Privacy policy

Your recordings and your app settings are kept only in your phone's storage and are never uploaded to the cloud. Subtitle files (.srt, .json and .md) are also created on the phone. Without an account, your scripts also stay only on the device.

• Email and password: to sign in. The password is stored as a hash, and no one can read it, not even us.
• Scripts (Pro only): title, text and the dates they were created, edited and deleted, to show the same scripts on all your devices. The title and text are encrypted (AES-256-GCM) before they're saved on the server, and the key isn't kept in the database.
• Purchases: the App Store or Google Play purchase ID, the plan and the expiration date, to confirm that Pro is active. We don't receive your card details.
• Technical sign-in data: when you sign in, the sign-in system records the IP address, the date and time of access and information about the browser or device used (the “user agent”), to protect the account from misuse.
• Account identifier: an internal account code (not your email) is sent to the App Store or Google Play with the purchase, to link the purchase to the account.
• AI credits: your balance, the history of credits earned and spent, your AI usage (action, size and date, without the content) and your consent to use AI. They are deleted along with the account. So the free trial counts once per device, we also keep a one-way code (hash) of a random identifier created by the app, which does not identify you and is kept after the account is deleted.

This data is used only to make the account and the cloud work, and each person can access only their own data.

We process account and cloud data because it's needed to provide what you asked for when you created the account and subscribed to Pro (performance of a contract, art. 7, V, of Brazil's General Data Protection Law, the LGPD). Technical sign-in data is processed to keep the account and the service secure (legitimate interest).

• Supabase: stores the account, sign-in, the encrypted scripts and the purchase records.
• Resend: sends account emails, such as the confirmation code and password reset.
• Vercel: hosts this website. As with any website, it receives technical data from visitors, such as the IP address. It also counts visits with Vercel Web Analytics, without cookies and without identifying you: pages viewed, country and browser type.
• Product Hunt and LaunchBuff: the footer of this website shows badges from these two services. When a page opens, your browser fetches their images and they receive your IP address and the page it came from. This only happens on the website; the app does not use these services.
• Google Gemini: Google's AI, which processes the text and images you send when you use the app's AI. We only send something when you use AI and accept the notice. If you paste links in a “Generate with AI” request, our server downloads those public pages only to hand their text to the AI, and nothing else. Processing happens in the United States. Roteiro does not store that text or those images, and Google does not use them to train its AI, under the rules of its paid API. After you accept in the app, you can withdraw your consent by asking support; the AI then stops working for your account.

These providers process data on Roteiro's behalf, only for these purposes, and adopt security measures. Supabase's servers are in the United States, and the other providers' servers may also be outside Brazil. So account data is stored and processed outside Brazil. Payments are handled by the App Store or Google Play, under their own privacy policies.

Account data is kept for as long as the account exists. So are cloud scripts: if Pro ends, the scripts already there stay stored, without new updates, until you delete the account. When you delete the account, the account, the cloud scripts, the purchase records and the AI credits, usage history and AI consent are deleted right away. We keep only a one-way code (hash) of a random device identifier, which does not identify you, so the free AI trial can't be claimed again on the same device. Supabase's automatic backups and technical sign-in logs (such as IP address and access date) and Resend's email delivery logs are deleted within those services' own time frames.

• Camera: to record video while the text scrolls on screen.
• Microphone: to record the video's audio and, if you turn on “Follow my voice”, to notice when you're speaking. The sound isn't transcribed or sent anywhere. When you dictate a “Generate with AI” request, the app uses your phone's system speech recognition (Apple or Google), which may process the audio on their servers, depending on the device and language. The audio never goes to our server or to the AI, only the text you confirm.
• Photos: only to add a take to your gallery when you ask. The app doesn't read your photos.
• Display over other apps and notifications (Android): to show the mini prompter on top of other apps while it's open.

You can deny or revoke any permission in your system settings. The app keeps working for everything that doesn't depend on it.

The app has no ads, analytics tools, tracking or data sales, and no third-party service receives data about how you use it. The website only has the visit counting described under “Service providers”.

Roteiro isn't made for children. Without an account, the app doesn't collect data from anyone. If a child created an account, delete it in the app or contact us.

Delete scripts and recordings inside the app. If you have an account, delete it in Settings › Account › Delete account: your email, the scripts stored in the cloud, the purchase records and your AI credits, usage history and AI consent are deleted right away. We keep only a one-way code (hash) of a random device identifier, which does not identify you, so the free AI trial can't be claimed again on the same device. If you no longer have the app, email the address below from your account's address. We reply within 15 days, and deletion requested by email is completed within 30 days. Then uninstall Roteiro to erase what's left on the device. Videos you saved to your gallery stay there until you delete them.

To delete the account in the app or by email, see the delete account page.

Under the LGPD, you can ask at any time for:

• Access: to know which account data we keep and receive a copy of it.
• Correction: to fix incomplete or wrong data.
• Deletion: to delete the account and the data linked to it, as explained above.
• Portability: to receive your scripts in an open format. In the app, Settings › Backup and storage exports your scripts as JSON whenever you want.
• Withdrawal: to stop using the account and the cloud by signing out or deleting the account. Without an account, the app keeps working on the device.

To make a request, email the contact address at the end of this page from your account's email. We reply within 15 days, and deletion requested by email is completed within 30 days. You can also file a complaint with Brazil's National Data Protection Authority (ANPD).

If this policy changes, the new version will be published on this page with the updated date.

Roteiro is developed by Roniel Santos. Privacy questions: ronielljesuss@gmail.com.