Privacy Policy

Last updated: September 25, 2026

GhostIt's core function (aligning and compositing your two video clips) runs entirely on your device. Your footage is never uploaded to a server and never seen by us. This policy covers the small amount of data the app and this website do handle.

Who We Are

This app and website are operated by Sakavision GmbH, Siedlerweg 3h, 8041 Graz, Austria ("Sakavision," "we," "us"). See our Impressum for full company details. Contact: info@ghostit.app.

What We Collect

On ghostit.app (this website)

• Beta signup: the email address (and optional Instagram handle) you submit through the "Join the Beta" form. This is sent directly to a Google Form we use to manage the signup list.
• We do not use tracking or advertising cookies on this website. See our Cookie Policy for details.

Creating your composite never requires an internet connection. Optional analytics, optional crash reporting, and Contact Developer, described below, do use network access when you choose to use them.

In the GhostIt app

• Your video/photo content: processed entirely on your device, on both iOS and Android. It is never uploaded, streamed, or transmitted to any Sakavision server; there is no server involved in creating your composite at all.
• Optional usage analytics: app-usage events (e.g. which features you use), sent to PostHog. This is off by default on both platforms and only starts if you explicitly opt in from Settings; you can opt out again at any time. We never link analytics events to your identity: each event uses a random, per-installation identifier and a session identifier, and cannot be connected to your name, email address, account, or the videos/photos you process. We do not collect your IP address, GPS- or IP-derived location (city, country, region, postal code, coordinates, or time zone), device model or manufacturer, carrier or network details, screen dimensions, locale, or browser/device user-agent strings through this analytics, and we do not use PostHog's Session Replay feature. The only other technical details attached to each event are your app version/build, OS name and version, and PostHog's own library version.
• Bug reports / "Contact Developer": if you choose to send a bug report, feature request, or message, the app sends it directly to our own server, not your Mail app or personal email account. Depending on the form, this can include your message, an optional email address if you choose to give one, your app version, device model, and OS version, and (for bug reports specifically) a technical diagnostic log (e.g. performance/memory information and clip file names and technical details like duration and resolution, but never the video or photo content itself). We use this only to respond to you and investigate the reported issue.
• Optional crash reports: automatic crash reporting is disabled. If GhostIt closes unexpectedly, the app asks whether you want to send a crash report the next time you open it. Nothing is uploaded unless you choose "Send Crash Report"; choosing "Not Now" deletes the unsent report from your device. A submitted report may include technical information about the crash, your app and operating-system versions, device information, a randomly generated installation identifier, and limited processing context such as the processing stage, selected preset, approximate frame rate, resolution, and processing route. It does not include your videos or photos, video frames, filenames, file paths, video URLs or media-library locations, your email address or other deliberately collected identity information, your bug-report text, or GhostIt's ordinary diagnostic log. Reports are processed by Google Firebase Crashlytics solely to diagnose crashes and improve app reliability, and are never used for advertising, marketing, profiling, or cross-app tracking.
• App Store / Google Play data: if you get GhostIt through Apple's App Store/TestFlight or Google Play, your account, purchase, and beta-enrollment information for that platform is handled directly by Apple or Google under their own privacy policies. We do not receive your payment details from either platform.

Purpose of Processing

We use the data above only to: run the app's core features on your device, operate the beta waitlist, respond to support requests and bug reports, diagnose crashes and improve app reliability when you choose to submit a crash report, and, only if you opt in, understand aggregate feature usage to improve the app.

Legal Basis

Where GDPR applies, we process data under: Art. 6(1)(b) (performance of a contract: providing the app/beta), Art. 6(1)(a) (consent: optional analytics and optional crash report submission), and Art. 6(1)(f) (legitimate interest: responding to support requests you submit).

Service Providers

• Google (Forms): processes beta signup submissions (email, Instagram handle). See Google's privacy policy.
• Google (Fonts): this website loads typefaces from Google Fonts' servers, which may receive your IP address when the page loads.
• PostHog: processes optional in-app usage analytics, only if you opt in. See above for what this does and doesn't include.
• Google (Firebase Crashlytics): processes optional technical crash reports sent with your permission, so Sakavision can diagnose crashes and improve app reliability. GhostIt uses Firebase Crashlytics only; Google Analytics for Firebase is not enabled. See Firebase Privacy and Security and Google's Privacy Policy.
• Resend: sends the emails generated by Contact Developer submissions (bug reports, feature requests, and messages) on our behalf.
• Cloudflare: hosts ghostit.app and the server endpoints the app's Contact Developer feature and public ticket system talk to.
• Apple: processes App Store purchases and TestFlight beta distribution for iOS users, under Apple's own privacy policy as an independent controller.
• Google Play: processes purchases and beta-testing distribution for Android users, under Google's own privacy policy as an independent controller.

How Long We Keep Data

Beta signup emails are kept until app launch or until you unsubscribe, whichever is sooner. Contact Developer submissions (bug reports, feature requests, and messages) are kept as long as needed to resolve your request and for a reasonable period after for reference. For optional analytics data held by PostHog, events are retained under GhostIt's current PostHog plan for up to one year; turning analytics off in Settings stops any further collection immediately. Analytics events use a random per-installation identifier that is not linked to your name, email address, account, or processed media, so we have no way to identify or delete one specific person's past analytics data from an email request. An unsent crash report stays only on your device until you make that next-launch decision; choosing "Not Now" deletes that locally cached, unsent report. Firebase states that Crashlytics retains crash data and associated identifiers for 90 days before beginning removal from its live and backup systems. We don't hold your video or photo content at all; it never reaches us.

Your Rights

Under GDPR, you have the right to access, correct, delete, or export the personal data we hold about you, to object to or restrict its processing, and to withdraw consent (e.g. for analytics) at any time. To exercise any of these, email info@ghostit.app. You can also lodge a complaint with the Austrian data protection authority (Österreichische Datenschutzbehörde, dsb.gv.at).

Changes to This Policy

We may update this policy as the app and website evolve. Material changes will be reflected by an updated "Last updated" date above.

Contact

Questions about this policy: info@ghostit.app