Privacy Policy
Last updated: 2 July 2026
Driftwood Productions (UK) Ltd (Company No. 07599881, registered office Queens Gardens, Brighton, BN1 4AR) is the data controller for personal data processed through AI Shooter. This policy explains what we collect, why, and your rights under the UK GDPR and the Data Protection Act 2018.
1. Our privacy-first design
AI Shooter is built to hold as little of your data as possible. The images, videos and reference files you generate or upload are stored on your own device (and sent directly to the AI providers you connect) — they are not uploaded to or stored on our servers.
2. What we collect and why
| Data | Why | Processor |
|---|---|---|
| Email address & account/login details | To create and secure your account | Clerk |
| Subscription status | To give you access to the paid app and manage renewals | Supabase / Stripe |
| Payment details (card etc.) | To process your £10/mo subscription | Stripe — we never see or store your card number |
| Your third-party provider API keys | So the app can call the engines you choose, on your behalf | Supabase — stored encrypted at rest |
| Basic usage / render-cost logs | To show cost estimates and keep the service working | Supabase |
3. Your API keys
The provider API keys you add are encrypted before they are stored and are used only to make the requests you initiate to your chosen providers. They are never shared with anyone else and are never used with the owner's own accounts. You can remove your keys at any time in the app.
4. Lawful bases
- Contract — to provide the app you subscribe to (account, subscription, calling providers with your keys).
- Legitimate interests — to keep the Service secure, prevent abuse, and show cost estimates.
- Legal obligation — to keep records required by law (e.g. tax).
5. Sharing your data
We share data only with the processors that run the Service — Clerk (authentication), Supabase (database), Stripe (payments) — and with the AI providers you choose to connect (your requests and keys go directly to them under their own privacy policies). We do not sell your personal data.
6. International transfers
Some processors and providers operate outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards (such as UK-approved standard contractual clauses or adequacy decisions).
7. Retention
We keep account and subscription data for as long as your account is active, and for a reasonable period afterwards to meet legal and accounting obligations. Encrypted API keys are kept until you delete them or close your account.
8. Your rights
Under UK GDPR you have the right to access, correct, delete or port your personal data, to object to or restrict certain processing, and to withdraw consent where relevant. To exercise any of these, email support@ai-shooter.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
9. Cookies
The app uses only cookies and local storage that are strictly necessary to sign you in and run the Service (for example, your authentication session). We do not use advertising or third-party tracking cookies.
10. Changes
We may update this policy from time to time; the "last updated" date above will change accordingly. Material changes will be notified in the app or by email where appropriate.
11. Contact
Data-protection queries: support@ai-shooter.com
Driftwood Productions (UK) Ltd, Queens Gardens, Brighton, BN1 4AR, United Kingdom.