Camlit Privacy Policy
Effective 22 October 2026 (22/10/2026). Operated by ANNA DAO PTY LTD.
Camera, microphone and local content
Camera and microphone access let you record. Photos access lets you choose a photo for beauty editing or save a video. Recordings, beauty, voice processing, silence cutting and documents you import are processed on your device. Scripts are stored on your device and are sent to our servers only when you request an AI industry-template draft. Recorded audio and video are not uploaded. Exported videos and device backups remain under your storage controls.
AI features that send content
Currently, Industry templates send the industry, language, goal, length and your three short answers only when you request an AI draft, through our Cloudflare AI service to Anthropic. This content is used to answer the request and is not stored in our AI database; usage records are described below.
Sharing to social apps
The app saves exported videos to Photos when you choose to save. You decide where to post the saved file. Camlit does not connect social channels or post on your behalf in this version.
Apple and Google sign-in
You can use recording and the teleprompter without an account. If you sign in with Apple or Google, we process the provider account identifier, provider name, verified email when available (including an Apple private relay address), our account ID, creation time and session records. Cloudflare Workers handles authentication and Cloudflare D1 stores account and session data. We do not store provider profile photos, names or provider access tokens. The app stores its session credentials in the iOS Keychain.
Session and security retention
Access tokens expire after 15 minutes. Refresh tokens expire 60 days after issue or the latest rotation; the server stores only their SHA-256 hashes. Used Apple and Google identity tokens are represented by hashes to prevent reuse until expiry. Rate limiting stores a keyed hash of the IP address and minute, not the raw IP in D1. A daily cleanup removes expired sessions, rate-limit records and replay hashes, normally within approximately 24 hours after expiry. Account records remain until account deletion. Cloudflare backup and recovery copies follow platform retention and are not immediately erased by deleting live records.
AI storage, limits and operational logs
Our AI database does not store transcripts, profiles or generated text. It retains request IDs, day, a hash of the account or installation identifier, quota and budget values, request state, token totals and estimated cost for usage control. Operational logs include request IDs, timestamps, the identifier hash, model, token usage, estimated cost and transcript/profile lengths, not their contents. These usage records remain separate from account records and are not automatically removed by account deletion. Daily request limits and a shared service budget apply; attempted requests can consume a limit even if generation fails. The daily boundary is midnight UTC+7. Anthropic processes submitted content under its commercial terms and data retention policy.
Apple purchases
Apple processes payments. Camlit uses StoreKit product information, verified purchase status, expiration and revocation information to provide and restore access. We do not receive your full payment-card details. Apple processes account and purchase information under its own privacy policy.
Analytics, sharing and support
Camlit does not use third-party app analytics or crash-reporting SDKs. This website does not set analytics cookies or load third-party tracking scripts. Cloudflare processes connection information to deliver and protect the website and APIs; AI operational logs are described above. We do not sell personal information or use recordings for targeted advertising. Apple, Google, Cloudflare and Anthropic process the information needed for their respective services, potentially across countries. If you email hang.dao.bbb@gmail.com, we receive the details you provide to answer your request. Information may also be disclosed where required by applicable law.
Your choices and account deletion
Control camera, microphone, Photos and speech permissions in iOS Settings. To delete your account, open the Account tab, then Camlit account, then Delete account and complete the confirmations. Apple sign-in may require you to authenticate again. Successful deletion removes your account and all its sessions from the live authentication database. Local scripts, recordings, exported copies, separate AI usage records and Apple purchase records are not deleted by this action. Deleting an account or the app does not cancel an Apple subscription. You can request access, correction or deletion, or raise a privacy concern, by emailing hang.dao.bbb@gmail.com. We will investigate and respond.