Privacy Policy

Last updated 15 October 2026

Clickseal is a camera-only social app for photos and videos. This policy explains what we collect, why, who it is shared with, how long we keep it, and the choices you have. We wrote it to be read.

Who we are

The controller of your data is Nicolas Vermehren, Ioanni Psychari 23, 1107 Nicosia, Cyprus ("we", "Clickseal"). You can reach us at support@clickseal.app.

We are in the European Union, so the EU General Data Protection Regulation (GDPR) applies. The supervisory authority is the Office of the Commissioner for Personal Data Protection of Cyprus (dataprotection.gov.cy).

What we collect

• Account: your email address (you sign in with a code we email you), your handle, display name and bio, your profile photo (if you add one: always a photo taken in the Clickseal camera, never from your gallery; other people on Clickseal can see it unless you have blocked each other), and your privacy settings.
• Date of birth: asked once at sign-up to check you are 16 or older. It is kept private, never shown to anyone, and used only for that check. If you are under 16 the sign-up is refused and nothing about you is kept.
• What you make: the photos and videos you capture in the Clickseal camera, the edits you make to them (trims, speed, text, stickers, sound choice), voiceovers you record, captions, replies, stories, slideshows, messages, likes (stamps), who you follow, your close friends, the communities you create or join, and the people you block.
• Seal data: so that a capture can be proven genuine, the app creates a key inside your phone's secure hardware and sends us the public half, plus the phone's attestation (Android Key Attestation and Play Integrity, or Apple App Attest), the app version, the time of capture, the length of the clip, which camera was used and the zoom level. The secret key never leaves your phone. We do not collect your advertising ID, your contacts, your location or your photo gallery. Clickseal cannot read your gallery and has no way to import from it.
• Notifications: if you allow them, a push address for your phone (from Expo) and which kinds you switched off. A notification only says who did what, for example "anna liked your post" or "anna sent you a message"; it never contains what someone wrote. The push address is removed when you sign out on that phone, when the app is uninstalled, or when you delete your account.
• Community invites: if you install Clickseal from a community poster or invite link, the app reads that community's code from the link once (on Android through the Google Play install referrer, on iPhone through the Clickseal App Clip) to add you to the community. Nothing else is read from the link and nothing is tracked.
• Reports: when you report something we keep your report. When someone reports you, we keep a copy of what was reported, so we can act on it.
• Technical data: your IP address and request logs are processed by our hosting providers to run and secure the service.
• What you watch and do, for your For you feed: which posts you watch and for how long, and what you do with them (like, save, send, reply, repost or remix, follow from a post, open the creator's profile, download, report or block), with the time and where in the app you saw it. We use it to choose what For you shows you. It is switched on by default and you can switch it off (see Your rights). Your own posts, and posts you cannot see, are never recorded. Today For you still ranks posts by how popular and how recent they are; we will use this record for personalising it as we introduce that. We also keep anonymous counters per post (how many views, how many people watched it to the end) that are not linked to any account.
• We do not use advertising trackers or third-party analytics, and we do not sell your data. The record of what you watch is kept only in our own database and is used only to run Clickseal.

Why we use it, and our legal basis

• To provide the app: your account, your posts, messages and the audience you choose. (Contract.)
• To prove that photos and videos came from the in-app camera on a genuine device. (Contract and our legitimate interest in an honest service.)
• Screen detection: every photo and video posted on Clickseal, including stories, goes through our screen detection system, which looks for signs that it was filmed from another screen (a way around the in-app camera rule). If it flags a post, a moderator reviews it; until then the post is not recommended to people who don't follow you, and it cannot be shared, downloaded or remixed. Nothing is decided by the system alone. To improve it, for the photos and videos a moderator reviews (flagged ones, a small random sample of the others, ones people report and ones a moderator flags) we keep a set of numbers the system computed from the picture, together with the moderator's decision; not the photo or video itself. We use them only to improve screen detection, and a person reviews every new version before it is used. (Our legitimate interest in an honest service.)
• To keep people safe: reports, blocking, removing content and accounts that break the rules, preventing abuse and fraud. (Legitimate interest, and legal obligations such as the EU Digital Services Act.)
• To check your age. (Legal obligation and our legitimate interest in protecting young people.)
• To email you a sign-in code. (Contract.)
• To choose what your For you feed shows from what you watch and react to, and to keep the feed relevant and varied. (Our legitimate interest in a feed that is useful to you. You can object at any time by switching "Personalise my For you" off. We treat 16 and 17-year-olds the same as adults for this.)

Who sees your content

You choose the audience of each post: everyone, followers, or close friends. You can also post to a community you are in: then only its members can see the post, and it cannot be reposted or remixed. Stories last 24 hours. A private account is only visible to followers you approve. Blocked people cannot see you and you cannot see them. Blocking someone also takes your footage out of their remixes and duets, and theirs out of yours; each of you keeps your own, and reposts either of you made of the other's posts are removed. A repost or remix is never more visible than the posts it is built from.

Sealed posts show when they were filmed, taken from your phone's clock, and your profile shows on which of the last 28 days you filmed, counted only from posts the person looking can already see. The communities you are in may be shown on your profile and next to your posts.

Sharing outside Clickseal: if you switch this on for a post (it only works for posts open to everyone, while your account is public), anyone with its link or Seal ID can see the post and its seal details on clickseal.app, and people who can see it can download a copy marked with your handle and the Seal ID. You can switch it off at any time; after that the page no longer shows the post, but copies already downloaded cannot be recalled.

A post you allow others to remix can be used, with credit to you that cannot be removed, inside other people's remixes and duets. You can switch this off per post.

Tags and mentions: the people tagged in a post are shown on it to everyone who can see the post, and a post can only tag people who are allowed to see it. Unless you change "Who can tag or mention you" in Privacy, others can tag you or @mention you; you can remove yourself from any post you are tagged in.

Who we share data with

We use a small number of service providers (processors) who handle data only on our instructions:

• Supabase: database, sign-in, file storage and real-time messaging. Hosted in the EU (Frankfurt).
• Mux: converts and streams your videos. Videos are sent to Mux the first time they are played. Mux may process data outside the EU; the transfer relies on the safeguards in our agreement with them.
• Google (Android) and Apple (iOS): they issue the device attestation that lets us verify a capture, and deliver the community code described above when you install from an invite link.
• Expo (650 Industries, USA): delivers push notifications to Google's and Apple's push services. It receives your phone's push address and the short notification text (who did what), never message text. The transfer outside the EU relies on the safeguards in our agreement with them.
• Google Cloud (Frankfurt, EU): when you download a video, our own rendering service there puts the post together into one video file with the Clickseal mark. It receives the post's clips and the text, stickers and mark drawn by your phone, and keeps nothing once the file is made. Our screen detection also runs there: it receives each new photo or video, analyses it and keeps nothing.
• An email provider that delivers the sign-in code.

We may disclose data to authorities where the law requires it, or to protect someone from serious harm. We do not share your data for advertising.

How long we keep it

• Your account and content: until you delete them or your account.
• Notifications: deleted from our servers as soon as they are sent.
• Video downloads: the pictures your phone sends are deleted as soon as the video is made; the finished video is kept only until your next video download or until you delete your account.
• Stories disappear from the app after 24 hours and are deleted from our database about a day later. The photo or video itself stays in your vault until you delete it.
• When you delete your account, your profile, posts, stories, messages, clips (with screen detection's numbers for them), devices and sign-in are deleted straight away, and the original files and the video copies at Mux are deleted shortly after. Backups may keep a copy for a short period before they are overwritten.
• If a moderator removes an account for faking content (for example filming a screen or posting AI-generated video), screen detection keeps the numbers it computed from that account's reviewed photos and videos, with the moderator's decisions, for 2 years, only to improve screen detection. They are no longer linked to the account and the photos and videos themselves are deleted. This does not apply when you delete your own account: then everything is deleted.
• Reports and the copy of what was reported are kept for up to 12 months after they are resolved, so that we can deal with repeat abuse and appeals. We keep them longer only if the law or an investigation requires it.
• Other people's remixes that used your footage lose that footage when you delete the original; they keep their own.
• What you watched and did for For you: 90 days, then it is deleted automatically. It is deleted at once if you switch "Personalise my For you" off, and with your account. Anonymous per-post counters are kept for as long as the post exists.

Your rights

You can ask us to give you your data, correct it, delete it, restrict or object to some uses, and move it to another service. You can withdraw any consent you gave.

• Download your data: Profile, then Account, then Download my data. It includes your posts, clips (with download links), messages, follows, the record of what you watched for For you, and more.
• Switch off personalisation: Profile, Account, Privacy, "Personalise my For you". This deletes the record we hold and For you then shows popular posts instead.
• Switch off "Seen": Profile, Account, Privacy, "Show when you've seen messages". We still record when you last opened each conversation (to count unread messages), but nobody is shown it, and you no longer see when others have read yours.
• Delete your account: Profile, then Account, then Delete account. This is permanent.
• Edit your profile and privacy settings in the app.
• Anything else, or if you cannot use the app: email support@clickseal.app. We reply within one month.
• You can complain to the supervisory authority above if you think we have not handled your data properly.

Children

Clickseal is for people aged 16 and over. We do not knowingly allow younger children to use it. If you believe a child under 16 has an account, report it in the app or email us and we will remove it.

Security

Traffic is encrypted in transit. Visibility rules are enforced in the database itself, not only in the app. Media is served through short-lived signed links. The seal key lives in your phone's secure hardware. No system is perfectly secure; if a breach affects you we will tell you and the authority as the law requires.

What "sealed" does and does not mean

A sealed photo or video was captured through the Clickseal camera on a genuine phone, by a key that never left the phone, and has not changed since. It does not prove that the scene was not staged, that nobody filmed a screen (screen detection checks for that separately), or that replaced sound is original; replaced sound is always labelled.

Changes

If we change this policy in a way that matters we will tell you in the app before it applies. The date at the top shows the current version.