App Privacy Policy

1. Summary

• There is no user account with vidioo for the app. It contains no advertising and no analytics or tracking tools.
• Projects, editing, transcription and export run on your Mac. I have no access to this data.
• The app only sends data when you use or set up a feature that needs it: text and small still images to the language model you chose; the finished short to the platform where you publish it; search terms to sources for B-roll, music, sound effects and logos; voice-over texts to ElevenLabs if you set it up; downloads of speech models. Details below.
• I do not run any server that receives your videos, projects, chat content or the access to your accounts. The app only talks to my web space at vidioo.app to load the prices for vidioo Pro and to check your license key (section 8).

2. Controller

Michael Schuier
c/o IP-Management #11109
Ludwig-Erhard-Straße 18
20459 Hamburg
Germany

Email: business (at) michael-schuier (dot) de

3. What is stored on your Mac

The app stores this data on your Mac. It only leaves your Mac in the cases described in sections 4 to 8.

• Projects, transcripts, planner, downloaded material and speech models: ~/Library/Application Support/vidioo Studio
• Preview files and intermediate data (can be deleted at any time): ~/Library/Caches/app.vidioo.studio
• Exports: by default in the “Movies” folder under vidioo Studio, or wherever you save them.
• Settings: the app’s macOS preferences (app.vidioo.studio).
• Credentials in the macOS keychain: access to connected YouTube, TikTok, Facebook and Instagram accounts (service app.vidioo.studio.publish, this Mac only, not synced via iCloud), plus API keys you enter yourself and the vidioo Pro license key (service app.vidioo.studio, account pro-license-live).
• vidioo Pro: the last signed confirmation of your license in the app’s preferences (app.vidioo.studio.pro.token.live) and the most recently loaded offer in ~/Library/Application Support/vidioo Studio/pro/abo-angebot.json.
• History of the AI CLIs: the CLIs the app starts store history in their own folders under their own rules. Claude Code stores the conversations from the app under ~/.claude/projects/ in folders whose name contains Library-Application-Support-vidioo-Studio-agent (one file <id>.jsonl each); Codex stores generated images under ~/.codex/generated_images.

Videos you import stay where they are and are not modified. I do not process what happens only on your Mac; how to delete it is described under Data deletion.

4. AI features

Chat, voice commands, recipes and text suggestions (for example post texts or topic markers) use a language model. You choose which one. Without an AI access set up, these features do not run.

Ways to the model

• The provider’s CLI (Claude Code, Codex, OpenCode, Kimi Code, Qwen Code, GitHub Copilot CLI): you install it and sign in yourself. The app starts it on your Mac. Sign-in happens in the CLI; vidioo does not read the CLI’s credentials.
• Your own API key for a provider: stored in the keychain and sent only to that provider.
• An external MCP client (for example Claude Desktop): connects to the app through a local interface on your Mac. What the client sends to its model is governed by its provider.

If you have connected several models, one model can give another a sub-task (for example “script” to one, “images” to the other). That task and the information it needs then also go to the second model.

What goes to the model

• your messages; spoken commands are recognized on your Mac first (Apple speech recognition), the audio itself is not sent to the model,
• project information the model needs for your request, such as the timeline structure, clips and excerpts of the transcript,
• small still images from the timeline (at most 512 pixels on the long edge) that the model uses to check the result of its change,
• images you attach to a message yourself,
• only if you let the AI work in the planner: the planner entries (title, description, hashtags, times, platforms, status and the path of the export on your Mac) and the names of connected accounts. For YouTube this is the channel name or channel handle (customUrl) as YouTube reports it when you connect.

The app does not send the video file or the audio track to the model. Processing by the provider is governed by its terms and privacy policy; whether it stores inputs or uses them for training depends on your agreement with it. I receive none of this content and do not train any models with it.

5. Publishing to YouTube, TikTok, Facebook and Instagram

In the planner you can publish or schedule finished videos on your accounts. To do so you connect an account under Settings › Publishing (“Einstellungen › Veröffentlichen”). Sign-in takes place on the platform’s own page; the app never sees your password. Google and TikTok open in your browser and redirect to an address on your Mac that is reachable only locally (127.0.0.1). Facebook opens in a window of the app that keeps no cookies after sign-in.

The platform gives the app an access token for this. It is stored in the macOS keychain, on this Mac only. Uploading only starts once you release a post in the planner, and it goes directly from your Mac to the platform. Chat and MCP can prepare a post but cannot trigger it. The video does not pass through any vidioo server.

Tokens are exchanged directly between your Mac and the platform; no vidioo server is involved. Under Settings › Publishing you can also enter your own developer app for a platform; its client ID and secret are then also stored in the keychain.

5.1 YouTube (Google)

vidioo uses the YouTube API Services. By using this feature you are bound by the YouTube Terms of Service, and processing by Google is governed by the Google Privacy Policy.

Requested scopes:

• https://www.googleapis.com/auth/youtube.upload: upload videos to your channel, with title, description, tags, visibility, the “made for kids” setting and, if chosen, a publish time.
• https://www.googleapis.com/auth/youtube.readonly: identify your channel when connecting (channel ID and channel name or handle) and, after uploading, check the processing status and visibility of the uploaded videos.

From your Google account the app only stores and uses: access and refresh tokens (keychain), channel ID and channel name or handle, and video ID, link and status of your uploaded videos (planner, on your Mac). vidioo does not sell data from Google APIs and does not use it for advertising or for training AI models. It is shared in one case only: if you let the AI work in the planner, the channel name or handle and the status of your posts go to the language model you chose (section 4).

vidioo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.2 TikTok

Requested scopes:

• video.publish: publish videos to your account, with caption, the visibility you chose and the commercial content disclosure.
• user.info.basic: basic information about your account. The app requests this scope at sign-in; it reads the account name through the publishing interface (creator_info).

Before each post the app asks TikTok which visibility options and video lengths are currently allowed for your account and shows your account name. Stored on your Mac: access token (valid for 24 hours) and refresh token (up to 365 days) in the keychain, account identifier and name, and video ID, link and status of your posts in the planner.

5.3 Facebook and Instagram (Meta)

You connect Facebook Pages and Instagram accounts together through Facebook Login. Instagram must be a Business or Creator account linked to a Facebook Page. Requested permissions:

• pages_show_list and pages_read_engagement: find your Pages and read which rights you have there,
• pages_manage_posts: publish or schedule Reels on your Facebook Page,
• instagram_basic: identify the Instagram account linked to the Page (ID and username),
• instagram_content_publish: publish Reels to that Instagram account.

When connecting, the app also reads which of these permissions you granted, so it can name missing ones right away. Stored on your Mac: a user token (valid for about 60 days) and the Page tokens, which do not expire, in the keychain, IDs and names of the Pages and Instagram accounts, and video ID, link and status of your posts in the planner.

5.4 Revoking access

• In the app: Settings › Publishing › “Disconnect” (“Trennen”) next to the account. The app asks the platform to revoke the access and deletes it from the keychain.
• Google: remove vidioo’s access at myaccount.google.com/permissions.
• TikTok: in the TikTok app, remove vidioo under Settings and privacy, in the permissions for connected apps.
• Facebook and Instagram: in your Facebook settings, remove vidioo under “Business integrations” or “Apps and websites”; on Instagram under “Apps and websites”.

After disconnecting, the planner on your Mac still holds the account name and the video IDs, links and status of posts already sent through that account. Remove the account name in the planner under “Accounts” (“Konten”), single posts in the post with “Remove” (“Entfernen”), or everything together with the local data (Data deletion). Videos you have already published stay on the platform until you delete them there.

6. Material from the internet

The app only queries these services when you, or the AI on your request, search there or generate something. Only what the feature needs is sent (search term, description or voice-over text), never your video or audio. The providers also see your IP address; their privacy policies apply.

• B-roll from Pexels: with your own Pexels API key; search term (at most 100 characters), then the download of the chosen clip.
• Music and sound effects: Openverse, with ccMixter and Wikimedia Commons as fallbacks, no key needed; search term, then the download of the chosen file from the respective source.
• Logos: if “Search logos online” (“Logos aus dem Netz suchen”) is enabled under Settings › Connections (“Verbindungen”), Simple Icons via jsDelivr, Apple’s App Store search and the website of the company searched for; only the company’s name or web address is sent.
• AI images and clips: if you enter your own key for xAI (Grok) or Higgsfield, the description of the requested image or clip is sent to that provider; the app downloads the result. The provider bills you directly.
• Voice-over (ElevenLabs): if you enter your own ElevenLabs key (Settings › Connections, “Einstellungen › Verbindungen”) and have the app voice a text (“sprich ein: …”), the text (at most 2,500 characters per recording), the chosen voice and the model are sent to ElevenLabs (api.elevenlabs.io); the app downloads the finished audio track and stores it in its folder. If you name a voice, the app fetches the list of voices in your account for this, and does so once when checking the key. The key is stored in the keychain. ElevenLabs bills you directly.
• AI images through your ChatGPT subscription: if Codex is set up, the app has images generated through Codex. The description goes through Codex to OpenAI; Codex stores the image under ~/.codex/generated_images, and the app copies it into its own folder.

7. Speech recognition and speech models

Transcription and voice commands use speech recognition on your Mac. If Apple’s speech package for your language is missing, macOS downloads it from Apple. Additional speech models are downloaded from Hugging Face only when you start the download; Hugging Face then sees your IP address and which files are downloaded.

8. Prices and license check (vidioo.app)

The app talks to my web space at vidioo.app, which IONOS SE runs on my behalf (see the website privacy policy, Hosting), for two things:

• Prices: the app loads the vidioo Pro offer (prices, periods, features) at launch and then every six hours while it is running, from vidioo.app/abo-angebot.php. This also happens if you use vidioo for free. Only the request itself is sent; as with every request, the server sees your IP address and logs the access. To buy, the app opens vidioo.app in your browser; the website privacy policy applies to the purchase.
• License check: if you have vidioo Pro, the app sends your license key to vidioo.app/abo-lizenz.php when you enter it, at launch and then every six hours while the app is running. It does not send any information about your projects or your use; technically the server sees your IP address.

What the server does with it. It compares a hash of the key with the license list. Per subscription, the list only contains Stripe identifiers, status, price, unlocked features and the end of the paid period, no name and no email address (details and retention in the website privacy policy). To prevent keys from being guessed, the server counts requests per connection. Instead of your IP address it only stores a salted hash with the date and a timestamp; entries older than ten minutes are deleted on the next request.

What comes back. A signed confirmation with status, price, unlocked features, validity and part of the hash of your key. On your Mac, the key is stored in the keychain, the confirmation in the app’s preferences and the offer in a file (section 3). Under Settings › vidioo Pro, “Von diesem Mac entfernen” (remove from this Mac) deletes the key and the confirmation; the subscription keeps running. With the confirmation it keeps working without internet for at most 14 days and never longer than three days after the end of the paid period; after that it briefly needs an internet connection for a new check.

Legal basis. Art. 6(1)(b) GDPR (performance of the subscription and license); for protection against key guessing Art. 6(1)(f) GDPR, my legitimate interest being operation free of abuse. Without the license check the paid features cannot be unlocked.

9. Cookies, advertising, sharing

The app itself sets no cookies, shows no advertising and does not sell data. The Facebook sign-in window keeps Meta’s cookies only for the duration of the sign-in. The Google and TikTok sign-in pages open in your browser and follow its rules and their own. Links in the app to vidioo.app open the website in your browser; the website privacy policy applies there.

10. Legal bases and recipients

I only process personal data from the app for prices and the license check (section 8, legal bases there) and if you write to me (see below). For everything else I do not run any server.

If you send me an email, I process it under Art. 6(1)(b) GDPR where it concerns your use of the app, otherwise under Art. 6(1)(f) GDPR (interest in answering enquiries). The recipient is the provider of my email mailbox, which stores the messages on my behalf.

When you connect the app to platforms, AI providers or material sources, data goes directly from your Mac to these providers at your request; they are responsible for their own processing.

11. Retention and deletion

From the app I only store what the license check needs (section 8): your subscription’s entry in the license list, which I delete twelve months after the end of the paid period, and the rate-limit hashes, which expire after ten minutes. Data on your Mac stays until you delete it; platform access stays until you disconnect the account or the platform lets it expire. If you write to me, I delete your message once it has been dealt with and no retention obligation applies. Step by step: Data deletion.

12. Your rights

You have the right of access, rectification, erasure, restriction of processing and data portability (Art. 15 to 20 GDPR). Write to business (at) michael-schuier (dot) de.

Right to object (Art. 21 GDPR): Where I process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. I will then no longer process this data unless there are compelling legitimate grounds that override your interests.

You can also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).

13. Changes

If what the app sends changes, I will update this policy before the new version of the app is released.