Legal
Privacy Policy
Mashcut is an iPhone app that turns the clips you film into short vertical ads. This policy explains what the app and this website collect, what we do with it, which companies help us process it, and how you can delete it. It describes how Mashcut works today, and we'll update it when that changes.
The short version
- You give us your sign-in details, a few answers about how you make ads, the clips you film or import, any text you type in the editor, and any notes you add to an Auto Edit set.
- Your clips are uploaded and processed off your phone. Deepgram transcribes them, and Anthropic's Claude plans each edit from the words of your transcript and, for an Auto Edit set, any notes you add. Neither receives the name, email address or ID on your account, or the text you type in the editor.
- The app sends Mixpanel a record of how you use it, such as which screens you visit and which steps you complete, and sends Sentry a technical report when it crashes or runs into an error; our servers send Sentry their error reports too. These identify you only by random IDs, such as your account's ID, and are designed to leave out your videos, what you say, the text you type and your Auto Edit notes.
- Neither the app nor this website contains advertising tools, and this website sets no cookies.
- Mashcut doesn't use your footage or transcripts to train AI models, and we opt out of Deepgram's model-improvement program.
- You can delete your whole account in the app at any time, and a set of ads while you're subscribed: a finished set first waits in Trash for 7 days, where you can restore it or delete it for good sooner. A few records remain afterwards, and this policy lists them.
Information you give us
Your account. You sign in with Apple or with an email address and password. With Sign in with Apple, the app sends Apple's sign-in token to our servers; depending on your Apple settings, the email address we receive may be a private relay address from Apple. The app doesn't keep the name Apple shares. If you ask to reset your password, we email a link to choose a new one to your address; Resend sends it for us.
Your answers. Before you create an account, the app asks how you heard about Mashcut (you can skip it), your first name, how long an ad takes you to edit, how many ads you make a week, your goals for the next 30 days, and what slows your editing down. Some test versions of the app asked more: what kind of content you make, how much you charge per video, what you'd tried before, how you planned to use Mashcut, how many ads you'd commit to a week and a creator code, and those answers are kept the same way. Your answers are saved on your phone, where they shape what the app shows you, and once you have an account a copy is stored with it on our servers. They aren't sent to any AI provider.
Your clips. When you tap Make, the app uploads the clips you filmed in Mashcut or chose from your camera roll (your hooks and demos, any call to action, or your Auto Edit take), with their picture and sound. Nothing is uploaded before then.
Text you type. If you edit an ad, the captions and on-screen text you type are saved with that version of the ad, and the ad shows them exactly as you typed them. They aren't sent to any AI provider.
Messages to us. If you email support@usemashcut.com, we receive your email address and whatever you write.
Information created when you use Mashcut
- Files made from your clips: a converted copy of each clip, a lower-resolution copy, still frames taken every 2 seconds, the transcript of what you said, an analysis of your takes (which repeated takes were kept, what was cut, and a score for each passage), and the edit plan for each version of each ad.
- Clip details: each clip's length, file size and resolution, and whether you recorded or imported it.
- Your finished ads: every version of each ad, with its video, a thumbnail, a copy without captions or on-screen text that the editor plays, and a strip of still frames, and a few words from each ad's hook, which the app shows as its title.
- Subscription and purchase records: your plan, its status and renewal dates, the identifier RevenueCat gives your subscription, a record of each pack of extra credits you buy (the App Store's transaction ID, RevenueCat's purchase ID, the pack, how many, when you bought it and whether it was refunded), and a history of the credits you've received, used and got back.
- Notification token: if you allow notifications, your phone's notification token, stored with your account so we can tell you when your ads are ready.
- App check: a key from Apple's App Attest, used to check that requests come from the genuine Mashcut app, and a record of any check that couldn't be completed.
- Technical records: server logs, which include your account ID and can quote words from your transcript, or text you typed, when an edit fails one of our checks; records of each processing step, such as how long it took and whether it failed, whose error messages can include your account ID and, rarely, words from your transcript; and a timestamped record of your recent requests, used for rate limits.
- Connection details: like any app, Mashcut's requests carry your IP address and details about your device, and the records Supabase keeps of sign-ins and requests can include them.
Video files can carry details your phone embedded, such as when, and sometimes where, they were recorded, and on which device. Before a clip leaves your phone, the app removes the details stored alongside the picture and sound, including where and when it was recorded, so the clips you upload, the sound we send to Deepgram and the finished ads Mashcut makes don't carry them. Some cameras also name themselves inside the video's own encoding, which stays as filmed. Clips uploaded by early test versions of the app, before it did this, were stored as the phone prepared them and can still include those details until they're deleted.
On your phone, the app keeps your answers, your sign-in session, technical details such as your notification token, your clips until they're uploaded, and, while you edit, a draft of your changes and the video the editor needs to show them. While it's open, it also keeps a record of how you use it, such as which screens you visit and which steps you complete, which is gone when the app closes. The usage events it sends Mixpanel and the error reports it sends Sentry wait on your phone until they're sent, as described under How long we keep it.
What we don't collect
- Your location. The app doesn't ask for location access, and it removes the place a video was recorded from every clip before uploading it, as described under Information created when you use Mashcut.
- Your photo library. The app doesn't ask for library access. When you import, the iPhone's own picker shares only the videos you choose.
- Your contacts, advertising identifier or browsing history.
- Your age or date of birth.
- Your payment details. Apple handles payment. We receive your plan, its status and renewal dates, an identifier for your subscription and records of the packs you buy, never your card or other payment details.
Neither the app nor this website contains advertising tools. What the app and our servers send for usage analytics and error reports is described under Usage analytics and error reports.
How we use information
- To make your ads: storing and converting your clips, transcribing them, choosing your best takes, cutting them, and rendering finished videos, including each version you edit.
- To run your account: signing you in, keeping your subscription and credits up to date, and deleting things when you ask.
- To send the notifications you allow, such as telling you your ads are ready.
- To keep Mashcut working and secure: limiting abuse with rate limits, checking requests with Apple's App Attest, and finding and fixing problems.
- To understand how the app is used, such as where people stop during setup or which steps fail, and to find and fix crashes and errors.
- To answer you when you contact us.
People who work on Mashcut can access stored content when they need to: to help you, fix a problem, keep the service secure, or check the quality of the ads Mashcut makes.
Mashcut doesn't use your footage, audio, transcripts or the text you type to train AI models.
How AI is used
Mashcut uses automated tools, including AI models, to edit your video:
- Transcription. Deepgram's speech recognition turns the sound of your clips into a transcript with the timing of every word. It receives the audio your phone prepared or, when a clip couldn't be converted on your phone, the soundtrack our servers take from the video; a small file they can't read is sent as it was uploaded. We opt out of Deepgram's model-improvement program on every request.
- Choosing takes and planning edits. Anthropic's Claude models read your transcript to pick the best of repeated takes, to plan which of your words each ad keeps and, in Auto Edit, to write each ad's short on-screen hook from a line you said. They receive the words of your transcript and details about your clips, such as their timings, the random IDs Mashcut gives your clips and sets and, for a demo clip with no speech, measurements of its picture, such as how dark or still it is: never your video, your audio, or the name, email address or ID on your account. Your transcript does include anything you say aloud, such as your name.
- Notes for Auto Edit. If you add notes when you make an Auto Edit set, they're kept with the set, sent with its transcript to Anthropic's Claude models to guide that edit, and deleted with the set. They're never shown in your videos.
- Cutting and captions. Mashcut's own software cuts the video between words (and a demo clip with no speech into short pieces), removes hesitation sounds and pauses, burns in captions made from your transcript, and adds a title made from words of your hook or, in Auto Edit, the hook written from one of your lines. When you edit an ad, it renders your text in their place; editing doesn't involve any AI provider.
Mashcut never generates speech. The only words it writes are an Auto Edit ad's short on-screen hook, written from a line you said with words from your take and a few plain framing words, keeping that line's numbers as you said them, which the editor shows as written by Mashcut. These tools decide how to edit your own footage; they aren't used to make decisions about you.
Usage analytics and error reports
Usage analytics. Versions of the app installed from Apple send Mixpanel a record of how the app is used: events such as which setup screens you visit and for how long, whether you create an account or sign in and how, where you said you heard about Mashcut (or that you skipped the question), whether you allow notifications, when a plan screen opens and why (for example, a lapsed plan or a payment problem), which plan and billing period you pick and whether the purchase goes through, how many ads, hooks, demo clips and calls to action you add to a set and whether each clip was recorded or imported, and whether a set is made, exported or shared, with an error code when a step fails.
Each event carries only choices from fixed lists and counts like these, the random IDs Mashcut gives your sets and each event, the time, the app's version and kind of build, and your phone's operating system. Events are tied to a random ID the app creates for this and, once you sign in, to your account's ID, which also links what you did in the app on that phone before signing in; the random ID changes when you sign out. Events never include your name, email address, clips, transcripts, the text you type, or the price or receipt of a purchase, and the app asks Mixpanel not to work out your location from your IP address.
Error reports. When the app crashes, stops responding, or runs into an error it didn't expect, it sends Sentry a technical report: what went wrong and where in the app's code, the app's version, details about your phone such as its model, memory and iOS version, and your account's ID if you're signed in. When something fails on our servers, they send Sentry a report too, with what failed, where in our code, and the IDs of the account and the set involved. Reports are designed to leave out your videos, what you say in them, the text you type, your email address and your location.
Our servers also contain usage-analytics code for Mixpanel, which is switched off: it sends nothing, and we'll update this policy before turning it on.
This website
This website sets no cookies and runs no analytics or tracking. It's hosted by Vercel, which receives the technical details every browser sends to load a page, such as your IP address and browser type.
The Download on the App Store button doesn't collect anything on this page. It opens Mashcut's listing on Apple's App Store. If you email us at support@usemashcut.com, we receive your email address and your message. Our email is hosted by Microsoft.
How long we keep it
- Your account, answers, subscription and credit records stay until you delete your account.
- Your clips, the files made from them, and every version of your ads, including the text you typed, stay until that set of ads is deleted for good or you delete your account, including after your subscription ends. Apart from Trash, Mashcut doesn't currently delete them automatically after a set time, older versions of an edited ad included.
- Sets in Trash stay for 7 days after you move them there, and you can restore them until then. After that, Mashcut deletes them for good, as described under Deleting your data and your choices.
- Clips on your phone: the app deletes its working copy of a clip once our servers confirm the upload. Clips that were never uploaded, or whose upload didn't finish, and the temporary copies made when you record or import, stay in the app's storage, even after you sign out or delete your account, until iOS clears its temporary files or you delete the app.
- Ads on your phone: ads you export are saved in the app's own storage until you delete the app, and exporting a newer version of an ad replaces the older one. The app can't open them again once your account is deleted. Copies you saved or shared elsewhere stay there until you delete them.
- Editor drafts on your phone are deleted when you save or discard your changes, and, with the video the editor downloads, when you sign out or delete your account.
- Answers and sign-in on your phone, and the IDs of recent sets whose outcome the app hasn't yet reported to Mixpanel, are kept in the iPhone's Keychain. Signing out or deleting your account clears them, but iOS can keep Keychain items after the app itself is deleted.
- Usage events and error reports on your phone: usage events wait in the app's storage until Mixpanel receives them, and are dropped if they can't be sent for a while. Error reports wait until Sentry receives them, unless too many are waiting or they get too old, and can be sent even after you sign out or delete your account. When you delete your account, the app discards the usage events it hasn't sent and keeps that account's ID, only so that no more usage events are sent under it, until iOS clears the app's cache or you delete the app.
- Records of processing steps (how long each took, whether it failed, and what it cost) are kept after you delete a set or your account, currently with no end date, so we can measure how reliably Mashcut works. They don't contain your footage, but a failed step's error message can include your account ID or, rarely, words from your transcript.
- The record of your subscription's monthly credit allowances (the identifier RevenueCat gives the subscription, and the dates and size of each month's allowance) stays after you delete your account, no longer linked to your account in our database, so that deleting and re-creating an account can't hand out the same month's credits twice.
- The records of extra-credit purchases (described above) stay after you delete your account, no longer linked to your account in our database, so that no pack is ever credited twice, for example to a new account on the same Apple ID.
- If you signed in with Apple, deleting your account from an up-to-date version of Mashcut on iPhone also asks Apple to end Mashcut's access to your Apple ID, after you confirm with Apple. We keep the record of asking Apple to end Sign in with Apple access (whether Apple confirmed it, and when) for 90 days after the request is finished, naming your Apple ID and your account only by hashes of their identifiers, not the identifiers themselves. Until Apple confirms it, the record also holds, encrypted, the one-time code or token Apple gave for your Apple ID, for at most 7 days, so we can ask again. You can also remove Mashcut yourself in your Apple ID settings, under Sign in with Apple. If Apple can't confirm, the app can instead email a one-time code to your account's email address; a deletion confirmed that way can't end Mashcut's access to your Apple ID, the record says so, and the app shows where to remove Mashcut yourself. The code works for 10 minutes, is kept only as a one-way check, and is deleted with your account.
- Deleted sets' IDs: when a set is deleted for good or you delete your account, we keep your account's ID and the set's ID until the second of the two extra sweeps described under Deleting your data and your choices, then delete them.
- Server logs and our providers' copies, including Sentry's error reports and Mixpanel's usage events, are kept for periods each provider sets. RevenueCat keeps its record of your App Store purchases under your former account ID.
- Emails you send us stay in our support inbox.
Deleting your data and your choices
- Delete a set of ads: while you're subscribed, choose Move to Trash on a set in Work or in the set itself. In Trash you can restore it for 7 days; after that, Mashcut deletes it for good. You can also delete it for good sooner, with Delete permanently or Delete all in Trash. A set still being made is deleted at once when you choose Stop and delete. When a set is deleted for good, its clips, files and ads, every version included, are removed from our servers, though records of its processing steps and of the credits it used remain. Files still being uploaded or made at that moment are removed by two more sweeps, 20 minutes after the deletion and 2 hours after that.
- Delete your account: in the app's settings, choose Delete account, with or without a subscription. This permanently removes your account, your answers, your subscription and credit history, and every clip, file, ad and edit stored on our servers. It can't be undone. Files still being uploaded or made at that moment are removed by the same two sweeps as a deleted set's.
- Deleting your account doesn't cancel an App Store subscription. Cancel it in your iPhone's Settings (tap your name, then Subscriptions), or it will keep renewing.
- Notifications, camera and microphone: turn them on or off at any time in your iPhone's Settings.
- Questions or requests about your data: email support@usemashcut.com.
When you delete your account, a few things remain: your account's ID and your sets' IDs until those two sweeps are done, records of each processing step, the record of your subscription's monthly credit allowances, the records of extra-credit purchases, the record of asking Apple to end Sign in with Apple access (if you used it), server and sign-in logs, any backups, and copies our providers hold under their own retention rules, all described under How long we keep it.
How we protect it
- Your uploads and ads are kept in private storage. The app reaches them only through links that expire: 2 hours to upload, including an upload that resumes after a dropped connection, 15 minutes to download, and 90 seconds to watch a preview or open the editor.
- Our database lets each account read only its own records.
- The app keeps your sign-in session in the iPhone's Keychain, which doesn't copy it to other devices.
- Apple's App Attest helps us check that requests come from the genuine Mashcut app.
No system is perfectly secure, but these protections are built into how Mashcut works.
Where your information is stored
Mashcut's database and file storage are in the United States, in Supabase's US West region, and our video worker runs on Fly.io's servers in the United States. Sentry and Mixpanel store what they receive in the United States too. If you use Mashcut from another country, your information is transferred to the United States.
Changes to this policy
When we change this policy, we'll update this page and the date at the top. Our Terms of Service cover the rest of how you use Mashcut.
Contact us
Questions about privacy or your data: support@usemashcut.com.