Privacy Policy
Version 1.1 · Effective 27 August 2026 · Last updated 9 September 2026
The short version. FilMode edits video on your device. Your clips are not uploaded, we do not require an account, we do not track you across other apps, and we do not sell personal data. Two things do leave the device: anonymous usage and crash diagnostics, which you can switch off in the Me tab; and one reward video you have to tap to play, served without personalisation. This policy explains exactly what each of them sends.
1. Who we are
FilMode is developed and published by FightTech ("we", "us"). For the purposes of the EU and UK General Data Protection Regulation, FightTech is the data controller for the limited personal data described below.
Postal address and company registration details are listed in section 16.
2. What this policy covers
This policy covers the FilMode Android application, published as
app.filmode.videomaker, and the website at
videomaker.filmode.app.
It does not cover Google Play itself. When you install the app or buy a subscription, Google acts as the merchant and applies its own privacy policy to that transaction.
We also publish ProCut, a cross-platform edition of the same editor. The two are separate apps with separate storage: nothing you make in one is visible to the other, and this policy speaks only for this one.
3. What we collect — and what we don't
3.1 Your video, photos and audio
Media you import stays on your device. Import, preview, effects, transitions, text rendering and export all run locally through your device's own hardware codecs. FilMode does not upload your media, does not scan it, and does not send thumbnails, frames or audio anywhere — not for ordinary editing, and not for the diagnostics described in 3.4. You can verify this by putting the device in airplane mode: the editor keeps working, end to end, including 4K export.
3.2 Your projects
Project files (the list of clips, cuts, effects and settings) are stored in the app's private storage on your device. They are removed when you delete the project or uninstall the app.
3.3 What we do not collect
- No account, name, email address or phone number is required to use FilMode.
- No tracking of you across other apps or websites. FilMode does show one opt-in reward video (see 3.5), but it is served without personalisation, so the app never joins a cross-app advertising profile.
- No contacts, calendar, location or health data.
- No copy of your media, your captions or your project names. Analytics events describe the shape of your work — how many clips, how long the timeline is, which transition you picked — never its content. Project names are reduced to an eight-character hash before they leave the device, and text events carry a character count instead of the text.
3.4 Usage and crash diagnostics
FilMode includes Google Firebase Analytics and Firebase Crashlytics so we can see which features people actually use and get a stack trace when the app crashes. This is the only reason FilMode opens a network connection during ordinary editing.
You can turn it off. Open the Me tab and switch off Share anonymous usage and crash data. Collection stops immediately and nothing further is sent. Everything else in the app keeps working exactly the same — the editor has never needed the network.
When it is on, we receive: the name of the feature you used and its numeric parameters (clip counts, durations in seconds, export resolution, catalog IDs of the filters and transitions you chose), your device model, OS version, language, app version, a coarse device tier (low/mid/high), and crash stack traces. Firebase also assigns a random app-instance identifier so repeat sessions can be counted as one device; it is not your advertising ID, it is not linked to any account, and it is destroyed when you uninstall the app.
3.5 The reward video
FilMode has no banners and no pop-up ads. There is exactly one ad in the app: a reward video you can tap on the store screen to unlock every Pro filter for 24 hours, capped at five a day. It never plays on its own, never interrupts editing or export, and is not offered at all to Pro or Lifetime customers — on those devices the ad SDK is never even started.
The videos are served by Unity Ads (Unity Technologies). When you tap the card, Unity receives your device's advertising ID, device model, OS version and coarse country so it can pick a video, count the view and stop you being shown the same clip over and over. FilMode sets Unity's non-behavioural flag on every request, which means ads are chosen from the context alone: your ad ID is not used to build an interest profile, and nothing about your projects, media or usage of FilMode is sent to Unity.
How to switch it off. Simply never tap the card — no ad ever loads. You can also reset or delete your advertising ID in your device settings (Settings → Google → Ads → Delete advertising ID), or remove the ad entirely by buying any paid tier. Unity's own privacy policy is at unity.com/legal/game-player-and-app-user-privacy-policy.
The table below is the same information we declare in the Google Play Data safety form. If the two ever disagree, treat the Play declaration as the one we are bound by and please tell us so we can fix the mismatch.
| Data | Collected? | Why | Leaves device? |
|---|---|---|---|
| Photos and videos | Used on device | To edit them | No |
| Audio you import | Used on device | Music and sound in your project | No |
| Project files | Stored on device | To reopen your work | No |
| Purchase status | Yes | To unlock what you paid for | Handled by Google Play |
| Crash diagnostics | Yes, unless you switch it off | To fix crashes | Yes — to Firebase Crashlytics |
| Feature usage counts | Yes, unless you switch it off | To see what to improve | Yes — to Firebase Analytics |
| App-instance identifier | Yes, unless you switch it off | To count devices, not people | Yes — to Firebase Analytics |
| Support emails | Yes, if you write to us | To answer you | Yes, to our mail provider |
| Advertising ID | Only if you tap the reward video | To serve and frequency-cap that one video | Yes — to Unity Ads, non-personalised |
| Location | No | — | — |
| Contacts | No | — | — |
4. Device permissions
FilMode asks for exactly one permission, and only on Android 7, 8 and 9. On Android 10 and later it asks for nothing and you will never see a permission prompt from this app.
| Permission | Requested? | How the feature works |
|---|---|---|
| Storage / files | Android 7–9 only | Asked once, when you save a finished video, so the file can be copied into your Gallery instead of staying in a folder that uninstalling would wipe. Say no and the export still succeeds — the video simply stays in the app's own folder. On Android 10 and later the same copy needs no permission, so nothing is asked. |
| Photos / media library | No | Clips come in through the system photo picker and the Storage Access Framework. Those hand the app one file at a time, chosen by you — no library-wide access is ever granted. |
| Camera | No | FilMode does not record video. Shoot with your camera app, then import the clip. |
| Microphone | No | FilMode does not record audio. Narration is synthesised from text you type; imported music is a file you pick. |
| Notifications | No | Export runs on screen while you watch it, so there is nothing to notify you about. |
| Location, contacts, calendar, phone | No | Not used by any feature. |
That storage permission is declared with
android:maxSdkVersion="28", which means Android removes it
outright from any device running 10 or later — it is not dormant there, it is
absent.
The rest of the manifest is permissions granted at install time, which never
prompt and cannot read your files: INTERNET and
ACCESS_NETWORK_STATE (the reward video, update checks and the one-off
caption language pack), com.google.android.gms.permission.AD_ID for
the optional reward video, and a set the Google and Unity advertising libraries
declare for their own scheduling — WAKE_LOCK,
RECEIVE_BOOT_COMPLETED, FOREGROUND_SERVICE, the install
referrer service, and the three ACCESS_ADSERVICES_* entries. Those
last ones show up in the Play listing and look odd on a video editor; they belong
to those libraries, and FilMode's own code calls none of them.
5. AI features run on your device
Every AI feature in FilMode runs on your own phone. There is no server-side AI, no queue, and nothing to upload — not optionally, not on request, not at all.
- Automatic captions — the speech in your clip is recognised by the phone itself, offline, and turned into ordinary text clips on the timeline. The audio never leaves the device and we never receive it.
- Background separation, beat detection, Ken Burns motion — the same rule: computed locally from media already on your phone.
- No credits, no AI subscription. We do not sell credits or any pay-per-use AI. Because these features cost us nothing to run, they are free on every plan, with no usage limit.
- Language packs. The on-device speech engine needs a language model, which is downloaded once from the platform vendor when you first ask for that language. That download is a file coming down; nothing about your project goes up with it.
No media, no audio and no project data ever leaves your device. The whole app, AI included, works in airplane mode.
6. Purchases and subscriptions
All payments are processed by Google Play. We never see or store your card number, billing address or bank details. We receive only an anonymous receipt confirming that a purchase is valid, which is what unlocks paid features and lets you restore purchases on a new device.
7. If you contact support
When you email us we receive your email address, your message, and anything you choose to attach (for example a log file or a screen recording). We use it only to answer you. Please do not attach footage you are not comfortable sharing — we do not need your video to fix most problems.
8. Legal bases (EEA/UK)
| Processing | Legal basis |
|---|---|
| Validating a purchase | Performance of a contract (Art. 6(1)(b)) |
| Answering a support request | Legitimate interests (Art. 6(1)(f)) — supporting our users |
| Crash reports and feature-usage analytics | Legitimate interests (Art. 6(1)(f)) — app stability and deciding what to build next. The switch in the Me tab is how you exercise your right to object under Art. 21; we act on it immediately and ask for no reason. |
| Serving the reward video you tapped | Consent (Art. 6(1)(a)) — the tap is the consent, and there is no other way for the ad to load. Withdraw it by not tapping again. |
| Keeping records required by tax or consumer law | Legal obligation (Art. 6(1)(c)) |
9. How long we keep things
- Your media and projects — on your device, for as long as you keep them. We hold no copy.
- Usage analytics — retained by Firebase for 14 months, then deleted automatically.
- Crash reports — retained for 90 days.
- Reward-video ad requests — retained by Unity under its own policy; we receive only an aggregate count of views and revenue, with no per-device detail.
- Support correspondence — up to 24 months, then deleted.
- Purchase records — as long as accounting and tax law requires.
10. Who we share data with
We do not sell personal data, and we do not "share" it for cross-context behavioural advertising as those terms are defined under California law. We disclose data only to:
- Google, for distributing the app and processing payments through Google Play;
- Google Firebase (Analytics and Crashlytics), for the diagnostics described in 3.4 — unless you have switched them off;
- Unity Ads, and only at the moment you tap the reward video described in 3.5. Because we set the non-behavioural flag, this is a disclosure for serving a contextual ad, not a sale or a cross-context behavioural share;
- our email provider, to receive and answer your support messages;
- authorities, where we are legally required to and after checking that the request is valid and proportionate.
11. International transfers
Our processors may operate outside your country, including outside the EEA and the UK. Where that happens we rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or an adequacy decision, as applicable.
12. Your rights and choices
Depending on where you live you may have the right to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. Because FilMode holds almost nothing about you, most requests are answered quickly.
- Delete everything locally — uninstalling the app removes your projects and its cache. See Delete my data for step-by-step instructions.
- Ask us to delete server-side data — email [email protected]. We answer within 30 days.
- Complain — you may lodge a complaint with your local data protection authority. We would appreciate the chance to fix it first.
We do not charge for these requests and we do not discriminate against you for making one.
13. Children's privacy
FilMode is not directed at children under 13 (or under 16 where local law sets a higher age), and we do not knowingly collect personal data from them. The app is rated accordingly on Google Play. If you believe a child has provided us with personal data, contact us and we will delete it.
14. Security
The diagnostics and ad requests described above travel over TLS. Project files sit in the app's private, sandboxed storage, protected by your device's own encryption. No system is perfectly secure, but keeping editing and AI local means there is very little about you for anyone to breach in the first place.
15. Changes to this policy
If we make a material change we will update the date at the top, and — for anything that meaningfully changes what leaves your device — show a notice in the app before the change takes effect. Previous versions are available on request.
16. Contact us
Privacy enquiries: [email protected]
General support: [email protected]
Postal: FightTech — [registered address]
We aim to reply within 5 working days, and within 30 days for formal data rights requests.