Legal

Privacy Policy

Ever Teleprompter is local-first, not server-free. This policy explains what remains on your device and what VanhSoft processes to provide sign-in, paid access, Contact Us, and anonymous usage statistics.

Effective: 20 September 2026 · Last updated: 28 October 2026 · Android and iOS

Who we are

Ever Teleprompter is provided by VanhSoft (“VanhSoft”, “we”, “us”). This policy applies to the Ever Teleprompter Android and iOS apps and everteleprompter.com. Platform-specific processing is identified below.

Summary

Your scripts, folders, settings, reading progress, raw microphone audio, and recordings are not uploaded to VanhSoft. They remain on your device unless you deliberately export or share them. Account sign-in, limited subscription-verification data, authentication email delivery, and Contact Us messages that you choose to submit are processed online.

We do not sell personal data. The app contains no advertising SDK and no developer crash-reporting SDK. From version 3.1.0, the Android app sends anonymous usage statistics to VanhSoft's own server, and you can turn them off; see Anonymous usage statistics.

You can delete your account in the app or on the account deletion page; see Account deletion and your choices for what is removed and what is kept.

Information processed for accounts and access

Information	Purpose
Verified email address, Supabase user ID, and linked sign-in identity references	Create and secure the app account, support Google, Apple (iOS), or email/password sign-in, display the signed-in email, and support account deletion.
Salted password hash for email/password accounts	Authenticate the account. Supabase Auth processes the password over HTTPS and stores its derived hash; VanhSoft does not store or log the plain-text password.
Pseudonymous account binding and opaque account scope	Bind purchases and local app data to the correct verified account without using the original Google or Apple identifier or email as the purchase-table or local-data folder name.
Authentication email address and verification or recovery message metadata	Send account confirmation and password-recovery messages through PurelyMail. These messages contain a time-limited account action link.
Random app installation ID; Play Integrity verdict information on Android	Bind an access lease to an installation, verify eligible purchase requests, and reduce fraud.
Entitlement status and Free plan identity	Provide Free basic access and determine whether paid access is active.
Google Play product, purchase state, paid-through date, renewal/acknowledgement status, introductory-offer eligibility, encrypted purchase token, and hashed order/token references	Verify Weekly, Annual or Lifetime access, restore purchases, and process introductory trials, renewals, refunds, expiration, and revocation.
App Store product and transaction identifiers, app-account binding, purchase and expiration dates, renewal and revocation status, and Apple notification identifiers (iOS)	Verify Weekly, Annual or Lifetime access for the correct app account, restore purchases, and process trials, renewals, billing grace, refunds, expiration, and revocation. VanhSoft does not receive your Apple Account password or payment-card details.
RTDN notification identifiers and security/audit events	Process Google Play subscription changes once, investigate failures, and protect the service.
IP address, request time, user agent, and security logs generated by hosting providers	Deliver and protect the website and subscription service, troubleshoot outages, and prevent abuse.
Contact Us category (including Feature Request) and message, contact ID, submission time, verified account email, and current subscription tier	Deliver the message to support, enable a reply to the verified account email, identify the user's current access level, and investigate the request.
Technical problem Contact Us messages only: app version and build, Android version and device manufacturer/model or iOS version and device model	Display and attach the relevant app and device context so VanhSoft can troubleshoot the reported technical problem.
Contact Us throttle metadata: contact ID, signed-in Supabase user ID, submission time, delivery time when sent, and pending or sent state	Enforce the limit of five accepted Contact Us messages per account in a rolling 24-hour period without retaining the message, category, email, or diagnostics in the throttle record.
Support correspondence	Answer requests, investigate problems, and complete manual account-deletion requests.

Every category displays and sends the category, message, verified reply email, and current subscription tier (Free, Lifetime, Annual, Weekly, Trial, or None). Feature Requests are available to paid tiers. VanhSoft derives the reply address and subscription tier from the verified account rather than trusting identity or subscription information entered by the app.
If you choose Technical problem, the screen also displays and sends the app version and build plus the platform version and device model shown to you, with a short explanation that these values will be sent for troubleshooting. General question, Account or billing, Feedback, and Feature Request send no automatic app or device information.
Brevo delivers the identifiable support email to VanhSoft with its contact ID and submission time. After delivery, PurelyMail retains the message in the support mailbox, and a mail rule forwards one copy to VanhSoft's owner mailbox. The app backend retains only the content-free throttle metadata described above, not the Contact Us category, message, email, subscription tier, or diagnostics.

Older app builds may still use the legacy Feature Request endpoint. Those submissions follow the separate legacy Feature Request storage and retention terms described below until those builds are retired.

Do not enter or send passwords, tokens, purchase tokens, confidential scripts, or unnecessary sensitive data in Contact Us messages or support email.

Anonymous usage statistics

From version 3.1.0, the Android app sends anonymous usage events to VanhSoft's own server at events.vanhsoft.com, through Cloudflare, so that we can see which features are used and where people get stuck. The iOS app does not send usage events.

Events: app opened; signed in (Google or email); script added (new or imported, with the file type only); prompt started and ended (mode, full screen or floating, recording type, and whether the end was reached); voice model download (language and result); permission answers (microphone, camera, or floating window); paywall shown (the feature that opened it) and its result (trial started, plan bought, cancelled, or error).
Sent with each event: the time, the app and Android version, the device model, a random ID created only for these statistics, and a random ID for the current app session.
Never sent: script text, file names, recordings, audio, your email address, or your account ID. The server accepts only the event names and values listed above and discards anything else.
Not linked to you: the events are not connected to your account, and the server does not store IP addresses with them.
Turning them off: switch off Share anonymous usage data in My Account. The app then stops sending events and discards any that are waiting.

Information stored only on your device

Scripts, folders, file names, ordering, reading progress, appearance and mode settings, cue-line settings, remote-controller settings, downloaded speech models, and recordings are stored locally. Android also stores Camera-Eye and Floating Prompt settings locally. Cross-device content restoration is not provided. Signing out or deleting the online account does not remotely erase these files.

Microphone, speech recognition, and model download

VoiceFollow needs microphone permission while it is active. VanhSoft does not receive or store the raw microphone audio.

After you affirmatively approve a download, the installed model processes speech on the device. On Android, approximate model sizes are listed on the Support page. VoiceFollow on iOS/iPadOS requires version 26 or later. Supported Apple speech languages use on-device speech assets and request microphone and Speech Recognition permission. Hindi and Vietnamese use separately downloaded local models and request microphone permission only. Language availability depends on the device and installed assets.

Local-model delivery: depending on the selected language, files are delivered by Hugging Face and its content-delivery providers, everteleprompter.com/model infrastructure protected by Cloudflare, or GitHub-hosted release infrastructure. Those providers receive ordinary request metadata such as IP address and user agent.
Other device languages or fallback: Android's selected speech-recognition service may transmit audio or transcripts to its provider. That processing is controlled by the provider and your Android settings, not by VanhSoft.
Apple speech services on iOS: supported languages use Apple's system speech components. Apple may download speech assets to the device; their availability and any Apple-side processing are governed by iOS and Apple's privacy terms, not by VanhSoft.
Time and Manual modes: do not require speech recognition.

Camera, audio recordings, video, and documents

Video/Audio Record Mode saves front-camera video and microphone audio together in one MP4. During VoiceFollow recording, the apps can share the recording microphone capture with speech recognition; Android requires a downloaded local language model for this. Android stores app media through MediaStore; iOS stores it in the app library. On iOS, a video is added to Photos only when you choose Export to Photos. Media can be played, renamed, shared or deleted locally. Android trash availability depends on the file and OS version. Deleting an iOS recording permanently removes it from the app library after confirmation; an exported Photos copy remains.

When you import, export, or share a document or video, Android's system picker/share sheet or iOS's document picker/share sheet sends only the file you select to the provider you choose. VanhSoft does not receive it.

On Android, Floating Prompt supports Manual, Time and VoiceFollow and supplies an ongoing notification. Ordinary floating windows use display-over-other-apps permission. Optional Camera Mic Sharing for VoiceFollow on Android 10 or later instead uses an Accessibility service that you explicitly enable, with microphone permission and a downloaded local speech model. The service does not request screen-content access or control other apps. Its purpose is to keep the floating prompt listening alongside a compatible camera app; microphone sharing is device- and app-dependent. The script remains on the device and is not uploaded to VanhSoft.

On iOS, user-started Picture in Picture can display a Time or VoiceFollow script above another app. VoiceFollow requires iOS/iPadOS 26 or later and can continue listening while the floating session is active, subject to microphone interruptions. In-app recording must be off to start Float. On both platforms, camera-only streams normally omit the script, but full-display sharing, mirroring or screen recording can expose it to viewers.

Service providers

Google: Google Sign-In, Google Play Billing, Play Integrity, Android Publisher API, and Pub/Sub purchase notifications.
Apple (iOS): Sign in with Apple, App Store/StoreKit purchase processing and server notifications, system speech services, document sharing, and optional Photos export.
Supabase software on VanhSoft infrastructure: email/password, Google, and Apple authentication and subscription-verification APIs at api.vanhsoft.com. A separate development environment is used only for development/testing.
Cloudflare: DNS, transport security, content delivery, abuse protection, associated network logs, and storage of encrypted disaster-recovery backups (R2, in the EU).
Hugging Face, GitHub, Cloudflare, and VanhSoft model infrastructure: optional local VoiceFollow model delivery, depending on the selected language.
PurelyMail: delivery of account verification and password-recovery messages from [email protected], support email storage, and a forwarded copy from the support mailbox to VanhSoft's owner mailbox. PurelyMail processes ordinary mail metadata and service logs under its published privacy and security practices.
Brevo: separate email processing for identifiable Contact Us delivery, including the Feature Request category, and legacy Feature Request delivery to VanhSoft with the verified account email as the reply address. Brevo is not used to send authentication emails.
Your platform's speech, storage, document, and sharing providers: only when you select or use those services.

Retention

Auth account, verified email, linked identities, password hash, sessions, profile, and installation records: deleted from active systems when account deletion completes.
Introductory-offer eligibility and entitlement records: retained only as needed to verify Google Play or App Store access and prevent abuse.
Lifetime purchase/restoration records: retained while VanhSoft must honor Lifetime restoration, refunds, or revocations.
Ended Weekly or Annual purchase records, Android encrypted purchase tokens, Apple transaction references, store notifications, and audit/security events: retained for up to 24 months after the relevant end or event.
Infrastructure logs controlled by VanhSoft: normally up to 30 days. Providers may retain their own logs under their published policies.
Authentication email delivery metadata and service logs: retained by PurelyMail as needed to deliver and protect the mail service under its published practices. Deleted message copies may remain in PurelyMail's daily backups for one month.
Legacy Feature Request database records: deleted 12 months after submission. Notification emails and any related replies are support correspondence and follow the period below.
Contact Us throttle metadata: sent records become eligible for deletion after 24 hours and are removed by the next scheduled cleanup; pending reservations expire after ten minutes and are likewise removed by scheduled cleanup. Expired records no longer count toward the submission limit. These records contain no category, message, email, or diagnostics.
Contact Us messages and other support correspondence: normally until the request is resolved plus 24 months, or longer when required for an unresolved dispute or legal obligation. This correspondence is not automatically removed by account deletion. When VanhSoft deletes a transactional message, Brevo says deletion of its logs and email previews may take up to 72 hours. PurelyMail says its daily deleted-message backups are retained for one month, after which the deleted copies expire from those backups.
Anonymous usage events: deleted 13 months after they are received; their encrypted backups expire within 30 days.
Encrypted disaster-recovery backups: expire within 90 days and are not used for ordinary processing.

Account deletion and your choices

Delete your account from My Account on Android or iOS, or from Delete your Ever Teleprompter account. The in-app flow optionally erases app-managed local content; the website cannot reach files on your devices. Web deletion supports Google or email/password sign-in. If you use only Sign in with Apple, use in-app deletion or the email fallback on the deletion page.

For legacy feature requests, account deletion nulls the linked user ID and email in the private database. The request text, request ID, submission time, subscription tier, anonymization time, and notification delivery state remain until the record is deleted 12 months after submission. Account deletion does not immediately remove notification emails or related support correspondence, including the verified email and any personal information that you typed into the message.

Account deletion removes Contact Us throttle metadata linked to the account, but it does not automatically remove Contact Us messages, replies, or other support correspondence already delivered by email. That correspondence follows the retention period above, including any personal information you typed in the message and, for Technical problem messages, the displayed app and device diagnostics.

Anonymous usage events are not linked to your account, so account deletion does not remove them; they are deleted 13 months after they are received. You can stop them at any time with Share anonymous usage data in My Account.

Account deletion does not cancel a Google Play or App Store subscription. Cancel separately in Google Play's subscription center on Android or Apple's subscription settings on iOS. Uninstalling, signing out, or clearing local data also does not cancel a subscription.

If self-service deletion fails, email [email protected] from the verified email used in the app. Manual requests are completed within 30 days. Never send a password, access token, or purchase token.

Security

VanhSoft uses HTTPS, access controls, forced row-level security, pseudonymous identity binding, encrypted purchase tokens, restricted server ports, log rotation, and encrypted off-server backups. No system can be guaranteed perfectly secure; contact us if you believe your account or data is at risk.

Age

Ever Teleprompter is designed and marketed for users aged 16 and over, and is not designed or marketed for children under 16. If you are below your local age of legal majority, or cannot agree to the Terms yourself, use the app only with permission from a parent or legal guardian who accepts the Terms on your behalf.

Contact and policy changes

Questions or privacy requests: [email protected]. Material policy changes will be posted here with a revised effective date.