Privacy Policy

TravReel is operated by Karya Ventures, registered in India. For anything in this document, or to exercise any right described in it, write to privacy@travreel.app.

Under the UK and EU GDPR we are the controller for your account data and for the footage you upload.

• Account, your email address, and a password that is hashed and stored by our authentication provider, never by us in readable form. If you sign in with Google we receive your email and a provider account ID, not your Google password.
• Your uploads, the video and audio you give us, including any people visible or audible in them, and any metadata embedded in the files, which for phone footage commonly includes the time and the GPS location the clip was taken.
• Still frames extracted from your clips, used to pick shots, plan an edit, and generate transitions.
• What you type, briefs, prompts, titles and captions.
• Technical, IP address, browser and request logs, kept for security and abuse prevention. Sign-in attempts are logged by IP to rate-limit credential stuffing.

• To render your reel, analysing footage, cutting to the beat, exporting the file. Legal basis: performance of our contract with you. This is not based on consent, because it is the service you asked for; you cannot meaningfully withdraw consent to the thing being delivered.
• To keep the service working and prevent abuse, rate limits, logs, quota enforcement. Legal basis: our legitimate interests.
• To take payment, where you subscribe. Legal basis: contract and our legal obligations around tax and accounting records.

We do not sell your data, and we do not share it for cross-context behavioural advertising. We do not use your footage to train our own models.

Travel footage very often contains people who never agreed to anything, passers-by, friends, staff. Two things follow from that, and we want to be direct about both.

First, you are responsible for having the right to upload footage of other people, and you agree to that in the Terms. In data-protection language, you are the controller for those individuals in the material you choose to publish.

Second, if you appear in footage someone else uploaded and you want it removed, write to privacy@travreel.app and we will act on it.

TravReel does not run facial recognition and does not attempt to identify anyone in your footage. We do not create biometric identifiers. If that ever changes it will require a new version of this policy and, where the law requires, your explicit consent.

We use the following processors. Where an AI feature is involved, we state plainly that images from your footage leave our infrastructure.

Several of these are in the United States. Transfers out of the UK and EEA rely on the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for a copy of the safeguards.

• Your clips and reels, until you delete them, or you close your account.
• Working files created during rendering, swept automatically; they are temporary by design.
• Account records, for as long as you have an account.
• Billing records, kept as long as tax law requires, typically six to seven years, even after you leave.
• Proof that you accepted these documents, kept while you have an account and for a period afterwards, because it is the evidence that a contract was formed.

When you delete something we remove it from our storage. Be aware that backups and caches can lag: assume up to 30 days for a deletion to propagate everywhere. Copies held briefly by the AI processors above expire on their own schedules, not ours.

Depending on where you live you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or export it in a portable form. You can also withdraw any consent you have given. We answer within one month.

We do not make decisions with legal or similarly significant effects about you by automated means.

If you are in the UK or EEA you can complain to your data protection authority, in the UK that is the Information Commissioner's Office. If you are in California you may request access, deletion, correction, and to know what we share; we do not sell or share personal information as those terms are defined by the CCPA, and we honour Global Privacy Control signals. If you are in India, you may nominate another person to exercise your rights on your behalf.

TravReel is for people aged 18 or over. We chose a single global minimum deliberately rather than the lowest each law allows: India's rules require verifiable parental consent for anyone under 18, and there is no proportionate way for us to verify that. Setting the bar at 18 satisfies the UK/EU threshold and the US COPPA rules at the same time.

We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us and we will remove it. Note separately that footage you upload may depict children, that is covered by the section above on other people in your footage.

We do not use advertising or analytics cookies, and there is no tracking across other sites. Your browser stores a sign-in token so you stay logged in, and the ID of the draft you are working on. Both are strictly necessary to provide the service and neither requires a consent banner under the ePrivacy rules. Clearing your browser storage signs you out.

Traffic is encrypted in transit. Passwords are hashed by our authentication provider and never stored by us in readable form. Access to your projects is checked on the server for every request, not merely hidden in the interface.

Files served from our storage are protected by unguessable URLs rather than by a per-request permission check. Treat a link to your reel as something you have chosen to share: anyone you give it to can open it.

If a breach puts you at risk we will tell you and the relevant regulator within the deadlines the law sets.

This document is versioned. The current version is 2026-08-24. If we change it materially we will ask you to accept the new version rather than change it quietly.