In short

• Your videos stay on your device — in the plugins, in EditFast PC and in the mobile app. Cutting, editing and exporting happen on your machine or phone, and no video file is uploaded to us.
• What passes through our server is only what a request needs: the audio for transcription, still frames and text for EditFast AI, a sound description or search words for sound effects and b-roll.
• We don’t sell your data to anyone, and nothing from your work is ever used in advertising.
• You can delete your account and everything in it whenever you like — from the app, from the web, or by asking us.

Your account

One EditFast account works on the site, in every plugin, in EditFast PC and in the mobile app. What we keep about it, and why:

• Your email, your name and phone if you gave them, and your password stored hashed (scrypt) — to sign you in.
• The IP address the account was made from and the last one you signed in from, and your country — to stop abuse, such as many accounts from one place.
• If you came through an affiliate’s link: which affiliate, so they get their commission.
• The devices registered on your subscription.
• Usage as numbers only: transcription minutes, EditFast AI credits, and how many times each tool was used — nothing from your projects.
• Your orders, the receipt pictures you upload for a transfer, and purchase records from Google Play or the App Store.
• Reports you send from the mobile app about a reply of the AI, with the reply you reported.
• If you are an affiliate: how you want to be paid (the wallet or account and the name on it).

Devices and the free trial

In the plugins, a device is identified by a fingerprint built from its name, the account name on it and the platform, hashed into a number. Nothing else about your machine is collected.

For the free trial — of the plugins and of EditFast PC — we record a hardware fingerprint (a SHA-256 hash of the Windows machine id and the board id, or of the Mac’s — never the ids themselves), the device fingerprint, the IP address the trial was claimed from and the one the account was made from, your country and your phone number, with the trial’s dates, so one trial is given per account, device, address and number. They stay on the trial’s record; the address is only matched for a year.

A plugin you download carries a small signed note naming your account, so that a leaked copy can be traced back to where it came from.

The mobile app makes a random number of its own on your phone to keep you signed in. It is not your phone number or any id of the device.

Your work

Your projects, your edits and your chats with EditFast AI are saved on your own device. What passes through our server, feature by feature:

• EditFast AI: your message, still frames from the video, the transcript and the pictures you send pass through our server to the AI provider that answers (when it needs to look something up, it searches the web through that provider). Its answer is kept on our server for up to 24 hours, so it isn’t lost if your connection drops, then deleted. In the mobile app the conversation is also held in our server’s memory for up to 3 hours between the steps of a request, so your phone doesn’t upload it all again at every step; then it is let go.
• Transcription: the audio only — never the video — passes through our server to the transcription service we use, Groq, with Deepgram as a backup, and comes back as text. We don’t keep the audio.
• Sound effects, voice-over and voice cleaning (ElevenLabs): a sound’s description, the script you write for a voice-over, or the audio of a video you ask to clean is sent to ElevenLabs and comes back as audio. What comes back is saved on your device. A sound effect made from a description is kept by that description only, so it isn’t made twice.
• B-roll (Pexels): only the search words.
• If you added a key of your own in an older version of a plugin, the request goes from your machine straight to that service, and your key stays on your machine.

The mobile app

Edit Fast for Android and iPhone (and its web version at editfast.shop/app) edits on the phone itself. Its edits, its chats and the files it makes stay on the phone. What it asks the phone for:

• Photos and videos: only the ones you pick yourself in the phone’s picker.
• The microphone, in the versions that take a request by voice: only while you record it.
• Notifications: to tell you an edit is ready while you are out of the app. They are made by the phone itself.
• To open in Arabic or English, the app reads on the phone the phone’s language (and, in some versions, the country of the SIM, the network or the store account); this is not sent anywhere.

The app has no advertising pixels and no tracking tools. Credits bought in the app are paid through Google Play or the App Store. The app’s own page has the same in short: the app’s privacy policy.

EditFast PC

EditFast PC works on your computer: projects, their media, autosaved copies and exports are kept there (in the «EditFast PC Native» folder in your Documents), and your videos are never uploaded.

When you sign in, and now and then while it runs, it sends our server: your email and password (only when signing in — the password is not stored on the computer), a device fingerprint hashed from the computer’s name, the Windows user name and the platform, the computer’s name (up to 40 characters) so it shows in your account’s device list, the app’s version, and a hardware fingerprint (a SHA-256 hash of the Windows machine id and the board id) — so your subscription stays on the devices you paid for and the trial isn’t repeated.

The features that pass through our server are the ones under «Your work»: EditFast AI (your messages, a description of the timeline, the transcript and still frames from your video), transcription (the audio only), caption translation (the captions’ text), voice-over (the text, to ElevenLabs) and stock search (the search words, to Pexels).

Straight from others: a stock clip or photo you pick downloads directly from Pexels. The AI model files come from our server, and only if it fails from their original host (GitHub or Hugging Face) — a plain download, which like any download shows them your IP address.

Updates: it asks our server whether there is a new version (without your account), and downloads the update with it. If an update fails to install or start, it sends us a short report — the device fingerprint, the version and the step that failed, no file paths. Apart from that there is no crash reporting, no usage statistics, and no tracking or advertising tools. Its logs stay on your computer.

On your computer it keeps your account file (the sign-in sealed with Windows’ own encryption, DPAPI, your email, name and licence), the downloaded models and sounds, and the logs.

The site and cookies

We count visits to the site ourselves, on our own server: the page, the day, the site that sent you and the kind of device — with no IP address stored and no third-party analytics.

The cookies the site itself sets:

• ef_session — keeps you signed in, for a week.
• ef_ref — the affiliate whose link brought you, so their commission is counted.
• ef_lang — the language you chose with the button, for a year.
• ef_cc — your country, for a day (the currency and the language).
• ef_consent — your answer in the consent box, where it is asked.

Your country is worked out from your IP address on our own server, with a free database kept there (IP to Country Lite by DB-IP, CC BY 4.0). It sets the currency and the language you see, and nothing else; your address is not sent anywhere for it.

Advertising

While we run ads, the site loads the pixel of the platform we advertise on — TikTok or Meta — on its pages (never in the admin panel). The pixel is theirs: it may set cookies, and it tells them that a visit or an order happened and its value, so we know whether an ad worked.

Once you have an account, one thing about you goes with it: a SHA-256 fingerprint of your email, worked out in your own browser — the fingerprint leaves your device, not the email.

When an order is paid, our server tells Meta about the purchase (Meta’s Conversions API): its value and currency, your email and phone as SHA-256 fingerprints, a fingerprint of your account number, the IP address and browser the order was placed from (written on the order for this), and Meta’s own cookies (_fbp, _fbc). Your name, your payment details and anything from your work are never sent.

In the EU, the EEA, the UK and Switzerland none of this happens until you say yes in the box the site shows you; if you say no, it never does. Anywhere, you can block trackers in your browser and the site works exactly the same.

The mobile app, the plugins and EditFast PC carry no advertising pixels.

Payments

• Card payments are taken by Stripe (outside Egypt, in US dollars) or XPay (in Egypt). Your card details go to them directly and never reach us.
• For a transfer (InstaPay or a wallet), the receipt picture you upload is kept with the order so we can check it.
• In the mobile app, Google Play or the App Store takes the payment; we receive the purchase number, the pack and the date.

Who sees your data

Nobody buys it from us. It reaches only the services that carry out what you asked for, each with what that needs:

• the AI provider that answers EditFast AI; Groq and Deepgram (transcription); ElevenLabs (sound effects, voice-over, voice cleaning); Pexels (b-roll);
• Stripe and XPay (cards); Google Play and the App Store (the mobile app’s purchases);
• Brevo, which sends our emails (such as resetting a password); and Telegram, where the owner gets the service’s notices (a new account, an order, a report) — your email appears in them;
• Meta and TikTok, within the limits under «Advertising»; and the company that hosts our server.

We may also hand data to an official body if the law obliges us to.

How long we keep it

• Account data: until you delete the account.
• EditFast AI’s answers: 24 hours. The mobile app’s conversation in our server’s memory: up to 3 hours. Audio: not kept at all.
• The free trial’s record (fingerprint, address, number): kept so a trial isn’t given twice; the address is only matched for a year.
• Payment records and receipts: as long as tax law requires — tied to a deleted account once you delete yours.
• Visit counts are totals per page and day, with nothing about any one person.

Your rights and deleting your account

You can see and correct your details on your account page, or ask us for a copy of what we keep about you.

To delete your account: in the mobile app, from the settings («Delete my account»); on the web, from the delete-account page (it works for any EditFast account); or message us. Deleting is immediate and removes your email, name, phone, password, IP addresses, remaining credits, plugin subscriptions and devices; payment records stay, tied to the deleted account.

In the EU, the EEA, the UK and Switzerland you also have the right to object to how your data is used, to take it with you, and to complain to your data protection authority.

Age and security

EditFast — the site, the plugins, EditFast PC and the app — is not meant for children under 13, and we don’t knowingly collect their data. If we learn that we hold data from a child under 13, we delete it; a parent or guardian can also contact us to have it deleted.

In the EU, the EEA and the UK, if you are under the age at which your country lets you agree to an online service on your own (16, or lower where its law sets a lower age), you need the consent of a parent or guardian.

Anyone under 18 needs a parent’s or guardian’s permission before buying anything. In the mobile app, Google Play handles this through family accounts.

Everything travels encrypted (HTTPS), passwords are stored hashed with scrypt, and the keys of the services we use live on our server only — never in a plugin, an app or a page.

Getting in touch and changes

Any question about your data — message us on WhatsApp or Instagram; the address and the number are on the contact page.

If we change this policy, the date below changes; if the change is significant we will say so on the site and in the app. The terms and refund policy are on their own page.