VIPCasting 1.9 Privacy Policy
Updated for version 1.9 on October 18, 2026. VIP prices and terms remain unchanged. Previous policies remain available for earlier app versions.
Controller
Petr Pikora, Háje nad Jizerou, Rybnice 16, 513 01, Czech Republic, IČO 72935677. Contact: privacy@vipcasting.app.
Local tools and optional cloud
Photos, recordings, casting projects, scripts, PDFs and ZIPs are created on the phone and are not sent automatically. Registration and disclosure are optional; you choose the data and photos to publish yourself. We do not use advertising SDKs. The optional Google ML Kit translation uses the technical diagnostics described below.
Account and subscription data
We store your email, display name, a secure password hash, expiring login sessions, terms consent and verification status. For VIP we store the product, subscription status, expiry, purchase token and its hash in private server storage to verify purchases with Google Play. Google handles payment information; we do not receive your payment card details.
Adult declaration
Public profiles and Casting Room require a verified email, an active VIP subscription and your explicit declaration that you are at least 18. Available Google Play age signals are consulted and known conflicts block access. This is not identity verification. We do not collect identity documents or date of birth. The declaration expires after one year and can be renewed.
Publication and private links
A public profile is accessible to anyone who knows the link. It is not listed in a directory and requests that search engines do not index it; this does not guarantee secrecy. Your contact email is not displayed. Casting Room additionally requires a PIN and expires after 1–30 days. The owner can revoke links. Content is reviewed before publication, and edits require another review.
Security and recipients
Connections use HTTPS. Photos are re-encoded to remove embedded metadata and stored outside the public web directory. Media access checks publication, subscription, age declaration and, for Casting Room, PIN and expiry. Google Play verifies subscriptions; Active24 provides hosting and email services. We do not sell personal data. Recipients of your shared link or exported files can make copies that cannot be recalled.
Cookies and technical records
A necessary session cookie maintains access after entering a Casting Room PIN; it is not used for advertising. Language and theme preferences may be saved locally in your browser. Hosting may keep technical security logs. Abuse counters use a salted hash of the IP address and are purged on subsequent requests after their retention window of up to 24 hours.
Retention and deletion
Account and hosted content are retained while your account exists. An expired subscription hides hosted profiles and media but does not automatically delete your account. You can hide a profile immediately or delete your account and hosted photos, profile, links and purchase records in the app, without an active subscription. You can also request deletion at /delete-account/ from your account email. Deletion does not cancel a Google Play subscription; cancel it separately in Google Play. Your phone files and copies shared elsewhere remain under your control.
Purpose and your rights
Data is used to provide the account, hosted portfolio, contact relay, subscription and content protection you request. Optional publishing follows your explicit choices; security records protect the service. You may request access, correction, deletion, restriction or portability and complain to a data protection authority, including the Czech Office for Personal Data Protection. Contact privacy@vipcasting.app. Local tools remain available to younger users according to the app audience; public hosting is restricted to adults.
Speech transcription, translation and technical analysis
The whisper.cpp model is downloaded from Hugging Face at your request (approx. 148MB); the provider processes the technical data of the connection, such as the IP address, during the download. Speech recognition, technical analysis of photos and translation of subtitles take place on the phone. Audio, photos, and subtitle text are not sent for these operations. Google ML Kit downloads language models and sends device and application data, installation identifier, set languages, performance metrics, input and output size, and error codes to Google for diagnostics and usage analysis. You can delete models in phone storage management. The results of automatic processing need to be checked. The training partner's voice only uses the phone's available local voice.
Password recovery and local projects
Password reset uses a one-time link sent to the email account with a validity of 30 minutes. The server only stores the token print; a successful change will log out all account sessions. The projects and supplementary materials of the Media Kit or the pet remain on the phone. Exports and calendar events are shared by yourself to the selected application; its administrator then processes the transmitted data according to its own rules. One local recovery copy is saved before replacing the local profile from the web. Unused media cleanup protects files referenced from drafts, projects, and this copy. Uninstalling may remove local assets, so save important exports outside of the application as well.
Google Translate
Automatic translation uses Google Translate via ML Kit. Google makes no warranty of accuracy, reliability, merchantability, fitness for a particular purpose, or non-infringement with respect to translations.
Google ML Kit / Firebase
For language model configuration, Google ML Kit also uses Firebase Remote Config and Firebase Installations. These process country and language codes, time zone, system, app and SDK versions, and app and installation identifiers.
Encrypted backups and transfer of projects
At your command, the application will create a file with the selected password that contains local casting and UGC projects, attached media, exports, and work-in-progress edits. The file is encrypted and protected against changes. We do not send the password to the server and cannot recover it. You save or share the file using an application of your choice; its provider is governed by its own terms and conditions. The deposit does not include login, payment information, Casting Room PINs or a separate profile and settings of other studios. New copies of the projects are added when restoring. Temporary work files are in the application's private cache; old copies are cleaned up when the backup is next used after 24 hours.
Managing Casting Rooms
The logged in owner can see the names and validity of their rooms and can cancel the individual link. We save the room name and validity data together with the room on the server. The link and PIN of the newly created room are saved to this phone's protected storage for re-sharing; it will be deleted after logging out. The server continues to store only the PIN print. You share the link and PIN separately on your own instructions. Transferring projects to another phone will not restore these access details.