Rushes Privacy Policy

At a Glance

Rushes is a private daily video diary: you keep a few seconds of your day, and the next morning Rushes cuts them into a short film. It is built local-first and privacy-first. Rushes requires no account, collects no personally identifiable information (PII), shows no ads, and does not sell or share your data. Your clips, films, captions and journal live only on your device. We never receive your videos, your voice or your captions.

1. What We Collect — and Where It Lives

1.1 Stored Locally on Your Device

The following is created and stored on your device only (inside Rushes' iOS app container) and is not uploaded to our servers:

Your clips: the video and sound you record, and the thumbnails Rushes makes from them.
Your journal: which day each clip belongs to, the "best second" of each day, memories you chose to hide, and which films you have already watched.
Talk captions: in Talk mode, what you say is turned into captions by Apple's speech recognition on your iPhone. Rushes requires on-device recognition, so your voice is not sent to Apple or to us. The captions are saved with the clip, on your device.
App preferences: when your day starts, reminders, Face ID lock and similar settings.

1.2 Camera, Microphone, Speech Recognition and Photos

Camera and microphone are used only while you record. Rushes asks for access the first time you press the shutter.
Speech recognition is used only in Talk mode, and only on your device.
Photos: Rushes asks for permission to add the films you export to your photo library. It never reads your photo library.

You can change any of these permissions at any time in iOS Settings → Rushes.

1.3 On-Device Analysis

To pick each day's "best second", Rushes looks at a clip right after you record it: how loud it is, how much moves, and whether a face in the frame is in focus (using Apple's Vision framework). This runs entirely on your device and is used only to make that choice. Rushes does not recognize or identify people and keeps no facial data.

1.4 Widgets, Controls and Notifications

Rushes' widgets and controls read a small summary of your journal — dates, clip counts and cover thumbnails — that the app saves in storage shared only between the Rushes app and its widgets, on your device. Morning and evening reminders are scheduled locally on your device; their content never leaves it.

1.5 Face ID Lock

If you turn on Face ID lock, iOS checks that it is you before Rushes shows your journal. Rushes never receives your Face ID data — only whether the check succeeded.

1.6 Backups and Export

Because your clips live in Rushes' app container, they are included in your device's own backup (iCloud Backup or a computer backup) when you have it turned on. You can leave them out with Include in iPhone backup in Rushes' settings. That backup is Apple's, covered by Apple's privacy policy, and we cannot access it. You can also save films to Photos, share them, or copy every original clip to a folder you choose. Exporting is always free and always your choice.

1.7 No Accounts, No Logins

Rushes does not require an account to use any feature. There is no email, phone number, real name, or other PII collected at sign-in — because there is no sign-in.

1.8 Anonymous Analytics & Crash Reports

Rushes may collect anonymous, aggregate app-usage events (for example, "a clip was saved" or "a film was exported") and crash reports to improve stability and the experience. These never include your videos, sound, captions, file names, thumbnails, location or any PII — only counts and categories. Rushes also reads Apple's privacy-preserving App Store install attribution (campaign-level only, provided by Apple's AdServices — no user identifier).

1.9 What We Do Not Collect

We do not read your photo library, contacts, calendar, or location.
We do not use third-party advertising SDKs, and Rushes shows no ads.
We do not build advertising profiles or sell data to data brokers.

2. Third-Party SDKs

Rushes does not embed third-party advertising, marketing, social, or tracking SDKs. The platform frameworks involved are Apple's own (camera, speech recognition, Vision, Photos, notifications, widgets, StoreKit, Face ID and App Store attribution), governed by Apple's privacy policies and operating within your device and Apple account.

3. In-App Purchases

Rushes Pro is offered as an auto-renewing subscription (yearly or monthly) or as a one-time lifetime purchase, processed by Apple. We never see or store your payment details; purchase validation is handled through your Apple ID and Apple's StoreKit. See Apple's Privacy Policy for how Apple handles payment information.

4. Data Retention & Deletion

Your journal lives on your device. Deleting a clip in Rushes removes it from the app; uninstalling Rushes removes everything Rushes stored on your device. We do not retain copies on a server, because your clips never reach one — which also means we cannot recover them for you, so keep a backup or export what matters to you.