Privacy Policy

PubliShare is operated by Highglossy FZE, a company registered in the United Arab Emirates, with its registered office at Al Shmookh Business Center, One UAQ, UAQ Free Trade Zone, Umm Al Quwain, U.A.E. (“we”, “us”). For the purposes of the UK and EU General Data Protection Regulation, we are the data controller for the personal data described here.

Questions, requests and complaints: privacy@highglossy.com.

• Your footage stays on your device. Cutting and rendering run locally; a video leaves the phone only when you publish or share it.
• A team needs an account. To invite colleagues and share templates we hold an account identifier, the name you choose and, where you share it, your email, plus your role in each team.
• Team libraries live on our servers. Templates, brand fonts, music, stickers and watermarks that a team uploads are stored so every member can use them.
• We do see: purchase records and crash reports. No ads, no selling of personal data.

• Photos and videos. The app reads the media you pick from your library and writes the result back. Footage is not uploaded unless you place it in a shared template.
• Publishing. A finished video goes to the social network you choose through its own app or the system share sheet; we never hold your social-network credentials.

Every category we hold, why we hold it, the lawful basis and how long we keep it:

• Account: a random identifier, the display name you choose, your email where you share it — To sign you in, to show colleagues who you are and to deliver team invitations. Basis: Contract (Art. 6(1)(b) GDPR). Kept: until you delete the account.
• Team membership and roles: which teams you belong to and what you may do in each — To enforce the access each team configured. Basis: Contract (Art. 6(1)(b) GDPR). Kept: until you leave the team or the team is deleted.
• Team libraries: templates, fonts, music, stickers, watermarks and project metadata uploaded to a team — To share them with the team's members. Basis: Contract (Art. 6(1)(b) GDPR). Kept: until the team removes them or is deleted.
• Purchase records: product, store transaction identifier, status — To unlock the version you paid for and restore it on a new device. Basis: Contract (Art. 6(1)(b) GDPR). Kept: life of the account, then 7 years where tax law requires.
• Crash and error reports: stack traces, device model, OS version, app version — To find and fix defects. Basis: Legitimate interests (Art. 6(1)(f) GDPR). Kept: 90 days.
• Support correspondence: your email address and what you write to us — To answer you. Basis: Legitimate interests (Art. 6(1)(f) GDPR). Kept: 24 months.

We do not sell personal data and we do not use it for advertising or profiling.

We use a small number of processors. Each is bound by a data processing agreement and may use the data only to provide the service to us.

• Apple — payment processing for in-app purchases. Apple takes the payment; we never see your card number or billing address. Your relationship for the payment itself is with the App Store, under Apple's own privacy policy.
• Crash reporting (Sentry, hosted in the European Union) — receives stack traces, device model, OS and app version. Crash reports carry no IP address and no user identifier.
• Our hosting provider — runs the servers and object storage holding accounts and team libraries.

We also disclose data where we are legally compelled to: to comply with a legal obligation, to protect our rights or property, to investigate possible wrongdoing in connection with the app, or to protect the safety of users or the public.

Within a team, the members and administrators of that team see your display name, your role and what you upload to the team library. Team administrators decide who is in the team; we do not.

We do not sell personal data, and we do not share it for cross-context behavioural advertising.

The section above gives the retention period for each category. When you delete your account or ask us to, we delete the records that identify you; backups are purged on a rolling 30-day cycle. We keep purchase records where tax or accounting law obliges us to, and aggregated statistics that no longer identify anyone.

Our servers and those of our processors may be located outside your country, including in the United Arab Emirates and the European Union. Where personal data leaves the UK or the EEA, the transfer relies on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum or an adequacy decision, as applicable.

Wherever you live, you can ask us to:

• Give you a copy of the personal data we hold about you, in a portable format.
• Correct anything inaccurate.
• Delete your data. You can do this yourself in the app; we will also do it on request.
• Restrict or object to processing we carry out on the basis of legitimate interests.
• Withdraw consent, for example for notifications by turning them off in your device settings, without affecting what we did before you withdrew it.

Write to privacy@highglossy.com. We respond within 30 days.

If you are in the UK or the EEA, you may also complain to your data protection authority: in the UK the Information Commissioner's Office, in the EEA the supervisory authority where you live.

Under the CCPA as amended by the CPRA, in the last 12 months we collected the categories described above for the business purposes stated there, from you and from your device. We have not sold personal information and we have not shared it for cross-context behavioural advertising. We have no actual knowledge of selling the personal information of consumers under 16.

You have the right to know, delete, correct, and to be free from discrimination for exercising those rights. Exercise them at privacy@highglossy.com.

PubliShare is not directed to children and is not intended for anyone under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with data, write to privacy@highglossy.com and we will delete it.

Data in transit is protected with TLS. Access to our systems is limited to the people who need it to run the service and is logged. No system is perfectly secure, and we will not claim otherwise; if a breach affects your personal data, we will notify you and the competent authority as the law requires.

We will update this policy when what we do changes. The date at the top always reflects the current version. If a change materially reduces your rights or widens what we collect, we will tell you in the app before it takes effect.

Highglossy FZE, Al Shmookh Business Center, One UAQ, UAQ Free Trade Zone, Umm Al Quwain, U.A.E.

Support: support@highglossy.com · Privacy: privacy@highglossy.com