WipeSub Privacy Policy
Effective date: November 14, 2026 Last updated: November 14, 2026
WipeSub ("the Service", "we") is a mobile app that adds KTV-style word-by-word color-wipe subtitles to videos of you singing. The Service is provided by CHENG, JUNG-YI as an individual ("the Operator"). This policy explains what data we collect, why, how we use it, how long we keep it, and your rights, in line with the Personal Data Protection Act of the Republic of China (Taiwan).
This policy covers the WipeSub iPhone and Android apps and the cloud analysis service they connect to.
1. Summary
- Your video's picture is never uploaded. Only the video's audio and the lyrics you paste are sent to the cloud for analysis. The uploaded audio carries no location and no camera or other device details; the app removes them first.
- Audio and lyrics are deleted as soon as analysis ends, whether it succeeds or fails.
- Results are deleted within 24 hours at most. The analysis result contains the lyric text and each character's timing. It is deleted once the app receives it; if the app never receives it, it is deleted at the latest 24 hours after analysis finishes.
- Nothing is used to train models or shared with anyone.
- Your videos, lyrics and editing progress stay on your phone.
- We do not sell your data or track you. The app has no ads and no analytics or ad-tracking tools.
- You can delete your account in the app at any time.
2. Data we collect, why, and for how long
| Data | How we get it | Purpose | Retention |
|---|---|---|---|
| Sign-in identifier: the user ID Apple or Google gives this app (not your password). With Sign in with Google, the sign-in data Google gives our server also carries your name, email and profile picture URL; the server reads only the user ID and does not read, log or store the other fields | When you use Sign in with Apple or Sign in with Google | Create your account and keep your credits when you change phones | We never store the raw ID, only a hash computed with a server secret key (it cannot be reversed without the key). Kept while your account exists, and after deletion as described in Section 6 |
| Account ID and purchase account code: two random IDs the system generates | Created automatically with your account | The account ID links your credits and analysis jobs. The purchase account code is given to Apple or Google with each purchase so the purchase can be matched to your account | While your account exists |
| Apple refresh token (only when you sign in with Apple and Apple provides an authorization code) | At sign-in, the server exchanges Apple's authorization code for it with Apple | Manage this app's Sign in with Apple authorization | Until you delete your account; when you delete it we ask Apple to revoke this app's sign-in authorization, then delete the token |
| Sign-in session | Issued to your phone when you sign in | So you don't have to sign in every time | Expires after 7 days. Signing out ends your sign-in on every phone |
| Your video's audio | When you submit an analysis, the app extracts the audio on your phone, removes location and device details, and uploads it | Work out when each character is sung | Deleted as soon as analysis ends, whether it succeeds or fails. A job still waiting after 6 hours is marked failed and deleted. Uploads left behind by a server fault are deleted by a background task after about 1 hour |
| Lyrics | Lyrics you paste | Align lyric timing | Deleted together with the audio as soon as analysis ends. For lyric text inside results, see the next row |
| Analysis results: each character's lyric text and timing, "please check" flags | Produced by the cloud analysis | Sent back to your phone | Deleted once the app receives them; if the app never receives them, deleted at the latest 24 hours after analysis finishes, and in that case the credit is returned |
| Re-align audio clip and text | When you use "Re-align this line" in the editor | Recalculate that line's timing | Deleted as soon as that request ends |
| Credit and purchase records: each credit change, Apple/Google transaction IDs, whether each was credited or refunded | When you buy, use or are refunded credits | Manage credits, prevent a purchase being credited twice, process refunds | While your account exists. Transaction records are kept after account deletion (see Section 6) |
| Analysis job records: video length, start and finish times, compute time, success or failure, failure code, retry and re-align counts, free or paid | Recorded automatically during analysis | Calculate credits, troubleshoot, estimate cloud costs | While your account exists; deleted with your account |
| Edit counts: the total number of characters in each video's subtitles and how many you changed (two numbers only, no lyrics) | Sent once by the app after a video's first successful export | Understand how accurate the automatic subtitles are and improve the service | Kept with the analysis job record; deleted with your account |
| Push notification token | Generated by your phone when you allow notifications | Only to tell you an analysis finished or failed | Until you sign out or delete your account. If the same phone signs in to another account, the token is removed from the old account |
| Abuse-prevention counters: account ID or hashed sign-in identifier, plus the time of the action | Recorded automatically when you sign in, submit an analysis and similar actions | Limit how often actions can be repeated in a short time | Deleted after 1 hour |
| Connection logs: time, your IP address, request method, requested URL, response status, size and timing (request headers are removed, so no lyrics or sign-in credentials) | Recorded automatically by the cloud's front-end server | Security, abuse prevention, troubleshooting | Deleted after 30 days |
| System error logs: error type, where in the program it happened, analysis job ID (no IP address, lyrics, audio or sign-in credentials) | Recorded automatically when the cloud service hits an error | Find and fix errors | Deleted after 30 days |
The cloud service itself does not log each request.
We do not collect: your video's picture, other photos or videos in your library, contacts, location, advertising identifiers, or the name and email of your Apple or Google account (the name and email inside Google sign-in data pass through the server only while the sign-in is checked and are not stored).
Sign-in protection: Each time you sign in, the app creates a single-use random value. The server uses it to check that the sign-in data has not been reused by someone else. It is discarded after use and never stored.
Results may be wrong. Subtitle timing is produced by automatic alignment; please check before exporting.
3. Data that stays on your phone
The videos you pick, your lyrics, your subtitle edits and exported videos stay on your phone; we cannot see them. Exported videos also carry no location. Your sign-in credential is kept in the phone's secure storage. Deleting the app or your account does not delete the videos in your photo library.
4. How we use data
Only for the purposes in Section 2: providing subtitle analysis, managing your account and credits, handling purchases and refunds, sending "analysis finished" notifications, keeping the Service secure and stable, and estimating operating costs.
We do not: - Use your audio, lyrics or videos to train or improve any model. - Use your data for advertising or marketing, or to build a profile of you. - Sell or rent your data.
5. Who we share data with (service providers)
We give only what is needed to run the Service to these recipients:
| Recipient | Data | Purpose |
|---|---|---|
| Apple, Google | At sign-in you deal with them directly and the server checks the sign-in data with them; with Sign in with Apple, the server exchanges Apple's authorization code for a refresh token. When you buy, you pay them directly, the app gives them your purchase account code (a random ID), and the server checks the purchase with them | Sign-in verification, payment, refunds |
| Expo (push service, Expo, Inc., USA), delivered via Apple Push Notification service (APNs) or Google Firebase Cloud Messaging (FCM) | Push token, analysis job ID, and whether the analysis finished or failed (no lyrics or audio) | Deliver notifications to your phone |
| Google Cloud (servers in Taiwan, asia-east1 region) (processes data on our behalf and may not use it for anything else) | Audio, lyrics, account and credit data, logs and backups (stored on servers we rent) | Run cloud analysis and store account data |
We only use service providers that protect personal data at least as well as this policy does, and they may process it only on our instructions and for these purposes. Apart from these, and disclosures required by law (for example a lawful request from a court or law enforcement), we do not give your data to anyone.
6. Deleting your account
Tap "Delete account" on the Account screen. If you have already removed the app, you do not need to reinstall it: email contact@wipesub.com to request deletion of your WipeSub account (developer: CHENG, JUNG-YI), saying whether you signed in with Apple or Google, and we will delete it after confirming it is you. After deletion:
- Your account, remaining credits, credit records, job records, push tokens, Apple refresh token, unretrieved results, and any audio and lyrics still being processed are deleted from the cloud. This cannot be undone. Copies in backups are deleted with those backups within 30 days (see Section 8).
- Remaining credits are not refunded. Refunds of past payments follow Apple's or Google's rules.
-
To prevent repeated free credits, stop a purchase being credited twice, and handle refunds that come later, we keep two things:
- The hash of your sign-in identifier and your paid credit balance at deletion (including any debt from refunds).
- For each Apple/Google transaction: its ID, its state (credited or refunded), the sign-in identifier hash and the number of credits.
We keep them until the Service ends and use them only for these purposes. Signing in again with the same Apple or Google account will not grant free credits again. Credits left at deletion do not come back; if you owed credits at deletion (for example, credits used before a refund), that debt carries over to the new account.
-
This account's projects on this phone (the app's copy of each video, editing progress and lyrics history) are deleted too; the original videos in your photo library and finished videos you saved there are not affected.
7. Your rights
Under Article 3 of Taiwan's Personal Data Protection Act, you may ask us to let you see or review your personal data, give you a copy, supplement or correct it, stop collecting, processing or using it, or delete it. Email contact@wipesub.com and we will reply within the legal time limit. To confirm it is you, we may ask you to act from within the app or show proof that you own the account.
You may choose not to provide this data, but without signing in you cannot use cloud analysis, and without uploading audio we cannot create subtitles.
8. Security and backups
All traffic between the app and the cloud is encrypted (HTTPS), and the cloud service does not accept unencrypted connections from outside. Only the Operator can access the cloud servers. The database overwrites data when it is deleted.
We make one encrypted backup of the database each day and delete each backup after 30 days. Backups contain sign-in identifier hashes, purchase account codes, Apple refresh tokens, credit and purchase records, push tokens and job records. They do not contain audio, unretrieved results or lyrics, or abuse-prevention counters.
No online service can be 100% secure; if a data breach occurs, we will notify you as required by law.
9. International transfers
The cloud servers are located in Taiwan (Google Cloud, asia-east1 region), and your audio, lyrics and account data are processed and stored on servers in Taiwan. Some data is processed outside Taiwan: the push service is provided by Expo in the United States, so your push token, analysis job ID and whether the analysis finished or failed (no audio or lyrics) are processed there; and when you sign in or make a purchase, the related data is handled by Apple or Google under their own policies. If you live outside Taiwan, your data is processed outside your country or region, and we protect it as described in this policy.
10. Children
The Service is not directed at children under 13, and we do not knowingly collect their data. Minors should get a parent's or guardian's consent before buying credits. If you believe a child is using the Service without consent, contact us and we will delete the related data.
11. Changes to this policy
When we change this policy we update the "Last updated" date above. For material changes, such as uploading a new type of data, we will notify you in the app and ask for your consent again before your next upload.
12. Contact
Operator: CHENG, JUNG-YI Email: contact@wipesub.com Website: https://wipesub.com