NanoFlick Privacy Policy

Last updated: July 25, 2026

Overview

NanoFlick LLC ("NanoFlick," "we," "us," or "our") operates the NanoFlick mobile application and website (together, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have, including how to access, update, and delete your information.

If you have questions, please contact us at privacy@nanoflick.com.

Who We Are

NanoFlick LLC is the controller of your personal data (the company that decides how and why your data is processed). We are a Delaware limited liability company.

Information We Collect

We collect information to provide and improve the Service. Here is what we collect and why:

Information You Provide

  • Account information. To create a NanoFlick Account we collect your email address (which may be an Apple Private Relay address) and your date of birth or age range, which we use only to confirm you meet our minimum age requirements. Providing your name is optional.
  • Profile information. You may choose to create a publicly visible profile with your name and photo. You control what is visible and can edit or delete this at any time.
  • Content you create. Videos, templates, and other content you create within NanoFlick. Video files are stored locally on your device until you choose to share them.
  • Communications. When you contact us for support, we keep a record of that communication.
  • Payment information. If you purchase a subscription, payment is processed by Apple (for in-app purchases) or Stripe (for business subscriptions). We do not store your full payment card details.
  • Connected accounts. If you link NanoFlick to other services (such as YouTube) for sharing, we collect the information needed to facilitate that connection.

Information Collected Automatically

  • Device information. Hardware model, operating system version, unique device identifiers, and a pseudonymous account identifier that links your activity across our services.
  • Usage information. How you use the Service, including which templates you browse, videos you watch, features you use, and your search queries.
  • Search information. When you use search, we send your search query to our search provider (Algolia) along with a pseudonymous user identifier.
  • Log information. IP address, browser type and language, date and time of requests, referring URLs, and device event information.
  • Location information. We do not collect your location. We do not use GPS, and IP-based geolocation in our analytics is disabled.
  • Analytics data. We use Firebase Analytics and PostHog to collect product-usage information (such as which features and screens you use, how long actions take, aggregate counts, the pages you visit, and the search terms you enter) associated with a pseudonymous user identifier. We do not send your videos or the text of your comments to our analytics providers. On our website we also record browsing sessions to see where people get stuck; anything you type into a form is hidden before the recording leaves your browser. We use Firebase Crashlytics to collect crash and diagnostic data.

Why We Process Your Information (Legal Basis)

We process your personal information only when we have a valid legal reason to do so:

  • To provide the Service you signed up for. When you accept our Terms and use NanoFlick, we process the information needed to deliver the Service to you. Under data-protection law this is processing necessary for the performance of a contract.
  • Legitimate interests. We process some information for purposes that are in our legitimate business interest, including improving the Service, ensuring security, preventing fraud, and fixing bugs.
  • Your consent. We ask for your consent before processing information for purposes such as marketing communications, non-essential analytics (for EEA users), and sharing data with third parties.
  • Legal obligations. We may process information when necessary to comply with applicable law.

For users in the EEA and UK, non-essential analytics (including Firebase Analytics and PostHog) are disabled by default and are enabled only with your consent.

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Create and manage your account
  • Process payments and manage subscriptions
  • Show you relevant story templates and content
  • Enable video creation, editing, and sharing
  • Provide customer support
  • Send service-related communications (such as account confirmations and security alerts)
  • Send marketing communications (only with your consent; you can unsubscribe at any time)
  • Analyze usage to improve the Service and develop new features
  • Detect, prevent, and address security issues and abuse
  • Comply with legal obligations

AI and machine learning. We do not use your private content (your videos or your private templates) to train artificial intelligence or machine-learning models. We may, however, use templates you share to the Story Template Library (templates you make public or unlisted), together with usage data, to develop, train, and generate new templates and features for the Service, as described in our Terms of Service.

Who We Share Your Information With

We do not sell your personal information. We share personal information only in the following circumstances:

  • Service providers. We share information with trusted third parties who process it on our behalf:
    • Firebase / Google Cloud: data storage, analytics, crash reporting, push notifications
    • PostHog (product analytics). We use PostHog to understand how people use our app and website so we can improve them. PostHog receives product-usage events consisting of identifiers, counts, durations, and categorical or true/false flags (including a pseudonymous user identifier), along with the pages you visit and the search terms you enter. On our website, PostHog also records your session: a replay of the pages you viewed, with everything you type into a form hidden before it leaves your browser. Session recording is not used in our iOS app. PostHog does not receive your name, email address, the text of your comments, your video content, or your location. If you use NanoFlick through a business account, PostHog also receives your organization's name, identifier, and subscription plan, so we can understand how teams use the product. PostHog processes this data on servers in the United States. We have disabled IP-based geolocation and discard client IP addresses.
    • Algolia (search). We use Algolia to power search within the app. When you search, Algolia receives your search query together with a pseudonymous user identifier, and Algolia maintains an index of public profile information in order to return search results. Algolia processes this data in the United States.
    • Stripe: payment processing
    • YouTube / Google: video hosting (when you choose to share videos)
    • Apple: App Store distribution, subscription management
  • With your consent. We share information with third parties when you explicitly direct us to, for example, when you share a video to YouTube.
  • For legal reasons. We may share information if we have a good faith belief that access, use, preservation, or disclosure is reasonably necessary to comply with applicable law, enforce our Terms, or protect against fraud or security issues.
  • Business transfers. If NanoFlick is involved in a merger, acquisition, or sale of assets, we will give affected users notice before personal information is transferred.

Advertising and Tracking

We do not track you for advertising. We do not use the device advertising identifier (IDFA) or advertising SDKs, we do not use cross-context behavioral or targeted advertising, and we do not sell or share your personal information for advertising. Our analytics and search providers are service providers that process data only on our behalf, which is not a "sale" or "sharing" of your data. If we introduce advertising in the future, it will be contextual and will not track you across apps or websites; we will update this policy before introducing any advertising that works differently.

Your Analytics Choices

You can turn off analytics collection in the app under Settings › Privacy. Opting out does not stop the reporting of your activity to your organization if you use NanoFlick under a business or team plan (see Business and Team Accounts below).

Business and Team Accounts

If you use NanoFlick under a business or team plan, your organization's administrators can see your activity within that organization (such as usage counts) through their dashboard, and this reporting is not affected by the personal analytics opt-out. For that activity your organization acts as a data controller, and your organization's own privacy policy also applies.

YouTube API Services

NanoFlick's sharing feature uses YouTube API Services. By using this feature, you agree to the YouTube Terms of Service and the Google Privacy Policy.

You may revoke NanoFlick's access to your Google and YouTube data at any time by visiting myaccount.google.com/connections.

International Data Transfers

NanoFlick is based in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland: our service providers, including Firebase / Google Cloud, PostHog (United States), Algolia, and Stripe, maintain Standard Contractual Clauses (SCCs) approved by the European Commission to provide adequate safeguards for the transfer of personal data outside the EEA.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law.

  • Account data: retained until you delete your account
  • Records of consent: when you accept our Terms of Service, Privacy Policy, or Business Subscription Terms, we record that acceptance together with the date, the version of each document you accepted, and the IP address and browser or device information of the session in which you accepted. We retain these records for the life of your account plus six years, including after account deletion, because they are evidence of an agreement and we may need them to establish or defend a legal claim.
  • Video metadata: retained until you delete the video or your account
  • Templates you create: private templates are deleted when you delete them or your account. Templates you have shared to the Story Template Library may be retained and remain available after you delete your account, in a form no longer linked to your identity, consistent with the license in our Terms of Service.
  • Analytics data (Firebase Analytics): retained for up to 14 months
  • Product analytics (PostHog): retained for up to 7 years
  • Crash reports (Crashlytics): retained for up to 90 days
  • Search data (Algolia): public profile data indexed for search is retained while your account exists and is removed on deletion; search-query logs are retained per Algolia's standard retention
  • Payment records: retained as required by tax and accounting laws (typically 7 years)
  • Support communications: retained for up to 3 years after resolution
  • Backup copies: after you delete information, residual copies in backups are purged within 90 days

How To Delete Your Data

To delete your data from NanoFlick servers, open the app and select Settings > Personal Privacy > Delete Account. If you have any difficulty, please contact us at support@nanoflick.com.

When you delete your account:

  • Your profile, account data, and video metadata are deleted from our servers. Private templates are deleted; templates you shared to the Story Template Library may be retained in de-identified form (see our Terms of Service and the Data Retention section above).
  • Residual copies in backups are purged within 90 days
  • We may retain certain data required by law (such as payment records for tax purposes)
  • Videos you previously shared on YouTube or other platforms are not affected. You will need to delete those directly on those platforms

Cookies and Tracking Technologies

Our website uses cookies and similar technologies:

  • Essential cookies. Required for the website to function. These cannot be disabled.
  • Analytics cookies. Help us understand how visitors use our website. For visitors in the EEA, these cookies are only set after you consent.

You can manage cookies in your browser settings. You can also adjust analytics preferences in the NanoFlick app under Settings.

Your Rights

Depending on where you live, you may have some or all of the following rights regarding your personal information:

All Users

  • Access: request a copy of the personal information we hold about you
  • Correction: request that we correct inaccurate personal information
  • Deletion: request that we delete your personal information
  • Portability: request your data in a portable, machine-readable format

European Economic Area, United Kingdom, and Switzerland

Under the GDPR and related laws, you also have the right to:

  • Restrict processing: ask us to limit how we use your data in certain circumstances
  • Object to processing: object to our use of your data based on legitimate interests
  • Withdraw consent: where we rely on your consent, you may withdraw it at any time
  • Lodge a complaint: you have the right to lodge a complaint with a supervisory authority in your country of residence

To exercise any of these rights, contact us at privacy@nanoflick.com.

California Residents

Under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), California residents have additional rights:

  • Right to know: request what personal information we have collected, from what sources, for what purposes, and to whom it has been disclosed
  • Right to delete: request deletion of your personal information
  • Right to correct: request correction of inaccurate personal information
  • Right to non-discrimination: we will not penalize you for exercising your privacy rights

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.

We honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of the sale or sharing of personal information.

Children's Privacy

NanoFlick is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or provide any personal information through the Service.

For users in the European Economic Area: NanoFlick requires users to be at least 16 years old, in accordance with the General Data Protection Regulation.

If we learn that we have collected personal information from a child under the applicable minimum age without proper consent, we will take steps to delete that information as promptly as possible. If you believe we may have collected information from a child under the applicable age, please contact us at privacy@nanoflick.com.

Information Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security reviews.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. If we become aware of a security breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post any changes on this page with an updated effective date. If changes are significant, we will provide a more prominent notice, such as an in-app notification or an email to the address associated with your account.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: