Privacy Policy
Last updated: 10 September 2026
This policy describes what Ghost Editor collects, why, and who else sees it. It is written in plain language and describes what actually happens in the app.
The data controller is 28 bit S.R.L. (Single Member Company), C.O.E. SM31527, Strada di Paderna 2, 47895 Domagnano (RSM), Republic of San Marino. For any question about this policy or about your data, write to hello@ghosteditorapp.com.
San Marino is not a member of the European Union. We apply the GDPR because we offer the app to people in the EU, and Sammarinese data protection law applies to us as well. Whichever of the two covers you, the rights set out below are the ones you have.
What stays on your device
Your recordings, your edits and your finished videos are stored on your device. We do not upload your video. The transcript of your audio passes through our servers on its way to your device and is deleted from them within about an hour.
What leaves your device
| What | Why | Who receives it |
|---|---|---|
| Audio from your recording | To transcribe it, so the app knows where the words and the pauses are | Supabase, which passes it to ElevenLabs for the transcription |
| Email address and name | To create and sign you into your account | Supabase |
| Name and email address from your Apple or Google account | Only if you choose to sign in with Apple or with Google | Apple, Google |
| Purchase and subscription status | To know whether your subscription is active | RevenueCat, Apple |
| Email address and name | To send you account emails, and emails about the app and its updates | Plunk |
| Crash reports and performance traces | To find and fix what breaks | Sentry |
| A handful of product events, and screen recordings of the interface | To understand which parts of the app work and which confuse people | Mixpanel |
Both Sentry and Mixpanel derive an approximate location (country and city) from the IP address your requests arrive from. Neither receives your precise location, and neither is given access to your camera, microphone or photo library.
An account and an email address are needed to use the app, and the audio is needed to transcribe it. Without them the app cannot do its job. Diagnostics and analytics happen in the background, and you can object to them as described below.
What we deliberately do not collect
- Your video and your transcripts never reach the analytics tools. The screen recording masks the video preview, the transcript and the titles you give your videos. We put real work into this, because the app points a camera at your face and the recording would otherwise carry it.
- No screenshots are attached to crash reports. For the same reason.
- No advertising identifiers, and no tracking. We do not share your data with data brokers, we do not build advertising profiles, and nothing you do here is combined with data about you from other companies or apps.
Why we are allowed to process it
- To provide the app you signed up for. Your account, the transcription, sign-in with Apple or Google, your subscription and the emails your account needs (confirming your address, resetting your password) are necessary to perform our agreement with you.
- Our legitimate interest in keeping the app working. Crash reports and performance traces, and the technical logs our servers keep, are how we find what breaks and keep the service secure.
- Our legitimate interest in improving the app. Product events and screen recordings of the interface tell us which parts work and which confuse people. We limit them to what that needs: your videos and transcripts are masked, and nothing is used for advertising.
- Our legitimate interest in telling you about the app. Once you have an account, we may email you about Ghost Editor, its features and its updates. Every one of these emails has a link to stop them.
- Legal obligations. We keep what the law requires us to keep, and we disclose data to public authorities only when the law requires it. We may also use data to establish or defend legal claims.
Emails
Account emails, such as the confirmation of your address or a password reset, are part of having an account. Emails about the app and its updates are not: you can stop them at any time with the unsubscribe link in each one, or by writing to us, and stopping them has no effect on your account.
Where your data is held
Our Supabase project is in Germany, and our Sentry organisation and our Mixpanel project are in the European Union, so your account, diagnostic and analytics data is stored in the EU.
ElevenLabs, RevenueCat, Plunk, Apple and Google may process data outside the European Union, including in the United States. When they do, the transfer is covered by the European Commission's standard contractual clauses or, where the provider is certified, by the EU-US Data Privacy Framework. You can ask us for details about these safeguards.
How long we keep it
Audio uploaded for transcription is deleted from our storage once the transcript has been returned; it is working material, not an archive. The transcript stays on our servers for at most about an hour, so that the same audio sent again shortly after does not need to be transcribed twice, and is then deleted. ElevenLabs processes the audio only to produce the transcript. Account data lives as long as your account does. Your email address stays on our mailing list until you unsubscribe or delete your account. Crash reports, technical logs and analytics data are kept only as long as they are useful for fixing problems and understanding how the app is used, within the retention limits we set on each service, and are then deleted.
Deleting your account
You can delete your account from inside the app. Doing so deletes your account and your data on our servers, and also deletes your profile on Mixpanel, including your name and email address, in the same operation. One thing remains, on purpose: an irreversible fingerprint of the identities you signed in with and of the free minutes you had used, so that deleting an account and signing up again does not reset them. It contains no name, email address or anything that can be turned back into them. To be removed from our mailing list as well, use the unsubscribe link in any of our emails or write to us, and we will remove you.
Your rights
Under the GDPR you may ask for access to your data, correction of it, deletion, restriction of processing and portability. Write to hello@ghosteditorapp.com and we will answer within a month. When we correct or delete your data, we pass the change on to the providers that received it.
You may object to any processing based on our legitimate interest, including crash reports and analytics, by writing to us. You may object to emails about the app at any time, without giving a reason, and we will stop.
You also have the right to complain to a supervisory authority: the data protection authority of your own country if you are in the EU, or the Garante per la protezione dei dati personali of San Marino.
This website
This site uses no cookies. It counts visits with Pirsch, a cookieless analytics service based in Germany that does not store your IP address or build a profile of you. We use it to know how many people visit and which pages they read.
Children
Ghost Editor is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us data, write to us and we will remove it.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will update the date at the top and say so in the app before the change takes effect.