CamLit Privacy Policy
Effective 21 October 2026 (21/10/2026). Operated by ANNA DAO PTY LTD.
Camera, microphone and local content
Camera and microphone access let you record. Photos access is used when you choose to save a video. Scripts, recordings and appearance and voice processing for recording stay on your device. Speech transcription for AI Remix requires on-device speech recognition; audio is not uploaded by this feature. Exported videos and device backups remain under your storage controls.
Apple and Google sign-in
You can use recording and the teleprompter without an account. If you sign in with Apple or Google, we process the provider account identifier, provider name, verified email when available (including an Apple private relay address), our account ID, creation time and session records. Cloudflare Workers handles authentication and Cloudflare D1 stores account and session data. We do not store provider profile photos, names or provider access tokens. The app stores its session credentials in the iOS Keychain.
Session and security retention
Access tokens expire after 15 minutes. Refresh tokens expire 60 days after issue or the latest rotation; the server stores only their SHA-256 hashes. Used Apple and Google identity tokens are represented by hashes to prevent reuse until expiry. Rate limiting stores a keyed hash of the IP address and minute, not the raw IP in D1. A daily cleanup removes expired sessions, rate-limit records and replay hashes, normally within approximately 24 hours after expiry. Account records remain until account deletion. Cloudflare backup and recovery copies follow platform retention and are not immediately erased by deleting live records.
AI Remix and Anthropic
When you confirm an AI Remix request, the app sends the source transcript, selected language, duration, goal, number of variants and brand profile to our Cloudflare AI service. The profile can include your name, niche, persona, voice samples, audience needs, offers, calls to action and wording preferences. Anthropic receives the transcript to extract its structure, then the structure and profile with your requested settings to generate text. The writing request does not include the original transcript. Review what you submit and avoid sensitive information you do not want processed by AI.
AI storage, limits and operational logs
Our AI database does not store transcripts, profiles or generated text. It retains request IDs, day, a hash of the account or installation identifier, quota and budget values, request state, token totals and estimated cost for usage control. Operational logs include request IDs, timestamps, the identifier hash, model, token usage, estimated cost and transcript/profile lengths, not their contents. These usage records remain separate from account records and are not automatically removed by account deletion. Daily request limits and a shared service budget apply; attempted requests can consume a limit even if generation fails. The daily boundary is midnight UTC+7. Anthropic processes submitted content under its commercial terms and data retention policy.
Apple purchases
Apple processes payments. CamLit uses StoreKit product information, verified purchase status, expiration and revocation information to provide and restore access. We do not receive your full payment-card details. Apple processes account and purchase information under its own privacy policy.
Analytics, sharing and support
CamLit does not use third-party app analytics or crash-reporting SDKs. This website does not set analytics cookies or load third-party tracking scripts. Cloudflare processes connection information to deliver and protect the website and APIs; AI operational logs are described above. We do not sell personal information or use recordings for targeted advertising. Apple, Google, Cloudflare and Anthropic process the information needed for their respective services, potentially across countries. If you email hang.dao.bbb@gmail.com, we receive the details you provide to answer your request. Information may also be disclosed where required by applicable law.
Your choices and account deletion
Control camera, microphone, Photos and speech permissions in iOS Settings. To delete your account, open CamLit Settings, then Account, then Delete account and complete the confirmations. Apple sign-in may require you to authenticate again. Successful deletion removes your account and all its sessions from the live authentication database. Local scripts, recordings, exported copies, separate AI usage records and Apple purchase records are not deleted by this action. Deleting an account or the app does not cancel an Apple subscription. You can request access, correction or deletion, or raise a privacy concern, by emailing hang.dao.bbb@gmail.com. We will investigate and respond.