Privacy Policy
RemakeFlow: Viral Video Maker
Last updated: 6 October 2026
RemakeFlow turns a short-form video you like into a personalized plan for your own content and guides you through recording it. Your recordings never leave your iPhone. There is no account, no advertising and no tracking across apps, and we never sell data.
Who we are
The data controller is Göktuğ Oğuzhan Topal, an individual developer in Türkiye. Contact: support@remakeflow.com.
What we collect and why
Anonymous install. The app registers a random install ID and secret token with our server (we store only a hash of the token) and uses Apple's App Attest to check that requests come from the real app. This runs the service, applies limits and prevents abuse. We don't collect your name, email, phone number, contacts or location.
Videos and links you import. A link (TikTok, Instagram, YouTube) or a video from Photos or the share sheet is used only to analyze how the video is built. For a file, we make a smaller copy and strip its metadata, including GPS. The third-party AI provider receives the video (or, for YouTube, the link). We ask for your consent before the first upload.
Your profile. The creator and product details you type (niche, audience, brand voice, product description and so on) are sent to our server and, together with the analysis, to the AI provider to write your remake.
Analysis and remakes. We keep a written analysis of each imported video (its structure, what it says, its on-screen text) and one small thumbnail, plus the remakes we generate for you. This lets you regenerate a remake or switch its hook. We never keep the source video, and the app never lets you save or share it.
Recordings. Takes, captions and finished videos stay on your iPhone. Captions are timed by Apple's speech recognition on the device. The app can save your video to Photos with add-only permission; it never reads your library.
Usage analytics. We use PostHog (EU) to see where people get stuck. Only a fixed set of usage events is sent, never video links, transcripts, profile text or anything you typed. We don't store IP addresses, only an approximate country. You can turn this off in Profile ("Share usage data").
Purchases. Apple handles payment and gives us no card or name. RevenueCat manages subscription status using your install ID.
Logs and support. Our servers keep short technical logs (IP address, time, request path), without video links or profile text. If you email us, we use your address and message only to reply.
Who receives data
| Recipient | For what | Data |
|---|---|---|
| OpenRouter and Google | AI analysis and writing | Video or YouTube link, analysis, profile. Provider data collection for training is denied |
| Hetzner (Germany, EU) | Our servers and database | Everything our server keeps |
| Apple | Payments, App Attest | Purchase and attestation data |
| RevenueCat | Subscription status | Install ID, purchase data |
| PostHog (EU) | Usage analytics | The events above |
| Cloudflare | DNS, email forwarding, website and its visit statistics | Website visits (aggregate, cookieless statistics), support emails in transit |
| Resend | Sending our support replies | Our reply and your address |
| Google (Gmail) | Our support inbox | Support emails you send us |
Requests with files go only to Google's Vertex AI with zero data retention. YouTube links are processed by Google AI Studio, which keeps requests for up to 55 days. Some recipients are outside the EU/EEA and Türkiye, such as in the United States; we rely on the legal safeguards for such transfers and on your consent for AI processing. If we change providers in a way that affects what you agreed to, we will ask again.
How long we keep data
- Source video files: deleted within 24 hours of analysis. Our nightly database backups never include them, but short-lived system snapshots of the server may hold them for a few more days.
- Analyses, thumbnails, remakes and profiles: on our server until you delete them. Deleting a remake in the app also deletes it on our server. "Delete my data" removes everything tied to your install.
- Database backups: up to 14 days.
- Support emails: as long as needed to help you.
- After deletion, what remains is: anonymous cost records (no link to you), an analysis other users still rely on (it contains nothing about you), and purchase records held by Apple and RevenueCat.
- On your iPhone: until you delete it in the app or delete the app.
Your rights and choices
You can delete your data in the app at any time. You can also email support@remakeflow.com to ask for access, correction or deletion, or to withdraw consent. We usually find your data only through your install ID, and we answer within one month. Deleting the app or your data does not cancel a subscription; manage it in your Apple Account settings.
If you are in the EU/EEA or UK, the GDPR gives you rights including access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. If you are in Türkiye, you have the rights in Article 11 of KVKK (Law No. 6698), and you can apply by email and complain to the KVKK Board.
Children
RemakeFlow is not directed to children under 13, and you must be at least 13 to use it. If a child has used the app, contact us and we will delete the data.
Website
remakeflow.com sets no cookies. We use Cloudflare Web Analytics for aggregate visit statistics: which pages are viewed, which sites people come from, and their country and device type. It uses no cookies, doesn't track you across sites and builds no personal profile. Like any host, Cloudflare processes visitors' IP addresses to deliver the site.
Security
App traffic uses HTTPS, credentials on your phone sit in the iOS Keychain, and the database is not reachable from the internet. If a breach affects you, we will tell you and the authorities as the law requires.
Changes
We will update the date above, and ask again in the app if a change affects what you agreed to.
Contact
support@remakeflow.com, Göktuğ Oğuzhan Topal