Privacy for your home movies

Last updated: October 23, 2026

1. Who we are

Kindly Rewind is offered by Blissed and Balanced LLC, a Delaware limited liability company (“we”, “us”). This Privacy Policy explains what information the Kindly Rewind app (the “App”) and its server handle, how long we keep it and what choices you have. Please also read our Terms of Use.

2. Photos library access

When you tap to add clips, the App opens Apple’s photo picker. The App can read only the videos and photos you select, not your whole library. When you tap Save to Photos, the App asks for permission to add the finished movie to your library. It does not need to read your library to do that. You choose the trim and see thumbnails of your picked clips on your iPhone. Previews of the looks are made on our server from the clip you uploaded. The App does not use your camera, microphone, contacts or location.

3. Videos and photos you upload

What is sent. The App uploads each clip you picked, together with your choices: look, fill, title, date stamp and trim points. Videos are uploaded in full, even if you chose a shorter part. Our server cuts out the part you chose when it makes its working copy and deletes the original upload as soon as that working copy exists. Photos are converted to JPEG on your iPhone before upload, which removes their embedded metadata. A video file can contain embedded metadata, such as the date it was recorded and, if your camera saved it, a location. Our server reads the technical information it needs (length, size, orientation) and the recording date stored in the file, and sends that date back to the App. It does not read or use location. The working copy and the finished movie are written without the original file metadata. The date stamp shows the recording date of the first clip, in your iPhone’s local time. If a clip has no recording date (for example a photo), it shows the date the movie is made.

What we do with it. We use your clips only to make the movie you asked for. A person does not look at your videos. We don’t use them for advertising, we don’t share them except as described in this policy, and we don’t use them to train AI models.

Where. Processing happens on our hosting provider’s servers in the United States (Render, Render Services, Inc., Oregon region). Render processes this information as our service provider under its data processing addendum. Frames sent for AI Extend may be processed by our AI provider in the United States or other countries (section 4).

How long. - Uploaded clips, the working copies made from them, preview frames and finished movies are deleted automatically when they are about 2 hours old. The server checks every 10 minutes, and its temporary storage is also wiped whenever the server restarts. Every video upload is replaced by a working copy as soon as it arrives (cut to the part you chose, made smaller if very large, and stripped of the file’s metadata), and the original upload is deleted at that point. - Temporary files used while building a movie are deleted as soon as that movie finishes or fails. - Delete my data (in the App under Me) immediately deletes your clips, preview frames and movies on our server, cancels movies that are waiting in line, and deletes your device record (section 5). - Legal exceptions. We keep content longer only when the law requires it, for example to preserve material we have reported to NCMEC or law enforcement, or to respond to valid legal process. We then keep only what is required, for only as long as required.

Save the finished movie to Photos to keep it. We can’t recover deleted files.

4. AI Extend

AI Extend is optional and costs credits. It is the only feature that sends your content to a third party. It is offered only when it is enabled on our server; otherwise the App hides it. The first time you choose it, the App asks for your permission before any frame is sent; you can withdraw that permission at any time in the App under Me. When you use it, the server sends one still frame per shot of your selected clip (never the audio or the whole video) to our AI service provider, SpaceXAI LLC (the company behind Grok and the xAI API), to generate the image areas at the sides of the frame. The generated side areas (with your original middle covered) may also be sent to the provider’s vision model, which checks that nothing unwanted was added. The provider processes these frames only to return the generated images. We use the provider’s zero-data-retention setting, so the frames and results are not stored after the request; under the provider’s terms they are deleted within one hour at most. The provider does not use them to train its models. The provider may process frames in the United States or other countries. If zero data retention is not confirmed for a request, the App does not use AI for that shot. Movies with generated areas are labeled AI-generated in the App, with a small visible label in the picture and a label in the video file’s metadata. The App shows this disclosure before you choose AI Extend. If the AI can’t be used for a shot, that shot is filled on our server with a non-AI fill (Ambient Mirror).

Previews of AI Extend in the App are a local approximation made on our server and are not sent to the AI provider.

5. Device ID, credits and limits (stored on our server)

The App does not use accounts. On first launch our server issues a random device ID, signed so it can’t be forged. The App keeps it in your iPhone’s secure storage (Keychain). Our server keeps a small record for that ID: - your AI credit balance, Pro status, and the AI credits you used each month; - the date the App last contacted our server (used to delete inactive records, see “How long” below); - App Store transaction IDs and product IDs of purchases confirmed through RevenueCat, so a purchase is credited only once; - short-lived request IDs that prevent double charges if a request is repeated; - whether this device has used its free first movie. To limit free first movies to three per network each month, the server also keeps a count per network, stored under a one-way keyed hash of your IP address (an HMAC made with a secret key that only our server holds). The server never stores the IP address itself in its records.

The server also keeps short-lived, in-memory counters of requests per device and per IP-address hash to prevent abuse. Our hosting provider, Render, keeps our server’s logs for 7 days. Depending on our hosting plan, these can include a record of each web request with its IP address. Render may also keep limited technical data, such as IP addresses, for its own security and operations under its own privacy policy. Our server does not write your IP address into its own log messages.

How long. The device record stays until you tap Delete my data. If the App hasn’t contacted our server for 24 months, we delete the record automatically, unless it still holds unused purchased credits or an active Pro subscription; in that case we keep only what is needed for your credits to stay usable. Request IDs and monthly usage records are pruned automatically after they expire. The per-network counts of free first movies are kept for the current month and the two months before it (at most about 3 months) and then deleted automatically. They are not linked to your device ID, so Delete my data does not remove them. After you delete your data, we keep the App Store transaction IDs of your past purchases, with nothing that identifies you or your device. This stops the same purchase from being credited twice. If you ask us to recover credits, we use the order ID you send only to find that purchase, and we delete your email and the order ID once the request is resolved.

6. Purchases (Kindly Rewind Pro and credit packs)

Purchases are processed entirely by Apple through the App Store. We never see your name, Apple ID, email or payment details. To confirm purchases, the App and our server use RevenueCat (RevenueCat, Inc.), which acts as our service provider. RevenueCat receives: - the random device ID described in section 5 as the app user ID; - your App Store receipt and transaction details (such as product, price, currency, and purchase and expiration dates); - basic technical information sent with each request, such as device type, operating system and App version, locale, App Store country and currency, and (as with any internet request) your IP address.

Our server asks RevenueCat to confirm your purchases and receives purchase notifications (webhooks) from RevenueCat, so it can grant Pro and credits. RevenueCat processes this information under its agreement with us and its own privacy policy. We use it only to provide purchases, prevent fraud and understand purchases in aggregate.

The App contacts RevenueCat when it opens (to check Pro), when it shows prices and when you buy or restore, even if you never buy. Purchase details are sent only if you buy or restore. The ID is not used for advertising or tracking. See RevenueCat’s privacy policy.

7. What the App does not do

• No advertising, ever.
• No analytics, crash-reporting SDKs or tracking tools.
• No account or login, and we don’t ask for your name, email or phone number.
• No cross-app or cross-site tracking. The App does not use the advertising identifier and does not ask for tracking permission, because we do not track.
• Your content is never made public. Movies are delivered only to the device that made them.

8. We do not sell your data

We do not sell your personal information, and we do not “share” it for cross-context behavioral advertising (as those terms are defined under California law). We disclose information only to our service providers (Render for hosting, RevenueCat for purchases, and SpaceXAI LLC (the company behind Grok and the xAI API) for AI Extend when you choose it). We may also disclose it when the law requires, to protect rights and safety (including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children and preserving it as the law requires), or as part of a merger or sale of the business (with notice where required).

9. Deleting your data

• Delete my data (App › Me): immediately deletes your clips, preview frames and movies on our server, cancels waiting movies and deletes your device record, including your credit balance. The per-network free-movie counts (section 5) are not linked to you and are kept for the current month and the two months before it (at most about 3 months) and then deleted automatically. Unused credits are lost and cannot be restored. A new random ID is issued the next time you use the App.
• On your iPhone: deleting the App removes its local data. Movies you saved to Photos stay in Photos until you delete them there. Your device ID is kept in your iPhone’s Keychain. It usually survives deleting and reinstalling the App on the same iPhone, and it moves to a new iPhone restored from an encrypted computer backup, but Apple doesn’t guarantee this, and it does not move to a new iPhone set up from an iCloud backup. Delete my data removes it.
• AI provider: frames sent for AI Extend are not stored by the provider after the request (zero data retention; section 4).
• Purchase records: Apple keeps records of App Store purchases under its policies. When you use Delete my data and have no active Pro subscription, we also ask RevenueCat to delete its record for your device ID. If you have an active subscription, RevenueCat keeps the record so you can restore Pro; email info@blissedandbalanced.com after it ends if you want it deleted.

10. Children

The App is not directed to children under 13 and does not knowingly collect personal information from them. Parents may use the App to make movies of their family. Those clips are handled like any other upload and deleted after about 2 hours. Purchases by minors require a parent or guardian’s approval, for example through Family Sharing and Ask to Buy. If you believe a child under 13 has used the App or provided personal information to us, contact us at info@blissedandbalanced.com. We will delete the device record and any of the child’s information we hold. Uploads are already deleted automatically after about 2 hours.

11. Your privacy rights

Depending on where you live, you may have rights to: - know and access the personal information we hold about you; - correct it; - delete it (use Delete my data, or contact us); - data portability; - opt out of sale, sharing, targeted advertising or profiling (we do none of these); - limit the use of sensitive personal information; - object to or restrict processing, and withdraw consent; - not be discriminated against for exercising your rights; and - complain to your data-protection authority.

California residents: in the past 12 months, the App has collected the following: - identifiers: random device ID (also used as the RevenueCat app user ID) and a keyed hash of your IP address; - commercial information: purchase records; - audio/visual information: the videos and photos you choose to process (including the recording date stored in a video file), kept for about 2 hours.

We collected this from your device, from Apple and from RevenueCat, for the purposes above. We disclosed it only to the service providers named in section 8. We have not sold or shared personal information.

The App is currently offered only in the United States.

To exercise a right, email info@blissedandbalanced.com. We may need to verify your request, and you may use an authorized agent where the law allows. We will respond within the time required by law.

12. Security

All traffic between the App and our server uses encrypted connections (HTTPS). Clips and movies are tied to the device that uploaded them and cannot be fetched by anyone else. Our server checks uploaded files before processing them. Device IDs are signed so they cannot be forged. No method of transmission or storage is completely secure.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, give notice in the App or by other reasonable means.

14. Contact

Blissed and Balanced LLC, Florida · info@blissedandbalanced.com