Privacy Policy

Effective October 30, 2026

This Privacy Policy explains how Yap & Done (“we,” “us,” “our”) collects, uses, shares and deletes information when you use the website at yapanddone.com and the Yap & Done app for iPhone and Android (together, the “Service”). The Service is an AI video editor: you upload footage, and automated software edits it for you.

Your use of the Service is also governed by our Terms of Service.

Information you give us

• Account details. Your name, email address and password. We store only a one-way hash of your password, never the password itself. If you continue with Google, we receive your name, email address and Google account ID from Google, and never your Google password.
• Your uploads. The videos, audio files and images you upload. Videos usually show your face and voice, and may show other people and places.
• Your instructions. The brief you write for each video, your settings (captions, graphics, music, length, shape, style and so on), the timeline notes you leave, and the changes you ask for.
• Brand details. Saved brand styles: a name, fonts, colours, a brand name, a website address and a call to action.
• Links. Any link you give us, such as a reference video to match or your website.
• Content Ideas. What you tell us about your account, your audience, what you teach and what you sell, any document you upload to fill these in (deleted once it's read), and the ideas and scripts you keep.
• Your niche. The name, topics and searches you set up for your niche, the accounts you choose to learn from, and your own TikTok or Instagram accounts if you add them.
• Messages. Anything you send us by email.

Information we create while editing

• Transcripts. A word-by-word transcript of the speech in your footage, used for cuts and captions.
• Edits. The videos we produce, rough versions, generated music and sound effects, and a short report of what changed.
• Editing logs. A record of the steps the editor took, its progress messages, how long it ran and whether it succeeded.
• Your voice. A short description of how you talk (how you open a video, your rhythm, the words you use and the ones you don't), written from the transcripts of footage you upload here and of your own public posts. It's used only to write your scripts, and you can change or clear it.

Niche research

To show what works in your niche, we read public TikTok and Instagram videos: their public numbers (views, likes, comments, shares, saves), a transcript of what's said, the words on their cover, and their most-liked comments. This is information other creators have made public. It's kept in a research library shared by everyone who studies a similar niche, so the same public video isn't read twice. When you add your own account, we read your public posts the same way, to show you how your videos are doing and learn what works for you.

Information we collect automatically

• Sign-in and security data. Your IP address and browser or device type when you sign in or start a session, the email address and IP address of each sign-in attempt, and the email and IP address of password reset requests.
• Push notification token. If you allow notifications in the phone app, a device token and your platform (iOS or Android), so we can tell you when a video is ready.
• Server logs. Our hosting and network providers record standard request data such as IP address, time, requested page and browser type, to run and protect the Service.

We don't use analytics trackers, advertising pixels or third-party advertising cookies.

Cookies

The website uses two essential cookies: one that keeps you signed in for up to 30 days, and a short-lived one that protects Google sign-in from forgery. The website loads fonts from Google Fonts, so Google receives your IP address and browser details when a page loads. The phone app stores a sign-in token on your device instead of a cookie.

How we use information

• To create and secure your account and sign you in
• To transcribe, edit and revise your videos as you ask, and show you your projects
• To apply your saved brand styles and match the reference videos you choose
• To suggest video ideas and write scripts from what you've told us, your niche research and your voice
• To send you account email (for example a password reset) and, in the app, notifications you've allowed
• To prevent abuse, such as limiting repeated failed sign-ins
• To find and fix problems with the Service
• To comply with the law and enforce our Terms of Service

We don't sell your personal information, and we don't share it for advertising. We don't use your footage, transcripts or edits to train AI models.

Who we share it with

Editing a video takes several specialist services. We share information with these providers only so they can do their part of the work for us:

• Amazon Web Services stores your uploads and edits, and runs the editing machines, in the United States.
• Anthropic (Claude AI models) plans and makes the edit. It receives your instructions, transcripts, notes, brand details, and frames or images from your footage.
• Groq transcribes the speech in your footage, and in the public videos read for niche research.
• RapidAPI data providers fetch public TikTok and Instagram videos, accounts and comments for niche research.
• ElevenLabs cleans up voice audio and generates music and sound effects, when those options are on.
• Other AI providers, such as OpenAI and Google, may be used for individual editing steps.
• Google handles “Continue with Google” sign-in and serves the website's fonts.
• Mailgun sends account email, such as password resets.
• Cloudflare and our web host deliver and protect the website.
• Expo, with Apple and Google, delivers push notifications to the phone app.

These providers process information under their own terms and privacy policies. Some AI providers keep the data they receive for a limited time to detect abuse.

We may also disclose information if the law requires it, to protect the rights, safety or property of Yap & Done, our users or the public, or as part of a merger, acquisition or sale of assets, in which case the buyer must honour this policy.

How long we keep it

• Uploads and edits are deleted automatically 90 days after they're stored, or sooner if you delete the project. Download any video you want to keep.
• Project details (titles, settings, notes and run history) stay until you delete the project or your account.
• Editing logs on our editing machines are deleted after 30 days.
• Sign-in attempts are deleted after 2 days. Sessions expire after 30 days.
• Your niche, your accounts and your voice stay until you change or remove them, or delete your account. What we read from public videos stays in the research library.
• Your account stays until you delete it. Deleting it removes your account, every project and every stored file straight away. Copies in our database backups are overwritten in the normal course of operation.

Security

Traffic to the Service is encrypted. Your files are kept in private, encrypted storage that only the Service can read, and the links we use to upload, play and download them expire. Passwords are hashed, and repeated failed sign-ins are paused. No system is perfectly secure, so keep your password private and tell us right away if you think someone else has used your account.

Your choices and rights

In the editor you can change your name and password, download your videos, delete any project, and delete your account. You can also email us to ask for a copy of your information, or to correct or delete it. We may need to confirm the request comes from you.

Depending on where you live (for example California, the European Economic Area or the United Kingdom), you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain uses, and to complain to your data protection authority. We'll honour the rights that apply to you and won't treat you differently for using them. Where the law asks for a legal basis, we rely on performing our contract with you (to run the Service), our legitimate interests (to secure and improve it), and your consent where we ask for it (such as notifications).

Children

The Service is for adults aged 18 and over. We don't knowingly collect information from anyone under 18. If you believe a minor has given us information, email us and we'll delete it.

International transfers

We and our main providers operate in the United States. If you use the Service from another country, your information is transferred to and processed in the United States, where privacy law may differ from yours.

Changes to this policy

We may update this policy. We'll post the new version here with a new effective date, and tell you by email or in the Service before a significant change takes effect.

Contact us

Questions or requests about your privacy: [email protected].