Privacy Policy

Effective date: September 3, 2026 · Applies to PocketCut apps and this website

How PocketCut uses your device

• Media and transcripts stay local. Imported files are copied into app-private storage. Transcription, speaker identification, editing, playback, and export all run on your device.
• No account, no analytics, no ads, no crash reporting. The apps contain no analytics, advertising, or crash-reporting SDKs and create no PocketCut account.
• Project data. Projects, journals, and settings are stored in app-private storage and are never uploaded. Uninstalling the app removes them.
• On-device models. Optional transcription models download once over an encrypted (HTTPS) connection from pinned public Hugging Face repositories and are cached locally for offline use. Like any HTTPS download, your network provider and the download host can observe connection details such as your IP address; no PocketCut identifier is attached. Models can be removed from the app at any time.

Native device sharing

Development builds may offer a native share sheet. PocketCut first creates a private local export and gives it to the operating-system share interface only after you choose that action. The destination app controls what happens next. A presented or completed share interface is not proof that a destination published or delivered the file. This local lane does not connect a social account through PocketCut's service.

Optional TikTok Sandbox publishing

Publishing is currently limited to invited Sandbox testers and private posts. It is optional and is not needed to edit or export. TikTok production review is submitted and pending; the integration has not been approved or passed the Direct Post audit. Publishing uses TikTok authorization to connect the account you select and display its nickname, username, and current posting restrictions. We request basic profile and Direct Post permissions. We do not receive your TikTok password.

In supported iOS and Android test builds, the app previews your completed export directly. It makes one temporary copy in its private cache, limited to 50 MiB, so it can preview and stream the saved export without asking you to select the file again. That copy is removed when you close the publishing screen, disconnect, prepare another export, or next start the app. An interrupted operation may leave the copy until that next start; your original saved export is not deleted. The standalone browser publisher instead previews a file you explicitly select from your device. Before your confirmation, neither flow uploads the video. When you confirm, our Cloudflare-hosted service forwards the chosen video, caption, privacy choice, interaction settings, and commercial-content disclosures to TikTok. It does not attach your source project, edit history, or separate transcript. Captions you burn into the exported video are part of that video. We stream the video in transit and do not store a media copy in our database or file storage.

Connection storage and deletion

The standalone publishing page uses a necessary Secure, HttpOnly session cookie that expires one hour after the session starts. Mobile sign-in uses a separate necessary Secure, HttpOnly cookie for up to ten minutes, plus a short code displayed in the app. The app keeps an opaque connection proof in native process memory only; it is not a TikTok token and is not saved to disk or placed in browser URLs. Closing the app process loses that connection. The server stores an encrypted access token and, when needed, an encrypted upload destination and post identifier. OAuth state expires after ten minutes. Refresh tokens are discarded, and you must reconnect after the session ends. The account nickname and posting restrictions are fetched for the publishing screen rather than kept as a profile database.

Active connection records expire after one hour and are scheduled for deletion. You can remove them sooner using Disconnect TikTok in the app or Disconnect & delete session on the publishing page. We also ask TikTok to revoke access; if that request fails, remove PocketCut from TikTok’s connected-app settings. Session deletion does not delete videos already received by TikTok. Manage those in TikTok itself. A non-account marker may remain to prevent reuse of a deleted session.

Cloudflare hosts the website, processes network requests, and stores the encrypted session records. Its infrastructure may process IP addresses and connection metadata for service delivery and security. Recoverable encrypted database history may remain in Cloudflare’s recovery system for up to 30 days after active-record deletion. We do not deliberately log authorization codes, tokens, upload URLs, video contents, or captions, and Worker request logging is disabled.

Unified connected-platform testing

The unified connection service is deployed for development and provider-approved testers, and TikTok production review is submitted and pending, but no public production launch has occurred. It can broker OAuth for YouTube, TikTok, Instagram, Threads, X, and LinkedIn. Bluesky uses its native public-client flow and does not give a client secret to our service. Availability remains limited by each provider's development, testing, and review state.

OAuth authorization codes are exchanged by the Cloudflare-hosted service. Provider tokens are encrypted only during a short, one-time handoff and are then held in the app's native secure storage; the service retains one-way token, connection-grant, and provider-account hashes to authorize refresh, disconnect, deletion, and temporary-media operations. OAuth state expires after ten minutes and handoffs after three minutes. Connection records expire after about one year or are invalidated earlier on refresh, disconnect, deauthorization, or deletion.

Instagram and Threads may require a temporary provider-readable media URL. For those test posts, the selected export is stored privately in Cloudflare R2 with an expiring, single-purpose capability and is deleted on expiry, disconnect, provider deauthorization, or a signed deletion request. No provider receives a project, edit history, or separate transcript. Threads-signed deauthorization and data-deletion callbacks automatically remove matching connection and staged media data. Other deletion requests can be made through the app or the contact method below.

Connected platforms independently process your authorization, account data, and posts under their own privacy policies. TikTok's policy is available in its privacy policy. Cloudflare’s handling is described in its privacy policy. Their services may process information in countries other than yours. Contact us below about access, correction, or deletion requests relating to information we hold.

Purchases

On mobile, unlimited export is a one-time purchase processed entirely by your platform's store (Apple App Store or Google Play). The developer never sees your payment details. Purchase state is validated with the store to unlock the feature on your devices. Google's or Apple's own privacy terms apply to store transactions.

Permissions

• Files and media (on-demand): you explicitly choose files to import and locations to export; PocketCut accesses them only for that operation.
• Network: used for optional model downloads, store purchase/restore, native destination sharing, and optional TikTok Sandbox publishing from supported mobile test builds or your browser as described above.
• Notifications: not requested.
• Android backup: backup and device-to-device transfer of app data are disabled; your projects never leave the device through cloud backup.

Children

PocketCut is not directed at children. Optional publishing requires you to meet TikTok’s applicable age and account requirements. Contact us if a child has provided personal information through the publishing service.

Support messages

If you contact support, we receive the contact details and information you choose to send. Avoid sending private media, credentials, or tokens. We use your message to respond to your request; you can ask us to delete the correspondence.

Changes to this policy

Changes to this policy will be published at this address with an updated effective date.