Privacy policy

For the REELINT app and the website reelint.app. Last updated: 29 October 2026. The German version is legally binding.

1. Controller

SECINTS e.U., proprietor Aimen Tawfik, MSc., Salzgries 19/6, 1010 Vienna, Austria.
Email: office@secints.com

2. This website

This website is hosted by Hostinger (Hostinger International Ltd., Cyprus) on a server in the Netherlands and delivered through Hostinger's network in the EU. When you visit reelint.app, Hostinger processes technically necessary data such as your IP address, the time, the page requested and your browser in order to deliver the page and protect it against attacks, and stores this data in server logs. We do not analyze these logs. Hostinger acts as our processor. The legal basis is our legitimate interest in a working and secure website (Art. 6 (1) (f) GDPR).

The website sets no cookies, loads no fonts, scripts or content from third-party servers, and uses no analytics or advertising services.

If you email us, for example to join the beta, we process your address and message to reply and, where applicable, to invite you to the test (Art. 6 (1) (b) GDPR). We delete the message once it has been dealt with, unless we are legally required to keep it.

3. The app

3.1 What stays on your device

The app stores your cards, your library, the details from setup (your name if you enter it, platforms, topics, goals) and your language setting only on your device. It does not send this data to us. You delete it by deleting cards in the app or removing the app. It may end up in backups your operating system creates, for example in iCloud.

3.2 What goes to our server when you share

When you share a video with REELINT, the app sends our server:

• the link to the video,
• a device identifier: a random number the app creates on first launch. It reveals nothing about you or your device,
• for technical reasons, your IP address.

We use the device identifier and IP address only to limit the number of requests per hour and thus prevent abuse. We keep them in memory, never write them to files or logs, and discard them after a little over an hour. The legal bases are providing the service you request (Art. 6 (1) (b) GDPR) and our legitimate interest in preventing abuse (Art. 6 (1) (f) GDPR).

3.3 How the card is made

Our server fetches the public post from the platform (TikTok, Instagram or YouTube). The platform sees our server, not you. We read the title, description, captions and preview images. If there are no captions, we download the audio, have it transcribed and delete it immediately afterwards. We do not store the video itself.

Videos may show people or contain their voices. We process this publicly available content only to create the card you requested (Art. 6 (1) (f) GDPR).

3.4 AI services

• Groq, Inc. (USA) turns the audio into text.
• Anthropic (USA) uses its Claude model to write the summary, read text in images and search the web for links to the apps and sites mentioned. For the search, Anthropic uses terms from the video.

Both receive only the content of the video (audio, text, images, title, description) and the link, nothing about you. Both process the data on our behalf. Transfers to the US are based on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on standard contractual clauses (Art. 46 (2) (c) GDPR).

Cards are created automatically and may contain errors. No automated decision with legal effect on you (Art. 22 GDPR) takes place.

3.5 Cards on our server

We store the finished card on our server for up to 30 days, linked to the video and not to you. If someone shares the same video, they get the same card without it being processed again. We also count how many new cards are created per day, without reference to individual users.

3.6 Logs

Our server logs errors and the outcome of each job, such as duration and error code. These entries contain no IP addresses and no device identifiers, and for errors occasionally the ID of the video concerned. We delete them after 14 days.

3.7 App Store and purchases

When you download the app or subscribe, Apple processes the necessary data under its own responsibility. We do not receive payment data.

3.8 What the app doesn't do

No ads, no advertising ID, no analytics or tracking tools, no access to contacts, photos or location.

4. Recipients

5. Retention

• Audio of a video: until the transcript is done, then deleted immediately
• IP address and device identifier: a little over an hour, in memory only
• Cards on our server: up to 30 days
• App server logs: 14 days
• Website access logs: kept by Hostinger as long as operation and security require; we do not analyze them
• Emails: until the request is dealt with, unless the law requires longer
• Data on your device: until you delete it

6. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15 to 21 GDPR). Write to us at office@secints.com. Because the app works without an account, we usually cannot link data on our server to a person (Art. 11 GDPR). You manage the data on your device yourself.

You can lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40 to 42, 1030 Vienna, dsb.gv.at.

7. Changes

If the app changes, we update this policy. The version published here applies.