Privacy Policy

Account & profile information

• Invite code you used to register (Vidrip is invite-only; the consumed code is recorded against your account).
• Authentication details: email address, and either a one-time login code or a password. If you enable two-factor authentication, we store the verified authenticator factor.
• Profile: your unique @handle, display name, and optionally an avatar, bio, and location. A phone number field may be associated with your account if provided.

Content you create

• Reaction videos recorded with your front camera and microphone, plus optional intro greetings, "afterthought" clips, video comments, channel posts, and review clips.
• Editing data ("studio" recipes): text/sticker overlays, filters, trims, and similar non-destructive edits.
• AR lens data: see Section 2.
• Emoji reactions and other interactions you add to content.

Social & activity information

• Your friend connections, friend requests, blocks, channel memberships and roles, and the threads and channels you participate in.
• Activity signals (videos you react to, share, or engage with, and your friend graph) used to rank feeds and recommendations.
• Subscription & billing status for paid creator channels (handled via our payment processor — see below).

Device & technical information

• Push notification tokens (Apple Push Notification service on iOS; Firebase Cloud Messaging on Android), stored per device and deleted when you sign out.
• Standard device and app data needed to operate, secure, and troubleshoot the Service.
• Content you create is also cached locally on your device for instant and offline playback.

Payment information

Paid channel subscriptions are processed by Stripe. Checkout currently occurs on the web (vidrip.app). We do not collect or store full payment card numbers; Stripe processes your payment details directly under its own privacy policy. We store subscription status and identifiers (e.g., Stripe subscription/customer IDs) needed to manage your access. Creators who receive payouts are onboarded through Stripe Connect.

Recording a reaction requires access to your device's camera and microphone. We request these permissions, and you can decline or revoke them in your device settings (the recording features will not work without them).

Depending on where you live, facial geometry may be treated as sensitive or "biometric" information under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas CUBI Act, and the EU/UK GDPR. We process this data only to provide the AR and anonymity features you choose to use, only with your action of enabling those features, and we do not sell it or share it for advertising. By enabling a lens or anonymous mode, you consent to this on-device processing and the storage of the associated lens track. If you do not want any face processing, do not enable lenses or anonymous mode.

Vidrip lets you watch and react to videos from third-party platforms, and lets creators connect their own accounts to populate their channels. We access these platforms through their official APIs and embed players. We request only read-only, own-content scopes, and we never ask for or store your passwords for these services.

YouTube

Vidrip uses YouTube API Services. We play YouTube videos through YouTube's official embedded player (streamed from YouTube, never downloaded or re-hosted), and we retrieve video metadata (such as video ID, title, thumbnail, and duration) via the YouTube Data API. Creators may connect their own YouTube channel (scope youtube.readonly) so their videos can appear in their channel.

• By using these features you are also bound by the YouTube Terms of Service.
• Google's handling of your data is described in the Google Privacy Policy.
• You can revoke Vidrip's access to your Google/YouTube data at any time via the Google security settings page.

We do not use YouTube API data for advertising, do not sell it, and store only the metadata needed to operate the features described above.

TikTok

Vidrip uses the TikTok API. We play TikTok videos through TikTok's official embed player (streamed, never downloaded or re-hosted) and retrieve public metadata via TikTok's oEmbed endpoint. A creator may connect their own TikTok account (scopes user.info.basic, user.info.profile, video.list) so their videos can appear in their channel. We store the creator's basic profile details and video list returned by the API for that purpose. You can disconnect TikTok in the App or revoke access in your TikTok account settings under app/permission management. TikTok's own data practices are governed by TikTok's privacy policy.

Instagram & Facebook (Meta)

Vidrip uses Meta's Instagram Graph API and Facebook Graph API. Instagram Reels can be viewed in the App through Instagram's live public web embed (streamed). In addition, a creator may connect their own Instagram Business/Creator account (scope instagram_business_basic) or Facebook Page (scopes pages_show_list, pages_read_engagement) so that their own Reels and thumbnails can appear in their channel.

• Because Meta's media URLs are signed and expire, a connected creator's own Reels and thumbnails are re-hosted to our storage to keep them playable. We do not scrape, download, or re-host Instagram or Facebook content belonging to anyone who has not connected their own account.
• We store the access and refresh tokens and granted scopes needed to keep a connected account in sync, server-side.
• You can disconnect Meta accounts in the App, revoke Vidrip's access in your Instagram or Facebook settings (under "Apps and websites" / business integrations), and request deletion of associated data — see Section 10.

Connected feeds

If you connect your own accounts for a personal feed, we periodically retrieve your own videos from those accounts to build your feed. This is read-only and limited to your own content.

• To provide core functionality: account creation, recording and sharing reactions, threads, channels, comments, and feeds.
• To render AR lenses and anonymous mode (on-device face processing as described above).
• To connect you with friends and deliver content to the audiences you choose.
• To rank feeds and generate recommendations from your own activity and friend graph.
• To process paid subscriptions and creator payouts.
• To moderate content before publication and keep the community safe (see Section 7).
• To send push notifications you've enabled, secure accounts, prevent abuse, and comply with law.

We do not sell your personal information, and we do not use your content or face data to serve third-party targeted advertising.

• With other users, according to the audience you choose. Friend-share reactions are visible only to members of that thread; channel content is visible to that channel's members; video comments are visible to viewers of the source video; public profile fields are visible to others. Your recent reactions appear on your profile only if you opt in.
• With service providers that operate the Service on our behalf (see below).
• With the third-party platforms whose APIs you use, as required to provide those integrations.
• For legal reasons: to comply with law, enforce our terms, or protect the rights, safety, and security of users, the public, or Vidrip.
• In a business transfer: as part of a merger, acquisition, or sale of assets, subject to this Policy.

These providers process information only as needed to perform their services and under their own privacy and security obligations.

Before a video (reaction, comment, channel clip, or review) is published, the App samples still frames from it and sends them to an automated moderation service to screen for prohibited content. If content is flagged, publication is blocked and the unpublished draft may remain only on your device. Each moderation check is logged for audit and safety purposes. You can also block other users and report content; channel owners and admins have additional moderation tools (mute, kick, ban, hide posts).

We retain your account and content for as long as your account is active and as needed to provide the Service. We retain certain records longer where required for legal, security, billing, dispute-resolution, or audit purposes (for example, moderation logs and invite-code origin). When you delete content or your account, we delete or de-identify the associated personal information without undue delay, except where retention is required by law or to protect our or others' rights. Locally cached videos are removed from your device when you delete them or uninstall the App.

Depending on your location, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Edit your profile and privacy settings (including whether reactions show on your profile) in the App.
• Delete individual reactions, comments, and posts you created.
• Block other users and disconnect linked accounts.
• Request a copy of your data or deletion of your account (see below).

We will not discriminate against you for exercising these rights.

You can request deletion of your Vidrip account and associated personal data, including data obtained through connected Instagram, Facebook, YouTube, or TikTok accounts, at any time:

• In the App: use the account-deletion option in Settings, where available.
• By email: contact [email protected] from your account email with the subject "Delete My Account" and include your @handle.

Upon a verified request, we delete your profile and content and instruct our service providers to delete associated data, except where retention is required by law (e.g., limited billing and security records, which may be retained or de-identified). We will confirm completion of your request.

Meta data-deletion request endpoint: [Set your Data Deletion Request URL / callback in the Meta App Dashboard and reference it here, e.g. https://vidrip.app/data-deletion]

• Google / YouTube: myaccount.google.com/permissions
• TikTok: TikTok app → Settings and privacy → Security & permissions → manage connected apps
• Instagram / Facebook: Account settings → Apps and websites / business integrations

Disconnecting in the App revokes our access and stops future syncing; you can also request deletion of previously synced data as described above.

The Service is not directed to children. You must be at least [13] years old to use Vidrip, and at least the age of digital consent in your country where a higher age applies. We do not knowingly collect personal information from anyone under the applicable minimum age. If we learn that we have collected such information, we will delete it. Given that the App can process facial geometry, consider whether a higher minimum age (e.g., 18) is appropriate for your jurisdictions.

We use administrative, technical, and physical safeguards designed to protect your information, including transport encryption, access controls, row-level database security, short-lived signed URLs for private video files, and server-side storage of OAuth tokens and secrets. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Vidrip is operated from the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States and other countries where we or our service providers operate, which may have different data-protection laws than your own.

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, correct, delete, and obtain a portable copy of your personal information, and to limit the use of sensitive personal information. We do not sell your personal information and do not share it for cross-context behavioral advertising. To exercise these rights, contact [email protected]. We will verify your request and may ask for information to confirm your identity. You may use an authorized agent where permitted by law.

If you are in the EEA or UK, our legal bases for processing are: performance of our contract with you (to provide the Service); your consent (e.g., for camera/microphone access and face-data processing when you enable lenses or anonymous mode, which you can withdraw at any time); our legitimate interests (e.g., security, abuse prevention, and improving the Service); and compliance with legal obligations. Facial geometry may constitute special-category data, processed only on your explicit consent via enabling the relevant features. You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your supervisory authority.

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where required, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance.

Vidrip LLC
[Mailing address — required by some app stores and laws]
Email: [email protected]