Privacy Policy

Daily Studio is an iPhone camera app for creators shooting vertical social video, operated by UZELABS YAZILIM ÇÖZÜMLERİ TİCARET VE SANAYİ LİMİTED ŞİRKETİ ("we", "us").

You can use Daily Studio without an account. Recording, the teleprompter, the safe-zone guides and script links ask you for no name, email address or phone number, and nothing you write or shoot leaves your phone.

An account enables these optional features. You decide which ones to use:

• Publishing: connecting an Instagram, Facebook, YouTube or TikTok account so Daily Studio can post a video for you.
• Your content plan: keeping your scripts on your account instead of on one phone only, so the plan is readable on the web and an AI assistant you have connected can add to it. This is off by default and stays off until you turn it on.
• Creating an edit from media: uploading selected photos and videos with an optional story note to a private project, so an edit can be prepared. Uploading starts only when you choose the create action; publishing requires your separate approval.

If you use none of these features, the account-based processing in sections 3A, 5, 6 and 7 does not apply to you. Last updated: 6 October 2026.

We collect only what the service needs to work:

• Subscription data: purchase history, entitlement status, and an anonymous app user ID assigned by RevenueCat. Payment is taken by Apple — we never see your card details.
• Usage data: which features are used, screen events and session events (Mixpanel).
• Device information: device model, OS version, app version and anonymous device identifiers.
• Connection data: requests to the server that serves script links carry an IP address, used transiently for rate limiting and not stored.

The first name you may enter during onboarding is stored on your device only and is never sent to us.

Only if you use direct publishing, we additionally process:

• Account data: your email address, or your Sign in with Apple identifier, to create the Daily Studio account the publishing feature hangs on.
• Connected account details: for each platform you connect, the user id that platform issues, your username and your profile picture. Username and picture are processed because platforms such as TikTok require us to show you which account a post is going to before you publish it.
• Access tokens: the OAuth access and refresh tokens the platforms issue us. They are stored encrypted on our server and used only to publish on your behalf, on your instruction. A token is not your password: we never see and never ask for your social media passwords.
• The takes you choose to publish: when you send a recording for publishing, that video file is uploaded to our server so it can be delivered to the platform. It is deleted seven days after the post goes out — see section 9.
• Publishing records: the caption you wrote, the audience you picked, the time you scheduled, and the post id the platform returned.

Only if you turn on the content plan, we additionally store:

• Your scripts: the text of each script, its title, the day you planned it for, and how far it has got. Unlike script links (section 4), these are stored in a form our server can read — that is what lets the plan be shown on a web page, edited there, and written to by your assistant. We do not read them for any other purpose, and they are never used for advertising or to train AI models.

Camera and microphone access is used solely to record video. Recording, stitching and saving all happen on the iPhone, and the result is written straight to your own Photos library.

Your entire gallery is not uploaded. Photos and videos leave your device only when you select specific files for publishing or editing and choose the upload action. Connecting a social account does not transfer your gallery automatically. Takes sent for publishing are deleted seven days after the post goes out. Retention of edit-project source media is explained in section 9.

Photos access powers the in-app gallery preview and saving. We do not use your media for advertising or model training. The social platforms you choose and the providers used for optional editing are described below.

This processing happens only when you choose to create an edit. A private project on your Daily Studio account stores selected photos and videos, their order, title, optional story note, target duration and processing status. Your email or Sign in with Apple identity connects the project to your account. Our server can read these files to prepare the edit; script-link end-to-end encryption does not apply to these uploads.

Authorized editing servers download source media, transcribe speech, select a limited set of preview frames and render the finished video. When planning uses OpenAI, your note, selected photo previews and video frames, and speech transcript are sent to the OpenAI API. Complete source video files and social access tokens are not sent to OpenAI. You review the video and suggested caption before publishing; creating an edit does not publish it automatically.

We send OpenAI requests with store: false. This does not eliminate all provider records: API data is not used for model training by default; abuse-monitoring records may normally remain for up to 30 days, with legal or safety exceptions. Image inputs undergo safety screening. Read OpenAI’s API data controls for details.

Your AI assistant (Claude, ChatGPT, Gemini, or any other assistant that speaks MCP) sends the script it wrote as a one-tap link. In that flow:

• The script is encrypted with AES-GCM before it reaches our server.
• The decryption key travels in the link's fragment (after the # sign). Browsers never send that part to a server, so the key never reaches us and we cannot read your scripts.
• The stored ciphertext is deleted after 30 days.
• The script-link service has no account, no sign-in and no user database, and request bodies are never logged. It is separate from the content plan in section 5, which does have an account and which you have to turn on.

While you are writing the script with your AI assistant, that provider's own privacy policy applies. Daily Studio is not affiliated with them.

This section applies only if you turned the content plan on. It is off by default, and signing in is not enough on its own — it is a separate switch, in the app under Account > Your plan or on the website.

What it is: your scripts, with their titles, the day each is meant to go out and how far each has got, kept on your Daily Studio account instead of on one phone only. It exists so a plan survives a lost phone, so you can read and edit it at dailystudio.app, and so an AI assistant you have connected can add to it.

It is not encrypted the way script links are, and the difference is real. A script link's key never reaches us, so we cannot read it. A plan has to be drawn on a web page, edited there and written to by an assistant, so its text is stored in a form our server can read. We do not read it for any other purpose. It is never used for advertising, never used to train AI models, and never shared with anyone else.

Turning it off deletes it. Switch it off and everything stored is deleted from our server at that moment. The scripts on your phone are untouched — they were always yours and always there.

Deleting one script removes its text and its title immediately. A note that it was deleted is kept for up to 30 days, so a phone that was offline learns the script is gone instead of uploading it again.

This section applies only if you chose to connect social media accounts. If you never use the feature, we have no access to any of your accounts.

How you connect: you are sent to the platform's own sign-in screen and grant permission to the platform directly. We never see, ask for, or store your social media password. The platform hands us only a limited token that lets us publish on your behalf.

What we do not touch: we do not read your connected accounts' messages, follower lists, existing posts or ad accounts. The permissions we request are the minimum needed to publish and to show you which account you are publishing to.

Disconnecting: you can disconnect an account at any time from Settings > Connected Accounts in the app, which deletes that platform's tokens from our server. You can also revoke our access from the platform itself:

• Google / YouTube: myaccount.google.com/permissions
• Instagram and Facebook: Settings > Security > Apps and websites in the relevant app
• TikTok: Settings and privacy > Security > Manage app permissions

About the platform services: Daily Studio uses YouTube API Services to upload to YouTube. By using that feature you agree to the YouTube Terms of Service; how Google handles your data is described in the Google Privacy Policy. Instagram and Facebook posts go through Meta Platforms' APIs, and TikTok posts through TikTok's, each under their own privacy policy.

We use your data to provide and maintain the app, fix problems, understand which features matter, and manage subscriptions. Our processors are:

• RevenueCat, Inc.: subscription and purchase state.
• Mixpanel, Inc.: feature-usage analytics and product development.
• Apple: in-app purchases and payment processing.
• Cloudflare, Inc.: the server and database that hold encrypted script blobs, your account, your connected account details, your content plan if you turned it on, and takes waiting to be published, and source media you select for edit projects.
• OpenAI: planning an edit from the visual previews, speech transcript and note described in section 3A, only when you request AI-assisted editing.

If you use direct publishing, only the platform you chose receives your video and caption. Those platforms are not our processors: they are independent controllers that receive the content at your direction and handle it under their own privacy policies:

• Meta Platforms, Inc. / Meta Platforms Ireland Ltd.: Instagram and Facebook posts.
• Google LLC: YouTube uploads.
• TikTok Ltd. and its affiliates: TikTok posts.

There is no advertising network, no advertising identifier, and no data sharing for tracking purposes in Daily Studio. Your connected account details and your videos are never sold, never used for advertising, and never used to train AI models.

The processors above operate servers outside Türkiye, principally in the United States and on Cloudflare's global network. By using the app you agree that your subscription and usage data may be transferred to and processed in those locations as necessary to provide the service.

Your photos and videos are not part of these transfers unless you choose specific files to upload for publishing or editing. Selected sources are uploaded to Cloudflare infrastructure and may be processed on authorized editing servers. OpenAI planning sends only the visual previews, speech transcript and note described in section 3A to that provider. Gallery items you did not select are not transferred.

• Encrypted script blobs: 30 days, then deleted.
• Access tokens: until you disconnect the account or delete your account. Disconnecting deletes them immediately.
• Takes uploaded for publishing: deleted seven days after the post goes out. A take you never publish stays until you delete it from the app’s Library, Create on the web, or its recorded take in the content plan, or until you delete your account.
• Unapproved finished edits: you can delete these from the app’s Library or Create on the web. This removes the stored finished video, its source project and waiting posts that have not started publishing; device originals are untouched. Deletion is refused once publishing has started, or an edit has been published or saved as a platform draft. A published server video follows the seven-day retention above.
• Edit-project source files: unsubmitted drafts and projects cancelled before submission enter automatic cleanup seven days after their last update. Source files in submitted, completed or failed projects remain until you remove the sources or delete your account. Cleanup failures may delay deletion. Removing a completed project’s sources keeps its finished video and review link; the finished video follows the separate publishing retention above.
• Publishing records (caption, audience, schedule, post id): for as long as your account exists.
• Content plan: for as long as your account exists, or until you turn the plan off — which deletes it at that moment. A deleted script's text goes immediately; a note that it was deleted is kept for up to 30 days.
• Subscription records: for the life of the subscription and any period required by law.
• Usage analytics: kept in aggregate, not linked to your identity.
• Everything on your device (your scripts, settings and name): removed completely when you delete the app.

Depending on where you live, you may have the right to access, correct, delete, or restrict the processing of your personal data, and to object to it.

If you use Daily Studio without an account, please include the anonymous user ID shown at the bottom of the app's Settings screen so we can locate your records.

If you do have a Daily Studio account, you can disconnect your accounts and delete all of your data yourself from inside the app; the steps are on our Data Deletion page. Contact: kvkk.dailystudio@uzelabs.com

Daily Studio is not directed at children under 13, and we do not knowingly collect personal data from them.

We may update this policy; material changes will be published on this page.

• General Support: support.dailystudio@uzelabs.com
• Privacy/Legal: kvkk.dailystudio@uzelabs.com
• Company: UZELABS YAZILIM ÇÖZÜMLERİ TİCARET VE SANAYİ LİMİTED ŞİRKETİ