This Privacy Policy applies to the OpenCut mobile app (Google Play package at.kl8.opencut) and the website kl8.at (together, the "Service"). The App and website are operated by KL8 Tech Group (ABN 77 923 391 849), located in New South Wales, Australia.

Developer: KL8 Tech Group

ABN: 77 923 391 849

Location: New South Wales, Australia

Privacy contact: ktb@kl8tech.group

What is OpenCut?

OpenCut is a video editor and image editor. It includes multi-track timeline editing, effects, export options, timer recording, and image editing tools. Your projects, media files, autosave data, and templates are stored entirely on your device — not uploaded to our servers.

1. No Server Account Database

OpenCut does not store user accounts on our servers. If you choose to sign in with Google (optional), we receive your name, email address, Google account ID, and profile photo URL from Google's authentication service (using the standard "openid", "email", and "profile" permissions). This information is stored only in a signed 7-day session token:

Web: The session token is stored in an httpOnly cookie named opencut_session.
Android app: The session token is stored in local storage on your device.

After 7 days, the session expires and you'll need to sign in again. We never see your Google password, and we do not request access to Gmail, Google Drive, contacts, calendar, or any other Google data.

2. Data Stored on Your Device

All your projects, media files, autosave data, and templates are stored locally on your device:

Web: Stored in your browser's IndexedDB.
Android app: Stored in phone storage via the Capacitor Filesystem API.

Your videos and images are never uploaded to our servers unless you explicitly use an optional feature that requires it (see "Planned Optional Features" below).

3. Device Permissions

OpenCut requests the following permissions only when you use features that require them:

Camera: Used only when you record video or take photos within the app.
Microphone: Used only when you record audio or video with sound.
Screen capture: Used only when you record your screen (web version).

These permissions are never used in the background. Recording happens only when you explicitly start it, and all captured media is stored on your device.

4. On-Device AI and Effects

The following features run entirely on your device and do not send your media to any server:

Background removal: Processes your video or image locally.
AI sharpen: Enhances your media locally.
Text-to-speech: Generates audio from text locally.

AI models are downloaded from Hugging Face when you first use these features. Fonts used in text overlays are loaded from Google Fonts. Once downloaded, they are cached on your device for offline use.

5. Analytics

OpenCut may use PostHog for anonymous usage analytics (such as which features are used, app performance, and error tracking). Analytics collection is currently turned off by default. If we enable it in the future, you will see a notice in the app explaining what data is collected and how to opt out. We do not track you across other apps or websites, and we do not use analytics to identify you personally.

6. Planned Optional Features

We are working on optional features that would involve sending data to our servers only when you choose to use them:

Automatic captions: If you enable captions, the audio track of your video would be sent to Cloudflare's transcription API to generate subtitles. The audio would not be stored on our servers after transcription is complete.
Share links: If you create a shareable link to a project, the video or images would be uploaded to our servers so others can view them via the link. You would control who has access to the link and could delete the shared content at any time.

These features are not yet available. When they are released, they will be clearly marked as optional, and you will choose whether to use them.

7. What We Don't Collect

No ads: OpenCut does not show advertising or use advertising SDKs.
No payments: There are no in-app purchases, subscriptions, or payment processing.
No location data: We do not collect your location.
No crash reporting: We do not use crash reporting or diagnostics services.

8. Third-Party Services

OpenCut uses the following third-party services:

Google Authentication: For optional sign-in (sign-in with Google). Your Google password is never shared with us, and we only receive your name, email, Google ID, and profile photo.
Google Fonts: Fonts for text overlays are loaded from Google Fonts and cached on your device.
Hugging Face: AI models (background removal, sharpen, text-to-speech) are downloaded from Hugging Face and run on your device.
PostHog (future, optional): May be used for anonymous usage analytics if enabled, with an in-app notice.
Cloudflare (future, optional): May be used for transcription if you enable automatic captions.

9. Data Retention and Deletion

Because we do not store user accounts or personal data on our servers, there is no server-side data to delete. All your projects and media are stored on your device and remain under your control.

If you signed in with Google and want to remove OpenCut's access to your Google profile:

Sign out of OpenCut (this deletes your session token).
Clear app data or browser storage to remove all locally stored projects and media (this is optional; your data is private and not accessible to us).
Revoke OpenCut's access in your Google Account settings.

If you have any concerns or would like assistance, you can also email ktb@kl8tech.group and we will help you. For detailed account deletion instructions, see kl8tech.group/delete-account/opencut.

10. Your Rights

Under the Australian Privacy Act 1988 (Cth), you have rights regarding your personal information. Because OpenCut does not store personal data on our servers (beyond the temporary session token), most of your data is already under your direct control on your device. If you have questions or believe we have handled your information inappropriately, you may contact us at ktb@kl8tech.group or lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

11. Security

Your session token (if you sign in with Google) is cryptographically signed and stored securely. All communication between your device and our servers (when applicable, such as for future optional features) is encrypted using HTTPS. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

12. Children's Privacy

OpenCut is intended for users aged 13 and over. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us at ktb@kl8tech.group and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. If we introduce new features that involve data collection (such as the optional features described above), we will notify you through the app or website. Your continued use of OpenCut after changes take effect means you accept the updated policy.

14. Contact

KL8 Tech Group (ABN 77 923 391 849)
New South Wales, Australia
Email: ktb@kl8tech.group
Website: kl8.at
Package: at.kl8.opencut