Privacy policy
xvd is an iOS app for adding subtitles and a logo to your videos. This page explains which data is processed where. The short version: xvd has no accounts, and your videos, audio and subtitles never leave your phone.
What stays on your phone
- Videos: live in Photos. The app keeps only covers, durations and titles in its own database.
- Subtitles and translation: speech recognition and translation run with on-device models: Apple's, and the open-source Whisper models. No audio or text is sent to any server. The models are downloaded once: Apple's from Apple, the Whisper models from Hugging Face (huggingface.co); these downloads carry no personal data.
- Logos: the logo files you add are stored only on your device.
- Subscription: Pro is an App Store subscription tied to your Apple ID. The app reads its status on your phone through Apple's StoreKit; it is not sent to our server. Your payment details stay with Apple.
What reaches our server
- X links: when you paste or share an X link, the link is sent to our server to find the video's address. What we find (the public post's text and video addresses) is kept for at most a day so the same link answers faster next time; who asked is not kept. The video file never passes through the server; your phone gets it directly from X.
- IP address: requests are rate limited to prevent abuse. For that, your IP address is held in memory only, for at most 10 minutes. Neither IP addresses nor links are written to the server logs.
We do not collect accounts, names, email addresses, push tokens or usage history.
What we do not use
- No advertising identifier, no tracking, no third-party analytics.
- Your data is never sold or shared.
Third parties
- Apple: the Photos, Speech and Translation frameworks run on device; subscriptions are handled by the App Store.
- X: video addresses come only from X's own public embed endpoint; the post's number goes to no other service. Your X account is never connected to the app.
- Hugging Face: the Whisper models are downloaded from there once.
- Hetzner: our server runs in Hetzner's data centre in Germany.
We never sell your personal data or share it for advertising or analytics. Any third party that can access it, including the provider hosting our server, is bound to protect it at least as well as this policy describes.
Retention and deletion
There is no record tied to you on our server, so there is no account to delete. To remove the app's data from your phone, delete the app. Videos in Photos are yours and stay there. For any question or deletion request about your data, write to support@xvdapp.com; we answer within 30 days.
Children
xvd is not directed at children under 13 and does not knowingly collect data from them.
Changes
If this policy changes, this page is updated; significant changes are announced in the app.