The short version. Your raw video is never uploaded. Only the audio track is sent up, only so it can be transcribed, and it is deleted as soon as the job finishes. We collect your email address, that temporary audio and your purchase history — nothing else. No tracking, no advertising, no ad SDKs, no data sold, and your content is never used to train AI models.
This policy explains how BRoll King ("we", "us") handles personal data in the BRoll King iPhone app, on brollking.com, and in the web application when it launches (together, the "Service").
The data controller is Canberk Sezer, Türkiye. Contact: support@brollking.com.
1. What we collect and why
Contact information — your email address
Collected when you create an account, and used to sign you in, to tie your credit balance to you, and to reply if you write to support. If you join a waitlist on this website, your email is stored for that announcement only and every message includes an unsubscribe link.
User content — audio, transcripts and prompts
To produce a transcript, the app extracts the audio from your video and uploads it. The resulting transcript is used to plan B-roll, and short text derived from it is sent to AI providers as the description of the media to generate. This is the functional core of the product; without it there is no transcript, no plan and no B-roll.
Purchases
Credit purchases are processed by Apple. We receive confirmation that a purchase was valid and keep a ledger of your credit balance and what each job spent. We never see your card details.
Basic technical data
Our servers log the ordinary technical facts needed to run and secure a service — request time, status and error information — and we record which tool ran and numeric details such as duration or count so we can see what is used. File names, sequence names and transcript text are not sent in that record.
2. What happens to your video
- Your full-resolution video is never uploaded. It stays on your device. Silence and loudness analysis, the cuts, the B-roll placement, captions and the final render all happen locally.
- Only the extracted audio is uploaded, and only for transcription. It is stored in temporary object storage under a random identifier and deleted as soon as the transcription job finishes. As a backstop for jobs that break off half-way, the storage bucket also carries a rule that deletes anything left behind within one day.
- Generated B-roll (AI images, AI video, motion graphics) is produced on our servers and downloaded to your device; the temporary server copy is subject to the same one-day rule.
- We do not keep a library of your projects on our servers. If you delete a video from your device, it is gone — we have no copy to give you back.
3. What we never do
- We do not track you across other apps or websites, and we do not use the App Tracking Transparency identifier. There is no tracking in this app.
- We show no advertising and include no third-party advertising or analytics SDKs.
- We do not sell or rent personal data, and we do not share it for advertising.
- We do not use your video, audio or transcripts to train AI models, and our providers are engaged on terms that do not permit training on your content.
- We do not build advertising profiles or infer anything about you from your footage.
4. How long we keep things
- Uploaded audio and generated media: deleted as soon as the job completes; anything orphaned is removed within one day by an automatic storage rule.
- Transcripts: returned to your device and stored there. We do not retain a copy after the job.
- Account email and credit ledger: kept while your account exists, and deleted when you delete your account.
- Purchase records: Apple keeps its own records of purchases under Apple's policies, independently of us.
- Waitlist emails: kept until you unsubscribe or ask us to remove you.
- Server logs: short-lived operational logs, retained only as long as needed to diagnose problems and keep the Service secure.
5. Who else processes data
We use a small number of providers to run the Service. Each one only receives what that step needs.
- Cloudflare — website and API hosting, and the temporary object storage (R2) that holds uploaded audio and generated media.
- Supabase — accounts, authentication and the credit ledger. Hosted in the European Union (Frankfurt).
- Cloudflare Workers AI and AssemblyAI — speech-to-text. Cloudflare Workers AI handles standard transcription; AssemblyAI handles premium transcription. These receive your extracted audio.
- Google (AI Studio) and Anthropic — planning the B-roll and generating images, video and motion-graphics designs. These receive transcript text and the short prompts derived from it, not your video.
- Railway — renders motion-graphics animations, and may pass the same animation to a cloud rendering provider (HeyGen) for that step. It receives the generated animation markup only, never your video or audio.
- Pexels — stock photos and footage. It receives a search term, not your content.
- Apple — processes in-app purchases and provides Sign in with Apple.
- MailerLite — stores waitlist email addresses collected on this website and sends the launch announcement.
6. Where data is processed
Account data is stored in the European Union (Frankfurt). Requests are served by Cloudflare's global network, and the AI and transcription providers listed above operate primarily in the United States, so audio and transcript text may be processed there. Those transfers rely on the providers' standard contractual clauses and equivalent safeguards.
7. Legal bases
Where the GDPR or the Turkish Personal Data Protection Law (KVKK) applies, we rely on:
- Performance of a contract — running your account, transcribing your audio, generating B-roll and tracking credits.
- Legitimate interests — keeping the Service secure, preventing abuse, and understanding which features are used (via numeric, non-identifying records).
- Consent — joining a waitlist. You can withdraw it at any time by unsubscribing.
- Legal obligation — where we must keep records of transactions.
8. Your rights and deleting your account
You can ask for a copy of your personal data, ask us to correct it, ask us to delete it, object to or restrict processing, and lodge a complaint with your data protection authority (in Türkiye, the KVKK authority; in the EU, your national supervisory authority).
Deleting your account, in the app: open Settings, scroll to Delete Account, and confirm. This is permanent: your profile, your credit balance and your credit history are removed from our servers straight away. Unused credits are forfeited. Videos on your device are untouched, because we never had them.
If you cannot reach the app, write to support@brollking.com from the address on the account and we will handle it. We reply within 30 days.
9. Children's privacy
BRoll King is rated 12+ and is not directed at children under 12. We do not knowingly collect personal data from children under 12. If you believe a child has created an account, write to support@brollking.com and we will delete it.
10. Security
Traffic is encrypted in transit with HTTPS. Uploads are addressed by unguessable random identifiers. API access requires a signed token tied to your account, and provider API keys are held as server-side secrets that never reach the app. No system is perfectly secure, but we keep the amount of data we hold small on purpose — the most effective protection for your footage is that we never receive it.
11. Changes to this policy
If we change what we collect or who processes it, we will update this page and change the date at the top. Material changes will be announced in the app or by email before they take effect.
12. Contact
Privacy questions, data requests and help with the app: support@brollking.com or the support page. The rules of use are in the terms of use.
BRoll King — operated by Canberk Sezer, Türkiye.