Privacy Policy

1. Introduction

Scriptly ("we," "our," or "us") is operated by:
Boby AI Yazilim Anonim Sirketi
Levazim Mah. Villa 7 No:1/D
Besiktas 34340 Istanbul, Turkiye

Scriptly is a mobile application that allows you to create AI-generated videos from story prompts. This Privacy Policy describes how we collect, use, store, and protect your information when you use Scriptly's video creation features. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

2.1 Account Information

• Device identifier: We collect a unique device ID to identify your account, manage credits, and link your content across sessions. This is used as the primary identifier for anonymous and authenticated users.
• Authentication data: When you sign in (including anonymously), we store your user ID and session information via Supabase Auth.
• Profile information (optional): If you choose to provide it, we collect your display name and profile picture (avatar) for your account.

2.2 Video Creation Data

When you create a video, we collect and process:

• Story prompt: The text description or idea you enter to generate your story.
• Plot and scenes: AI-generated and user-edited plot summaries and scene breakdowns.
• Character information: Character names, descriptions, and reference images you upload for character consistency in your video.
• Scene content: AI-generated image prompts, video prompts, scene descriptions, and related metadata (for example camera angles, lighting, locations).
• Generated media: Scene images (start and end frames) and the final video produced by our AI systems.
• Preferences: Style template, aspect ratio (for example 9:16), and other creative settings you select.

2.3 Subscription and Payment Information

• Subscription status: We track whether you have an active Pro subscription to provide premium features and weekly credits.
• Purchase events: RevenueCat processes in-app purchases (subscriptions and credit packs) on our behalf. We receive purchase confirmations and subscription status updates via webhooks; we do not store your payment card details.

3. How We Use Your Information

3.1 Video Creation

Your story prompt, plot, character data, and scene content are sent to our AI processing backend (hosted on RunPod) to:

• Generate story plots and scene breakdowns
• Generate detailed scene descriptions, image prompts, and video prompts
• Generate scene images (start and end frames)
• Generate the final video

This processing is necessary to provide the core video creation service.

3.2 Storage and Delivery

• Database: Your account data, stories, storyboards, scenes, and metadata are stored in Supabase.
• Media storage: Generated images and videos are stored on Bunny CDN and delivered to you via secure URLs. Character reference images you upload are also stored on Bunny CDN.
• Backups: We retain data for service continuity and error recovery.

3.3 Credits and Subscriptions

• Credits: We track your credit balance to enable scene and video generation. Credits are deducted when you generate storyboards and videos.
• Weekly credits: Pro subscribers receive weekly credits; we use your subscription metadata to calculate and add these credits.
• Purchases: RevenueCat and the applicable app store (Apple App Store or Google Play) process payments. We receive purchase status to update your subscription and credit balance.

4. Third-Party Services

We use the following third parties in the video creation flow:

Each service has its own privacy policy. We recommend reviewing their policies for additional details.

5. Data Retention

• Account and content: We retain your account data and created content for as long as your account exists. You can initiate account deletion in the Scriptly iOS app under Settings > Delete Account. Under our current product policy, this process deactivates your account, hides your content from the app experience, and removes public visibility rather than fully purging every retained record.
• Generated media: Images and videos are stored to allow you to access and download your creations. We may delete content after a period of inactivity or as required by our data retention policy.
• Logs: Server and processing logs may be retained for debugging, security, and compliance for a limited period.

6. Data Security

• We use industry-standard encryption (HTTPS/TLS) for data in transit.
• Authentication is managed through Supabase Auth with secure session handling.
• Access to backend systems is restricted and authenticated.
• Our AI processing pipeline receives only the data necessary for generation and does not use it for training models unless separately agreed.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of certain data processing

You can initiate account deletion in-app from Settings > Delete Account. For access, correction, export, or other privacy requests, contact us using the details below.

8. Children's Privacy

Scriptly is not intended for children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us and we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app or via other appropriate channels. Your continued use of Scriptly after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Company: Boby AI Yazilim Anonim Sirketi
• Support Email: boby@boby.ai
• Website: https://boby.ai

This policy applies to the Scriptly video creation flow. Other features or future services may involve additional data practices, which will be described in updates to this policy or in separate notices.