Shopfront has no visible sign-up screen. The app creates an anonymous Firebase identity to keep the service secure and to keep each user's productions separate from everyone else's.
1. Scope and data controller
This policy covers the Shopfront mobile app, the website and the video production services connected to them. You can reach us about data processing at [email protected].
2. Information we process
Identity and device information
- The anonymous user identifier created by Firebase.
- A randomly generated device identifier, unique per install.
- App version, operating system and the limited technical logs needed for security and fault diagnosis.
Content you provide
- A shop photo and, optionally, a photo of a person to be used as the presenter.
- Business name, presenter description and script text.
- The image, audio, caption and video files produced from those inputs.
Purchase information
- Product identifier, subscription status, transaction identifier and purchase environment.
- Credit balance, along with the video allowances used and reserved.
We never see your card or bank details; payment is handled by the Apple App Store or Google Play.
3. Why we use it
- To produce and deliver the image, audio and video requested.
- To keep the production queue running, retry failed jobs safely and prevent double charging.
- To verify subscription and add-on credit entitlements.
- To detect abuse, security incidents and technical faults.
- To meet legal obligations and to respond to user requests.
4. Service providers
So that the service can operate, data may be processed — only to the extent necessary — with the following categories of provider:
- Firebase: anonymous authentication and app crash reporting.
- RevenueCat together with Apple/Google: subscription and purchase verification.
- OpenAI or the configured alternative image/speech provider: media generation.
- HeyGen: turning the image and audio into a talking video.
- Cloudflare: the static website, and storage and delivery of final video files on R2.
- Hosting infrastructure: PostgreSQL records, the job queue and operational logs.
- Meta (Facebook): measuring which installs our app adverts led to. That measurement is aggregated and anonymous; see the next section.
5. Advertising measurement and tracking
We promote the app through Meta and use Meta's software development kit to measure whether the advertising works. What is measured is whether events such as an install or a purchase happened.
We do not track you as an individual. The app does not collect the iOS advertising identifier (IDFA) and never shows the permission prompt that would ask for it; advertiser-ID collection is explicitly switched off. Measurement is done through Apple's SKAdNetwork and Meta's aggregated measurement methods, in a form that cannot identify an individual user. We do not combine your data with other companies' data for advertising, and we do not sell any data to a data broker.
Your photos, videos, scripts and business name are not used for advertising measurement and are not sent to Meta.
6. The photo of a person you upload
If you upload a photo of a person to act as the presenter, that image is used only to produce that one video and is deleted from our servers as soon as the video is finished. We do not keep it, we do not reuse it for another production, and we do not use it to train models.
We do not process this photo for authentication, face recognition or any other biometric purpose aimed at identifying a person. During production the image is sent to the image and video providers listed in section 4 so that the video can be created.
If the photo is not of you, you must be sure the person shown has agreed to their image being used this way. Obtaining that permission is your responsibility.
The video itself carries the person's likeness and stays in your archive; you can remove it at any time by deleting your account.
7. Retention and deletion
Productions and account records may be kept for as long as they are needed to provide the service, give you access to your archive, reconcile purchases, maintain security and meet legal obligations. Intermediate production files may be cleared once the operational need for them has ended.
You can delete your account and your data from inside the app: Home → Settings → Delete my account and data. Deletion takes effect immediately; the images you uploaded, the videos produced, business names and scripts are permanently removed and your account is closed. Any remaining credits cannot be recovered. If a video production is still running, deletion is refused until it finishes.
Purchase and payment records are kept for accounting purposes for as long as the law requires; during deletion, however, the link between those records and your identity is severed and they no longer identify you. If you have a subscription, deleting your account does not cancel it; you must cancel it from your App Store account. If you cannot reach the app, you can also send a deletion request to [email protected].
8. International transfers
The technology providers above may run infrastructure in different countries. Data may therefore be processed outside your country, under appropriate contractual and technical safeguards.
9. Security
We use measures such as authentication, access limits, encrypted network connections, durable database records, idempotent payment events and restricted media access. No method of transmission or storage over the internet can be guaranteed to be absolutely secure.
10. Your rights
Under applicable law you may have the right to access, correct or erase your data, to restrict processing, or to object to it. You can send your request to [email protected]. Because your identity is anonymous, we may need to ask for the user or job identifier shown in the app so that we can find the right record.
11. Children's privacy
Shopfront is not directed at children. To use the service and to make payments you must be old enough to enter into a contract in your country.
12. Changes
We may update this policy when the product or legal requirements change. We will announce significant changes in the app or on this page.