Dieses Dokument ist vorerst nur auf Englisch verfügbar.
Trimbo is an app that edits short-form videos with AI. This policy explains what personal data we process, why, who helps us, how long we keep it and what your rights are. We only collect what we need to edit your videos and run your account. We do not sell your data, show ads, track you across apps or use analytics.
1. Who we are
The controller of your personal data is [COMPANY NAME], [ADDRESS], Belgium, enterprise number [ENTERPRISE NUMBER].
For anything about privacy, email privacy@trimbo.app.
2. What we collect and why
| Data | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|
| Email address and password (stored only as a hash) | Signing in, sending sign-in and verification codes | Contract | Until you delete your account |
| Google or Apple sign-in data: email, name, profile picture URL, account ID | Signing in with Google or Apple, if you choose to | Contract | Until you delete your account |
| Display name and profile photo (optional) | Your profile in the app | Contract | Until you change or delete them, or delete your account |
| Your videos, photos, music and voice-overs | Editing your videos | Contract | Until you delete the project or your account |
| Audio and transcripts of your videos, and your corrections | Captions and editing | Contract | Until you delete the project or your account |
| Your prompts, edit plans, project versions and rendered videos | Editing, versions and undo | Contract | Until you delete the project or your account. We keep the 10 most recent rendered versions and recreate older ones on request. |
| Conversations with the creator tools (hooks, ideas, scripts, captions) | Continuing those conversations on any device | Contract | Until you clear them or delete your account |
| Settings (theme, language) and your last 20 prompts | Same experience on every device; emails in your language | Contract | Until you clear them or delete your account |
| When you accepted the terms and confirmed your age | Proof of acceptance and of the minimum age | Legal obligation and legitimate interest | Until you delete your account |
| Your plan and the number of AI requests per day | Applying the limits of your plan | Contract | Plan: until you delete your account. Daily counts: 90 days. |
| Sign-in sessions, including IP address and device type | Keeping you signed in, "sign out everywhere", security | Legitimate interest (security) | Until you sign out or delete your account |
| Technical logs (errors, account or project ID) | Finding and fixing problems | Legitimate interest | Until the project is deleted; server logs according to our hosting provider's retention |
"Contract" means we need the data to provide the service you signed up for (Article 6(1)(b) GDPR). "Legitimate interest" means we need it to keep the service secure and working (Article 6(1)(f) GDPR).
We remove location data and other device metadata from videos when you upload them.
3. How AI processes your content
To edit your video, parts of your content are sent to two AI providers:
- Anthropic (Claude) receives a few still frames per clip, photos you add, the transcript, your prompt and a description of the clips, plus the messages you send to the creator tools. It plans the edit and powers the creator tools. Anthropic does not use this data to train its models by default and deletes it within 30 days, unless longer retention is required to investigate misuse or by law.
- Groq receives the audio of each clip and turns speech into text for captions. We use Groq with zero data retention: Groq does not store the audio after processing it.
The AI only edits your video. It does not make decisions about you that have legal or similarly significant effects.
4. Who helps us
We use the following service providers. They process data only on our behalf and under our instructions.
| Provider | What for | Where |
|---|---|---|
| Supabase | Accounts, database, profile photos | European Union (Frankfurt, Germany) |
| Hetzner Online GmbH | Our server that stores and edits your projects | European Union (Germany) |
| Anthropic | AI editing and creator tools | United States |
| Groq | Speech-to-text | United States |
| Resend | Sending emails with codes | Sent from the EU (Ireland); Resend is a US company |
| Google, Apple | Only if you choose to sign in with them | According to their own privacy policies |
When data goes to a provider outside the European Economic Area, the transfer is protected by the EU-U.S. Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
We do not sell or rent your data and do not share it for advertising.
5. On your device
- Your sign-in session is stored securely in the iOS Keychain or Android Keystore.
- Settings, drafts and conversations are also stored in the app's own storage on your device. Signing out removes your account data; deleting the app removes everything.
- The app asks for access to your microphone only to record voice-overs, and to your photo library only to save videos you choose to save. You pick videos and photos with the system picker, so the app never sees your whole library.
6. Your rights
Under the GDPR you have the right to:
- access your data and get a copy;
- correct inaccurate data;
- have your data deleted;
- restrict or object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw any consent you gave, at any time.
Email privacy@trimbo.app from the address linked to your account. We reply within one month.
You can also file a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), Drukpersstraat 35, 1000 Brussels, Belgium, www.dataprotectionauthority.be, or with the authority in your own country.
7. Deleting your account
You can delete your account in the app under Account → Delete account, or as described at trimbo.app/delete-account. We then delete your projects and all their files, your profile, conversations, plan information and account, and revoke your Apple sign-in if you used it.
Copies can remain in our database backups for up to 7 days, after which they are overwritten. Our AI providers keep data only as described in section 3. A subscription bought through the App Store or Google Play must be cancelled separately in that store.
We keep a record of each deletion, with the former account ID and the time of deletion, for 3 years. It does not contain your email address or content. We need it to show that we handled deletion requests correctly (legal obligation and legitimate interest).
8. Children
You must be at least 13 years old to use Trimbo. If we learn that someone under 13 has created an account, we delete it.
9. Security
All data is sent over encrypted connections (HTTPS). Every request is checked so you can only see and change your own data, also at database level. Passwords are stored only as hashes, and Apple sign-in tokens are encrypted.
10. Website
Our website trimbo.app uses no tracking or advertising cookies and no analytics. It only stores your language choice and whether you have seen the homepage intro in your browser, which is needed for the site to work as you expect (see our Cookie policy). All its files are served from our own website, so visiting it does not send your data to other companies. Our web hosting provider processes technical data, such as your IP address, only to deliver the website and keep it secure. If you email us, we use your message only to answer you.
11. Changes
If we change this policy, we update the date at the top. If the change is significant, we tell you in the app or by email before it takes effect.
12. Contact
[COMPANY NAME], [ADDRESS], Belgium · privacy@trimbo.app