentials, expiry, IP address and user-agent/device descriptions. We use them to authenticate you, display and revoke sessions, prevent abuse and send requested verification or password-reset emails. Essential account cookies and app sign-in storage support these functions; they are not advertising identifiers.

4. Trial, purchases and platform settings

We store trial start/end and claim status and entitlement records. Target-platform settings and handoff history are stored locally under an account scope; an online admission check sends an artifact identifier, project revision and selected platform identifiers to enforce sharing limits, without uploading the video. The optional seven-day product trial starts only when a verified account actively claims it. It requires no payment and does not automatically charge when it ends.

If you purchase through Google Play, Google handles the payment method. We receive purchase tokens, product/order identifiers, purchase and expiry/status information and account-owner verification data for entitlement checks, restoration, refunds and fraud prevention. BeTheClip does not receive your full card or bank-account number. Google also processes the transaction under its own policies.

Where an enabled account-web checkout offers WeChat Pay or Alipay, the provider receives the order reference, title, amount and payment-expiry information. We retain the account-linked order amount/currency, status, provider transaction reference and checkout link to reconcile the payment. The provider processes the payment method under its own policies. Android digital subscriptions use Google Play, not this web checkout.

5. Feedback and contact

In-app feedback sends the title and message you choose to provide, with a random request identifier, to our Cloudflare feedback service and then through Resend to the support mailbox. The feedback form does not automatically attach your account, media or device log. Avoid including passwords, receipts or private media in a message. A message you send by email also includes your address and the mail metadata.

The feedback service briefly processes your connection IP and stores a keyed hash for rate limiting, plus request/deduplication metadata; it does not store the message body in its deduplication store. The delivered message is retained in the support mailbox and email service for support and security purposes.

6. Who processes data and where

Cloudflare provides request routing/security, account database hosting and module/feedback delivery. Resend delivers account and support emails. Authorized support and operations staff access data only as needed for their work. Google handles enabled sign-in and Play payments; enabled account-web checkout uses WeChat Pay or Alipay. Source websites and apps you choose receive the requests or files described above. We may disclose necessary data to meet a valid legal obligation or protect security and rights.

These providers can process information outside your country. Resend states that stored email content and logs are in the United States; a sending-domain region does not guarantee local storage. Cloudflare operates distributed infrastructure. Contact us for information about the safeguards and service arrangements relevant to your request. We do not sell personal data or use the app's account, media or feedback data for advertising. The app includes no advertising or behavioral analytics SDK in the reviewed release scope.

7. Retention and account deletion

Account and associated service data are kept while the account is in use. Use the account-deletion page to authenticate, confirm and request removal of the account and its associated profile, credentials and sessions. Account-scoped platform settings and history on your device are separate from server account records. Session credentials normally expire after seven days and may refresh while active; email-verification tokens are valid for one hour and password-reset tokens for thirty minutes. Validity does not mean a record is erased at that exact second. Expired authentication records and rate/abuse records older than twenty-four hours are cleared by scheduled, bounded cleanup.

Feedback deduplication records expire after twenty-four hours; daily IP-hash quotas expire at the next UTC midnight. Support correspondence is kept for handling your request and resolving any connected dispute or security issue. Limited purchase, order and security records may remain where needed for refunds, ownership/fraud checks or legal obligations, with access restricted to those purposes. We remove or minimize retained data when that purpose and any applicable legal period end. Ask us which exception applies to your request.

Providers may retain separate delivery logs, security records and recovery backups under their service arrangements. Deletion from the active account database does not instantly erase every backup or a message already delivered to your own mailbox. We seek removal of associated data from our processors where applicable. Your local files and copies shared with other apps remain under your control. Deleting an account does not cancel a Google Play subscription; manage cancellation in Google Play.

8. Security and permissions

Our account, feedback and module service requests use HTTPS. Third-party source links currently may use HTTP, so those source requests may be unencrypted; prefer HTTPS links. We use account access controls, protected credentials and ownership checks, and limit the data included in routine logs. No security method is infallible. Android network access supports downloads and service requests. On older Android versions, a limited storage permission supports saving exports; newer versions use selected-file access and the media store. This release does not request camera, microphone, location, contacts or all-files access.

9. Your choices and rights

You can use free local features without creating an account, decline feedback, avoid external links and manage account sessions. Use the deletion page, or contact [email protected] from your account address if you cannot sign in. We may request proportionate proof of ownership before acting; do not send a password or full payment credentials.

Depending on your location and applicable law, you may request access, correction, deletion, portability, restriction or objection, withdraw consent for processing based on consent, or complain to the competent data-protection authority. Withdrawing consent does not affect earlier lawful processing. We process account and membership data to provide the service you request, security/support data for operating and protecting it where permitted, and records required by law for compliance. Mandatory local rights remain available.

10. Children and changes

BeTheClip is a general-purpose video tool and is not directed to children. If you believe a child has provided personal information contrary to applicable requirements, contact us so we can investigate and handle removal. We do not verify age by collecting identity documents through the app.

We update this policy when data practices or requirements change, show the revision date and provide additional notice or consent where required. Privacy policy, terms and deletion instructions are available through the app and these public pages.