Privacy Policy
The short version
- Your videos stay on your iPhone. Recordings, projects and exports are stored on the device and in your Photos library, not on our servers.
- AI features send only what they need, and only when you use them: the audio of your video for transcription — to a speech-recognition service built for Albanian, to OpenAI for other languages (with Auto-detect, three 10-second samples from across the video also go to OpenAI to recognise the language) — the caption text and your style notes to OpenAI for the spelling pass and the post text, and one still frame to OpenAI when you ask for an AI thumbnail. OpenAI may keep this for up to 30 days to check for abuse and does not use it to train its models. The app asks your permission before it first sends anything.
- Picture search (Premium) sends only your search words, through our server, to Pexels for free stock photos.
- Your account is Sign in with Apple. You need it for credits and the AI features; Premium works without it. We keep an Apple user identifier, your email only if you let Apple share it, your credits and your purchase records. We do not store your name.
- No ads, no tracking, no analytics SDKs, no selling of data.
- Delete your account in the app at any time: Account → Delete account.
Permbledhje ne shqip
- Videot e tua mbeten ne iPhone. Regjistrimet, projektet dhe eksportet ruhen ne pajisje dhe ne Photos, jo ne serveret tane.
- Vecorite me AI dergojne vetem ate qe u duhet, dhe vetem kur i perdor: audion e videos per transkriptim — te nje sherbim njohjeje te zerit per shqipen, te OpenAI per gjuhet e tjera (me Auto-detect, tri copa 10-sekondeshe nga e gjithe videoja shkojne edhe te OpenAI qe te njihet gjuha) — tekstin e titrave dhe shenimet e stilit tend te OpenAI per drejtshkrimin dhe tekstin e postimit, dhe nje kuader te vetem te OpenAI kur kerkon kopertine me AI. OpenAI mund t'i ruaje deri ne 30 dite per te kontrolluar abuzimet dhe nuk i perdor per te trajnuar modelet e veta. Aplikacioni te kerkon leje para se te dergoje dicka per here te pare.
- Kerkimi i fotove (Premium) dergon vetem fjalet qe kerkon, permes serverit tone, te Pexels per foto stock falas.
- Llogaria eshte Sign in with Apple. Duhet per kreditet dhe vecorite me AI; Premium punon edhe pa llogari. Ruajme nje identifikues nga Apple, emailin vetem nese lejon Apple ta ndaje, kreditet dhe blerjet e tua. Emrin nuk e ruajme.
- Pa reklama, pa gjurmim, pa shitje te te dhenave.
- Fshije llogarine ne aplikacion kurdo: Account → Delete account.
Kjo eshte nje permbledhje. Teksti i plote ne anglisht me poshte eshte ai qe vlen.
1. Who is responsible
The controller for the personal data described here is:
MIK Group GmbH
Leutschenbachstrasse 95
8050 Zürich, Switzerland
Commercial register of the Canton of Zurich: CH-440.4.024.833-4 · UID CHE-188.366.328
Email: [email protected]
This policy covers the Xheki iPhone app as distributed on the App Store and the server it talks to. "We" means MIK Group GmbH.
2. What stays on your iPhone
These are stored only on your device, and we never receive them:
- your recordings, imported clips, projects and edits;
- finished videos (saved to your Photos library when you export, or shared by you with the share sheet);
- your teleprompter script, word list, spelling settings, caption styles, and the description of your writing style you paste in "Make captions sound like you" (it is stored on the device and sent to OpenAI only together with caption text, see section 4);
- the plain thumbnail and the choice of the best frame. The app uses Apple's on-device Vision framework to judge how clear a face is in a few frames. This is not face recognition: nobody is identified and nothing leaves the device;
- pause detection and the offline spelling rules;
- if you choose "On this iPhone" for the spelling pass, Apple's on-device language model processes the caption text on the device.
Your sign-in session is kept in the iOS Keychain. Uninstalling the app removes local projects; back up anything you want to keep by exporting it to Photos.
3. Account, credits and purchases
You can record, edit and export without an account, and you can buy and use Premium without one: the app checks your subscription with Apple on your iPhone (StoreKit), and we receive nothing about it until you sign in. You need an account, via Sign in with Apple, for credits (the free ones, Premium's weekly credits and credit packs), the AI features and the picture search.
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Apple user identifier (a stable ID Apple issues for this app) and our own account ID | To create your account, sign you in and attach credits and Premium to it. It also makes sure the 2 free credits are given once per Apple account. | Art. 6(1)(b) — contract |
| Email address — only if you let Apple share it; it may be an Apple private relay address | Account recovery and support; so we can find your account if you write to us. We do not send marketing email. | Art. 6(1)(b) |
| Name | Not stored. If Apple passes your name at the first sign-in, our server discards it. | — |
| Credits and Premium status: balance, a record of each credit added or spent (feature, amount, time), Premium end date | To run the credit system, show your balance, refund credits when a job fails, and answer questions about your balance. | Art. 6(1)(b) |
| Purchase records: Apple transaction IDs, product, purchase and expiry dates, renewals and refunds reported by Apple | To deliver what you bought, prevent the same purchase being counted twice, and handle refunds Apple reports to us. If you bought Premium without an account, the app sends that purchase to us when you sign in, so its weekly credits reach your account. | Art. 6(1)(b); Art. 6(1)(c) for tax and accounting records |
| Security and abuse data: request counters and timestamps per account; technical request data such as IP address, handled by our hosting provider when your app connects | To keep the service available and fair: rate limits, spotting abuse, protecting the shared AI budget. | Art. 6(1)(f) — legitimate interest in a secure, working service |
Payments are handled entirely by Apple. We never see your card or bank details. Apple processes purchase data as its own controller under Apple's privacy policy.
4. AI features and who processes your content
These features send content off your iPhone. Each runs only when you start it, and the app asks for your explicit permission before it first sends anything to these providers — on a consent page during setup and again before the first AI use. You can withdraw it in Settings at any time; everything else in the app keeps working without them.
Your content passes through our server, which forwards it to the provider with our own API key and returns the result to your iPhone. Our server does not store your audio, text or images. The providers act as our processors: they may use the content only to provide the service to us, not to train their models.
Captions — speech recognition or OpenAI
When you tap Captions, the app takes the audio track of your edit, converts it to a sound file and sends it for transcription. The video picture is not sent. Which service receives the audio depends on the language:
- Albanian goes to a speech-recognition service built for Albanian, based in Kosovo. Its terms set no fixed period for keeping the audio and transcript; write to us and we ask it to delete a job.
- Other languages go to OpenAI's speech-to-text model.
- If you choose Auto-detect, three 10-second samples of the audio, taken from across the video, go to OpenAI first, only to recognise the language. The audio is then transcribed by the Albanian speech-recognition service or OpenAI as above.
Either service returns the transcript with timings, which the app turns into captions on your iPhone.
Spelling pass and post text — OpenAI
To rewrite captions in your spelling and tone, and to write the post text and headline for your video, the app sends text to OpenAI: the caption text or transcript, your spelling settings, and the style description, writing samples and notes you keep in the app. No audio or video is sent for this. These features are free but rate limited.
Make captions sound like you. This feature gives you a prompt to copy into your own ChatGPT. What you do in ChatGPT happens in your ChatGPT account, under OpenAI's terms and privacy policy for ChatGPT; we receive nothing from it. Only the description you paste back into Xheki is stored on your iPhone and sent along with caption text as described above. Do not paste anything you would not want sent with your captions.
AI thumbnail (Premium) — OpenAI
When you ask for an AI thumbnail, the app sends one still frame from your video to OpenAI's image model, which returns an edited version. The headline is drawn on your iPhone, not by the model. The frame may show you or other people in the video — only use it with frames you have the right to share.
Under OpenAI's API terms, content sent through the API is not used to train OpenAI's models and may be kept for up to 30 days to detect abuse, then deleted, unless the law requires longer.
Legal basis: Art. 6(1)(b) GDPR — you ask for the feature and we need the provider to deliver it. We do not use your voice or face to identify you.
5. Picture search (Pexels)
Premium includes a search for free stock photos from Pexels. The app has no web browser. The words you type go to our server, which forwards them to Pexels with our API key and returns the results. We do not store your search words, and we send Pexels no account or device details with them. Your iPhone then loads the thumbnails and the picture you pick directly from Pexels' image servers, which see your IP address as any website does. The links "Photos provided by Pexels" and the photographer's name open the Pexels website in Safari, where Pexels' own privacy policy applies. Pexels is run by Canva Germany GmbH, Pappelallee 78/79, 10437 Berlin, Germany. Pictures you add stay in your project on the device.
Legal basis: Art. 6(1)(b) GDPR — you ask for the search.
6. Camera, microphone and Photos
- Camera and microphone: to record your videos. Recordings stay on your iPhone; only the audio is sent, and only when you ask for captions (see section 4).
- Photos (read): to import the videos, screen recordings and pictures you pick. If you give full access, the app also looks at the dates of recent videos to find the ones your smart glasses saved to Photos and lines them up with your clips. This happens on your iPhone; nothing about your library is sent anywhere.
- Photos (add): to save your finished video and thumbnail.
You can change these permissions at any time in iOS Settings → Xheki.
7. Service providers
| Provider | What for | Data | Location |
|---|---|---|---|
| Cloudflare, Inc. | Hosting our server and database | Account, credits, purchase and security data; content passing through (not stored) | USA / global network |
| Speech-recognition service for Albanian | Transcription | Audio of your edit, for Albanian | Kosovo |
| OpenAI — OpenAI Ireland Ltd (processing by OpenAI, L.L.C.) | Transcription of other languages, spelling pass, post text, AI thumbnail | Audio of your edit for languages other than Albanian, and three 10-second samples for Auto-detect; caption text, transcript, your style description and writing samples; one video frame for thumbnails | USA |
| Pexels — Canva Germany GmbH | Stock-photo search (Premium) | Your search words (through our server); your IP address when your iPhone loads the pictures | Germany |
| Apple Inc. / Apple Distribution International Ltd. | Sign in with Apple, App Store payments, subscription notices | As described in Apple's privacy policy | Ireland / USA |
We share data with authorities only when the law requires it. We do not sell or rent personal data.
8. Transfers outside the EU
Some providers process data outside the European Economic Area. Where there is no EU adequacy decision for the country, the transfer is based on the EU Standard Contractual Clauses or, for US companies certified under it, the EU–US Data Privacy Framework. The Albanian speech-recognition service is in Kosovo: sending it the audio is necessary to give you the transcription you ask for (Art. 49(1)(b) GDPR, Art. 17 FADP). You can ask us for a copy of the safeguards.
9. How long we keep data
| Data | Kept |
|---|---|
| Account data, credits, Premium status, credit history | Until you delete your account. |
| Purchase records (Apple transaction IDs, product, dates, amounts) | As long as tax and commercial law requires, up to 10 years, separated from the deleted account. |
| Free-credit marker (a one-way hash of the Apple user identifier) | Kept after account deletion, so the 2 free credits cannot be claimed again by deleting and re-creating an account. It cannot be turned back into your identifier and holds nothing else. |
| Rate-limit counters | Minutes to one day. |
| Server request logs of the hosting provider | Up to 7 days. |
| Database backups | Overwritten within 30 days. |
| Audio, text and frames sent for AI features | Not stored by us. Providers: see section 4. |
| Picture search words | Not stored by us. |
10. Deleting your account
In the app, tap the credits badge at the top of the camera screen to open Account, then Delete account. This immediately deletes your account, email, credits, Premium status and credit history from our server, and ends the link between your Apple ID and Xheki. Backups roll off within 30 days. What we must keep by law (purchase records) and the free-credit marker are kept as described in section 9.
Deleting the account does not cancel an Apple subscription. Cancel Premium in iOS Settings → your name → Subscriptions, or it will keep renewing. Unused credits are lost when the account is deleted.
You can also ask us by email to delete your account (section 16).
11. No tracking, no ads
Xheki shows no ads, contains no advertising or analytics SDKs, does not track you across apps or websites, and does not share data with data brokers. It does not use Apple's advertising identifier.
12. Children
Xheki is not directed at children. You must be at least 16 to create an account, or have your parent's or guardian's consent where the law of your country allows a younger age. If you believe a child has given us personal data without that consent, contact us and we will delete it.
13. Your rights
Under the GDPR, and for Switzerland the Federal Act on Data Protection (FADP), you have the right to:
- get a copy of your personal data (Art. 15) and receive it in a portable format (Art. 20);
- have wrong data corrected (Art. 16) and data deleted (Art. 17);
- restrict processing (Art. 18);
- object to processing based on legitimate interest (Art. 21);
- withdraw a permission at any time, for the future (Art. 7(3)) — for AI features, switch the AI permission off in Settings or stop using them;
- complain to a data protection supervisory authority, in particular in the EU country where you live or work. Ours is the Swiss Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch.
Write to the email in section 1. We answer within one month. To protect your account, we may ask you to confirm the request from inside the app or from the email address linked to it.
We make no decisions about you based solely on automated processing that have legal or similarly significant effects. Automatic rate limits only pause requests for a few minutes.
14. Security
All traffic uses HTTPS. The AI providers' API keys live only on our server, never in the app. Your session is stored in the iOS Keychain. Purchases are verified against Apple's signatures before credits or Premium are granted. Access to the database is limited to the people who run the service.
15. Changes
If we change this policy, we will update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect.
16. Contact
MIK Group GmbH · Leutschenbachstrasse 95, 8050 Zürich, Switzerland
Privacy and support: [email protected]
Terms of Use: /terms