Who we are
EasyPrompter (this website at www.easyprompter.app, the web app at studio.easyprompter.app and the EasyPrompter app for iPhone, iPad and Mac) is run by DynamicDigital sp. z o.o., Aleje Jerozolimskie 181b, 02-222 Warsaw, Poland ("Dynamic Digital", "we"). We are the data controller for the processing described here.
For anything about your data, email info@easyprompter.app or write to the address above. We have not appointed a data protection officer, because the GDPR doesn't require one for a service like ours.
Summary
- No account needed. The free teleprompter works without signing in. Your script stays in the open browser tab. It isn't sent to us and isn't stored anywhere.
- Pro accounts. If you have Pro, we store your email address, basic profile details and your scripts so they sync across your devices.
- Remote control (Pro). When you control the prompter on one of your devices from another, the script and its playback state pass between your devices through our EU server. Nothing is kept once it's delivered.
- AI script writer (Pro). The topic you type, or the script you ask it to adjust, is sent with the options you pick through our server to Google's Gemini API, which writes the text. We don't keep what you send.
- Payments. Stripe handles Pro payments on the web, and Apple handles Pro bought in the app. We never see or store your card details.
- Payments. Apple handles Pro bought in the app. We never see or store your card details.
- Camera and recording. If you turn on the camera in the prompter, the picture is only shown on your screen. Videos you record (Pro) stay on your device until you save or share them yourself. We never receive them.
- The app for iPhone, iPad and Mac. No analytics, no advertising and no tracking. Your settings are stored on your device.
- Feedback. If you send us feedback from the app, we keep your message, the email address you choose to give and the device details you choose to include, until we've dealt with it.
- Analytics only with your OK. We use Google Analytics to count visits only if you say yes. Until then, the Google Analytics code isn't even loaded.
- No ads, no selling. We don't sell your data, use it for advertising, or share it for others' marketing.
What data we process and why
Using the teleprompter without an account
Your script is processed only in your browser, in the open tab. It is gone when you leave or close the page, and we never receive it. Your settings (speed, font, colors and so on) are kept in your browser's local storage on your device so they're remembered next time.
Legal basis: this is needed to give you the service you asked for (Art. 6(1)(b) GDPR). Storing settings on your device is strictly necessary for that, so it doesn't need consent.
Pro account (Firebase Authentication and Cloud Firestore)
You need an account only for Pro. You can sign in with Apple, with Google, with your email address and a password, or with an email sign-in link. We process your email address and a unique user ID and, if you use Google, your name and profile picture. With Sign in with Apple, Apple gives us your name and your email address or, if you choose to hide your email, a private relay address from Apple that forwards to your inbox. If you choose a password, Firebase stores it only as a secure one-way hash: we can't see or recover it. Google's Firebase service sends emails on our behalf to confirm your address, reset your password or sign you in with a link, when you ask for them.
With Pro, your scripts (including their formatting and order) are stored in Google Cloud Firestore so they sync to every device you sign in on. A copy is also kept in your browser so your scripts open quickly. If your subscription ends, we keep your scripts so they come back if you renew, until you ask us to delete them.
When you share a script as a practice link, a copy of the script with its title, its look and the prompter screen you chose is stored in Cloud Firestore. Anyone who has the link can open it, and the speed, text size and edits of the person practicing are saved to the link. Turning the link off deletes it.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
Remote control between your devices (Firebase Realtime Database)
With Pro, every device where EasyPrompter is open and signed in to your account appears to your other devices, so one can control another. For this, each open device shares through Firebase Realtime Database:
- a device label made from your browser, such as "iPhone · Safari", and a random ID for the open tab;
- what it's doing: editor or prompter, playing or paused, its position in the script, speed, text size, mirror and loop;
- while the prompter is open, the title (first line) and word count of the script on screen.
When you start the prompter from another device, or edit the script while it plays, the text of that script is sent to the device showing it. Commands (play, pause, speed and so on) go the same way. The receiving device doesn't save a script it was sent.
This data is stored in the EU (Belgium) and only your account can read it. A device's entry is deleted as soon as you close EasyPrompter on it or it loses its connection, and each command or script is deleted the moment the other device has received it, usually within a second. To check access, the database also holds a yes/no flag saying whether your account has Pro. The flag is removed when Pro ends.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
AI script writer (Google Gemini)
When you use the AI script writer, we send the topic you type and your chosen length, tone, format, language and reading speed through our server in the EU (Belgium) to Google's Gemini API, which writes the script. When you use Adjust with AI, we send the script you're adjusting and what you ask to change the same way, and Gemini writes the new version. Before your first AI request on a device, the app tells you this and asks you to confirm. Google processes this under its terms for paid Gemini API services. It doesn't use your prompts or scripts to train its models, and keeps them only for a limited time to detect abuse.
To enforce the fair-use limit, we count how many scripts each account writes per hour and per day. These counters are stored in the EU and deleted automatically after 30 days. We don't store your topic or the script on our side, apart from the script you keep in your account.
Please don't put other people's personal data or confidential information in your descriptions.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR).
AI media tools and credits (Pro, web video editor)
When you use the AI tools in the video editor, we send what that request needs, through our server in the EU (Belgium), to our AI provider fal.ai (Features and Labels, Inc., United States). fal.ai runs most of the AI models that make the media itself, in the United States. For some models it passes the request to the model's maker, which can be outside the EU, including in China (for example for video clips). Depending on the tool, we send:
- the description you type and the options you choose
- an image you choose
- the audio of a recording you ask us to transcribe, which includes the voices of anyone speaking in it
To suggest B-roll, we send the transcript to Google's Gemini API. fal.ai, the model providers it uses and Google process this only to produce the result, under data processing terms, and don't use it to train their models.
We keep a record of each AI job, including its description, status and the credits it used, for 30 days, and then delete it. We also keep a ledger of your credits: what you bought, used and got back. Generated files are saved in your library.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR). For purchase and refund records: our legal obligations for tax and accounting (Art. 6(1)(c) GDPR), and our legitimate interest in handling claims (Art. 6(1)(f) GDPR).
Pro subscriptions (Stripe)
If you upgrade to Pro on the web, you pay through Stripe Checkout and manage your subscription in Stripe's billing portal. Stripe processes your payment details and billing address. We receive and store your Stripe customer ID, your plan, the subscription status and its renewal date. Invoices and VAT records are kept in Stripe.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR) and our legal obligations for tax and accounting (Art. 6(1)(c) GDPR).
Security and abuse prevention (Google reCAPTCHA)
When you use a Pro feature that calls our server (the AI script writer, starting a subscription or managing it), the web app first checks with Firebase App Check and Google reCAPTCHA Enterprise that the request comes from the real EasyPrompter app and not from a bot. reCAPTCHA processes information about your device and browser for this. It isn't loaded when you just use the teleprompter.
Legal basis: our legitimate interest in protecting the service, and the costs behind it, from abuse (Art. 6(1)(f) GDPR).
The app for iPhone, iPad and Mac
The EasyPrompter app for iPhone, iPad and Mac works like the web app, and what this policy says about the web app applies to it too, with these differences:
- Accounts. You sign in with Apple, with Google or with your email address, as described in Pro account.
- Buying Pro (Apple App Store). Apple sells Pro in the app and handles the payment under its own privacy policy. We never see your payment details. To switch Pro on for your account, we receive from Apple and store with your account the purchase's transaction identifiers, the product you bought and its renewal state (active, renewing, cancelled, expired or refunded, and when the current period ends).
- Buying Pro on the web. Pro can also be bought on the web. How those purchases are handled is described in this policy on our website.
- Checking requests come from the real app (Apple App Attest and DeviceCheck). Instead of reCAPTCHA, the app uses Apple's App Attest, or DeviceCheck on devices without it, through Firebase App Check, so our server can verify that requests come from the genuine EasyPrompter app. This doesn't use your name, email address or scripts.
- Scripts and practice links. Your Pro scripts, remote control and practice links work as on the web, with the same data stored in the same places. In the free teleprompter, your script stays on your device until you quit the app, and it isn't sent to us.
- AI script writer. As on the web, the topic you type, or the script you ask it to adjust, goes through our server to Google's Gemini API, which writes the text (see AI script writer).
- Settings. Your settings (speed, font, colors and so on) are stored on your device.
- No analytics, no advertising, no tracking. The app has no analytics, no advertising and no tracking, so it doesn't ask for the Google Analytics consent described below.
Apple isn't one of our service providers: when you buy Pro in the app, use Sign in with Apple or the app's device check, Apple processes that data under its own privacy policy.
Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR); for App Attest and DeviceCheck, our legitimate interest in protecting the service from abuse (Art. 6(1)(f) GDPR).
Visitor statistics (Google Analytics, only with consent)
If you say yes when we ask, we use Google Analytics to learn how many people visit, which pages and features they use, and roughly where they come from (country and city, from the network address). In the app we also count a few anonymous actions, such as starting the prompter, writing a script with AI or starting checkout. We never send the text of your scripts, your name or your email address to Google Analytics.
We've switched off Google's advertising features (Google signals and ad personalization), and Google Analytics doesn't log or store IP addresses. If you don't say yes, the Google Analytics code isn't loaded and nothing is measured.
Legal basis: your consent (Art. 6(1)(a) GDPR and the ePrivacy rules on cookies). You can withdraw it any time under Cookies and local storage, and that doesn't affect what was measured before.
Hosting and server logs
This website and the web app are hosted on Google Firebase Hosting, which processes technical data such as your IP address and the pages you request so it can deliver them. Our server functions run in the EU (Belgium) and write short technical logs, which can include your account ID, for troubleshooting. These logs are deleted after 30 days.
Legal basis: our legitimate interest in running a secure, working service (Art. 6(1)(f) GDPR).
Emails to us
If you write to us, we use your message and email address to answer you and keep the conversation for as long as needed to help you.
Legal basis: our legitimate interest in answering you (Art. 6(1)(f) GDPR), or the contract if your question is about your subscription (Art. 6(1)(b) GDPR).
Camera, microphone and the videos you record
The prompter can show your device's front camera behind the script, and Pro lets you record yourself while you read. This only happens when you choose it, and your browser or device asks for your permission first: for the camera when you turn it on, and for the microphone when you start recording. The picture and the sound are processed on your device only. A recording is kept in your device's memory (web) or in the app's temporary folder (iPhone, iPad and Mac) until you save it, share it or delete it. Saving puts it in your downloads, your Photos library or wherever you choose to share it. Nothing is sent to us or to anyone else, and closing the prompter turns the camera off.
Legal basis: none is needed for us, as we don't receive or process this data. You can withdraw the camera and microphone permissions at any time in your browser's or device's settings.
Feedback you send us
The web app and the app have a Send feedback form, for a problem, an idea or anything else. You can use it with or without an account. We receive what you type, the kind of feedback you picked and, if you give it, your email address so we can reply. If you're signed in, your account ID and its email address are attached. If you leave the details checkbox ticked, we also receive the app version, your browser or device and system, the app's language, your screen size and whether you have Pro, so we can reproduce problems. Your script is never included. Please don't paste your script or anyone's personal data into the message.
Messages are stored on our server in the EU (Belgium) and read only by us. To limit how many messages can be sent in a day, we count messages per account, or for guests per connection using a one-way hash that is deleted after 30 days.
Legal basis: our legitimate interest in improving EasyPrompter and answering you (Art. 6(1)(f) GDPR).
Who we share data with
We use these service providers. They process data only on our instructions, under data processing agreements:
| Provider | What for | Where, and how transfers are protected |
|---|---|---|
| Google Cloud EMEA Ltd / Google LLC: Firebase Authentication, Cloud Firestore, Firebase Realtime Database, Cloud Functions, Firebase Hosting, App Check | Accounts, account emails (confirmation, password reset, sign-in links), storing Pro scripts and subscription status, remote control between your devices, feedback messages, server functions, hosting | Server functions, usage counters, feedback messages and remote-control data in the EU (Belgium). Accounts, scripts and subscription status in the United States. Protected by the EU-U.S. Data Privacy Framework and the EU Standard Contractual Clauses in Google's data processing terms. |
| Google: Gemini API | Writing AI scripts, and suggesting B-roll from your transcript | Google's global infrastructure, which can include the United States. Data Privacy Framework and Standard Contractual Clauses. |
| Google: reCAPTCHA Enterprise | Abuse prevention for Pro features | Global, including the United States. Data Privacy Framework and Standard Contractual Clauses. |
| Google Ireland Ltd / Google LLC: Google Analytics (only with your consent) | Visitor statistics | Global, including the United States. Data Privacy Framework and Standard Contractual Clauses. |
| Features and Labels, Inc. (fal.ai), and the AI model providers it uses | AI media tools and transcription in the video editor | United States, and for some models their makers' services in other countries, including China. Standard Contractual Clauses. |
| Stripe Payments Europe, Ltd. (Ireland) | Payments, subscriptions, invoices and VAT | EU, with transfers to Stripe, Inc. in the United States under the Data Privacy Framework and Standard Contractual Clauses. |
We may also disclose data when the law requires it, for example to tax authorities. We don't sell personal data.
How long we keep data
- Free teleprompter: your script isn't kept at all. Settings stay in your browser until you clear them.
- Account and Pro scripts: until you delete your account or ask us to delete it. We then delete your account, scripts and subscription status within 30 days.
- Remote control: a device's entry is deleted when EasyPrompter closes on it or disconnects; commands and scripts sent between devices are deleted as soon as they're received. The Pro flag is removed when Pro ends.
- Practice links: until you turn them off or delete your account.
- App Store purchases: the purchase details we receive from Apple are kept with your account and deleted with it.
- AI usage counters: deleted automatically after 30 days.
- AI job records: 30 days.
- Generated media in your library: until you delete it or your account.
- Credit ledger: usage entries are deleted with your account. Purchase and refund entries are kept for 6 years after the end of the year of purchase, for tax rules and the period in which claims can be made.
- Feedback: until we've dealt with your message, and at most 12 months; the daily counters are deleted after 30 days.
- Billing records: invoices and payment records are kept for 5 years from the end of the year they relate to, as Polish tax and accounting law requires.
- Server logs: 30 days.
- Google Analytics: event data is kept for 2 months, then deleted by Google. The cookies themselves expire after 2 years unless you remove them earlier.
Your rights
Under the GDPR you can ask us for a copy of your data, and ask us to correct it, delete it, or hand it over in a portable format. You can also ask us to restrict processing or object to it, and withdraw consent at any time. Email info@easyprompter.app from the address you sign in with. We'll answer within one month.
To delete your account and scripts, use Delete account in your account in the web app or the app, or email us the same way. If you have an active subscription, cancel it first so you aren't charged again: in the billing portal (Manage subscription in the web app's account sheet) if you bought Pro on the web, or in your Apple Account's subscription settings if you bought it in the app.
You can also complain to a data protection authority, in particular in the EU country where you live or work. Our lead authority is the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.
Cookies and local storage
We keep what's strictly necessary on your device without asking. Google Analytics cookies are set only if you agree.
| Name | Where | Purpose | Kept for |
|---|---|---|---|
ep:consent (local storage) | Website and app | Remembers your cookie choice | Until you clear it |
cueprompt.* (local storage) | App | Your prompter settings, AI writer options and, with Pro, a copy of your scripts so they open quickly | Until you clear it or sign out |
firebaseLocalStorageDb (IndexedDB) | App | Keeps you signed in (Firebase Authentication) | Until you sign out |
cueprompt.dev (session storage) | App, with Pro | A random ID for the open tab, so your other devices can tell it apart for remote control | Until you close the tab |
firebase:host:* (local storage) | App, with Pro | Remembers which server to connect to for remote control (Firebase Realtime Database) | Until you clear it |
_GRECAPTCHA and reCAPTCHA storage | App, only when you use a Pro feature | Telling people from bots (security) | Up to 6 months |
_ga, _ga_Y5N3Y3B6CT (cookies) | Website and app, only with your consent | Google Analytics: tells visits apart | 2 years |
Our fonts are hosted on our own servers, so loading a page doesn't send anything to Google Fonts.
Stripe sets its own cookies on its own checkout and billing pages, which are covered by Stripe's privacy policy.
Children
Pro accounts are for people aged 16 and over. Younger users may use the free teleprompter, which doesn't need an account. They shouldn't create an account without a parent's or guardian's consent.
Changes to this policy
When we change this policy, we post the new version here and update the date at the top. If a change matters for how we use your data, we'll tell account holders by email before it takes effect.