PRIVACY POLICY

P.R.ISM is a live visual-performance app: your phone acts as a camera and controller, and it streams to a screen you connect it to. This page explains, plainly, what data that involves.

What we collect

• Account info — if you sign in, we (via Supabase) store your email address and, for Google sign-in, the basic profile info Google provides. Password sign-in stores a securely hashed password, never the password itself.
• Plan & billing — your subscription tier (free / pro / lifetime) and a Stripe customer reference. Card details are entered directly into Stripe's own checkout page and never touch our servers.
• Camera video — your phone's camera stream is sent directly to the screen device you scan a QR code with, over a peer-to-peer WebRTC connection. It is never uploaded to or stored on any server we run — the live stream itself is not recorded anywhere.
• Screenshot captures — tapping the app's screenshot/record button always saves a still image to your device. Pro and Lifetime plans additionally get the option to save that same image to a cloud archive ("My Sessions") tied to your account, so it's outside the scope of "we don't store video" above — this applies only to still captures you explicitly take, never to the continuous stream.
• Community gallery — from My Sessions, you can choose to share an individual capture publicly; only captures you explicitly mark as shared are visible on the public gallery page. Unmarked captures stay private to your account. You can unshare or delete a capture at any time.
• Diagnostic logs — technical messages (connection state, errors, timing) sent from the app to help debug problems. These are plain operational logs, not analytics profiles, and are periodically deleted from hosting logs. If an error occurs, a summary may be emailed to the developer for troubleshooting.
• Stream performance records — while you are streaming, the app records how the stream itself performed: frame rate, resolution, bitrate, round-trip time, packet loss, which video codec was negotiated, whether the connection was direct or relayed, and your device/browser type and the streaming settings you chose. This exists so streaming problems can be diagnosed after the fact instead of guessed at. It contains no video, no audio, no image data and no IP addresses — only whether the connection was local or not. If you are signed in it is linked to your account so you can review your own sessions; if you are a guest it is not linked to any identity. You can turn it off at any time in Settings → DIAGNOSTICS.
• Basic hosting analytics — our host (Vercel) collects anonymized page-load/performance telemetry. We don't layer any additional tracking or advertising analytics on top of it.

The screen's optional ambient-audio feature analyzes on-screen pixel brightness/color to generate sound — that analysis happens entirely on-device and is never sent anywhere or stored; it isn't a form of data collection.

What we don't do

• We don't sell your data.
• We don't run ads or ad-tracking.
• We don't record what your camera sees — stream performance records describe how well the connection carried the video, never the video itself.
• We don't store or upload the continuous camera stream — only still captures you explicitly save, and only if you're on a plan that includes cloud archive.

Who else sees it

We use a small number of service providers to run the app, and only give them what they need to do their job:

• Supabase — authentication, the database that stores your plan, and (for Pro/Lifetime) storage for cloud-archived captures.
• Stripe — payment processing and billing management.
• Vercel — hosting for the app and its server functions.
• PeerJS / TURN relay providers — help your phone and screen find each other and, when a direct connection isn't possible, relay the encrypted video stream between them. They don't get a persistent copy of it.

How long we keep it

Account and billing records are kept for as long as your account exists, so your plan and purchase history stay intact. Cloud-archived captures are kept until you delete them yourself from My Sessions, or until you delete your account, whichever comes first. Diagnostic logs are short-lived and rotate out of our hosting provider's log retention window. Stream performance records are kept while they remain useful for diagnosing streaming problems, and are removed along with everything else if you delete your account. You can delete your account and all associated data — including cloud captures — at any time from the account menu, or by contacting us (see Contact, below).

Your rights

If you're in the EU/EEA or California, you have the right to access, correct, export, or delete your personal data, and to object to or restrict how it's processed. To exercise any of these, contact us using the address below.

Children

P.R.ISM is not directed at children under 16, and we don't knowingly collect data from them.

Changes

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions or data requests: sebik111111@gmail.com

TERMS OF USE →