Privacy Policy
Last updated: May 2025 · Effective for all versions of Captive
This Privacy Policy explains how Captive ("we", "our", or "the app") collects, uses, and protects your information when you use our iOS application. By using Captive, you agree to the practices described here.
1. Information We Collect
We collect only what is necessary to provide the service.
- Account data: A unique anonymous user ID is created automatically when you first launch the app (via Firebase Anonymous Authentication), before you create an account. If you register, we also store your email address.
- Content you create: The topics you type and the captions we generate for you are stored in our database so you can access your history.
- Usage data: We record how many caption sets you generate per day to enforce fair usage limits.
- Device information: Platform (iOS/Android) and, if you grant permission, a push notification token to deliver app notifications.
- Analytics: Aggregate, non-personally-identifiable usage statistics (e.g. which features are used) via Firebase Analytics. We do not log caption text or your email in analytics events.
2. How We Use Your Information
- To generate captions via an AI model on your behalf
- To save your caption history and bookmarks
- To enforce daily usage limits for free users
- To manage your subscription (Premium tier)
- To send optional push notifications (only if you grant permission)
- To improve the app through aggregate analytics
3. Third-Party Services
We use the following third-party services. Each has its own privacy policy.
- Google Firebase — Authentication, database (Firestore), and analytics. Firebase Privacy
- Anthropic Claude — AI model that generates captions. Your caption topic text is sent to our server-side proxy, which forwards it to Anthropic. No personally identifiable information (name, email, UID) is included in AI requests. Anthropic Privacy
- RevenueCat — Subscription and in-app purchase management. RevenueCat Privacy
- Expo / Expo Push — Push notification delivery infrastructure.
- Apple / Google — If you choose to sign in with Apple or Google, their OAuth services are used. We receive only the information they provide (name, email).
4. Data Retention
Your data is retained as long as your account is active. If you delete your account (available in Settings → Delete Account), all your captions, usage records, and profile data are permanently deleted from our database. Push notification tokens are removed at logout.
5. Your Rights (GDPR)
If you are located in the European Economic Area, you have the right to:
- Access the data we hold about you
- Delete your account and all associated data (via Settings → Delete Account, or by emailing us)
- Portability — request an export of your data by contacting us
- Object to processing — contact us at captiveapp.support@gmail.com
6. Children's Privacy
Captive is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
7. Security
We use Firebase Security Rules to ensure users can only access their own data. All data is transmitted over HTTPS. We do not store passwords — authentication is handled by Firebase and Apple/Google OAuth.
8. Changes to This Policy
We may update this policy as the app evolves. We will update the "Last updated" date at the top and, for significant changes, notify you through the app. Continued use after changes constitutes acceptance of the updated policy.
9. Contact
For any privacy questions or requests, please contact:
Gordan Valenta
captiveapp.support@gmail.com