Privacy Policy

We collect the following categories of information:

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

We use your information to:

• Provide, maintain, and improve the Service.
• Manage subscriptions and credits. Purchases made up to 4 October 2026 were processed via Polar; new purchases are currently paused.
• Send transactional communications (receipts, alerts).
• Generate and publish content on your behalf via the AI pipeline.
• Provide customer support through Crisp live chat (with your consent for the cookie).
• Disclose AI involvement and prepare verifiable content-origin information for generated outputs. Our AI transparency documentation describes the implementation and its limits.
• Analyze usage patterns to improve product quality.
• Detect and prevent fraud, abuse, and security incidents.

We share data only with service providers necessary to operate Reelry:

We keep account-linked generation, payment, delivery, feedback and security events to operate the service, reconcile purchases and investigate problems. These necessary server-side records are separate from optional browser analytics and can include user or workspace identifiers. We do not send payment-card details to our analytics services.

• We retain your data for as long as your account is active.
• After a verified deletion request, we confirm subscription cancellation and remove the account and its owned-workspace data from our application and storage. Requests are retried if a provider is unavailable; you can view the request status or contact privacy@reelry.app. We aim to complete verified requests within 30 days and will explain any extension required by applicable law.
• Generated media files (images, videos) are stored in cloud storage and removed as part of the deletion workflow. Content belonging to a shared workspace may remain with that workspace when you leave it. Contact us about any personal data in shared content. Previously downloaded or independently shared copies cannot be recalled from other recipients.
• Sign-up waitlist: if you join the waitlist while new sign-ups are paused, we store your email address, language, the page you came from and any campaign tags, only to email you once when sign-ups reopen. We delete it after that email is sent, or earlier on request to privacy@reelry.app.
• Service providers may retain limited technical records or backups under their documented retention periods and legal obligations. Contact privacy@reelry.app about provider-specific data requests.
• Billing records may be retained longer as required by law. Polar retains payment records independently as required for tax and regulatory compliance.

We use industry-standard security measures to protect your data:

• TLS protects account and media transfers. DigiCert's timestamp endpoint uses HTTP for digest-only requests; we validate its cryptographically signed response. No media, scripts, customer details or signing keys are sent to that endpoint.
• Organization access controls for database records and media. Rendering providers and authorized viewers receive time-limited access to private media. Published outputs are available while public sharing is enabled.
• Encrypted storage for API keys and sensitive credentials.
• Access to production data is restricted to authorized personnel only.
• Regular security reviews and dependency audits.

All users have the following rights. If you are in the EEA, UK, or Switzerland, these rights are guaranteed under the GDPR:

• Access - request a copy of your personal data.
• Rectification - update inaccurate or incomplete data.
• Erasure - delete your account and all associated data (“right to be forgotten”).
• Restriction - request that we limit processing of your data in certain circumstances.
• Portability - receive your data in a structured, commonly used, machine-readable format.
• Object - object to processing based on legitimate interest, including profiling.
• Withdraw consent - where processing is based on consent, withdraw it at any time (e.g., optional cookies via the cookie settings).

Exercise these rights by contacting us at privacy@reelry.app or using in-app controls in Settings. We will respond within 30 days (or sooner if required by law).

If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

We use cookies to operate the Service. You can manage your cookie preferences at any time using the cookie settings banner or the “Cookie Settings” link in the footer.

We do not use advertising cookies, tracking pixels, or third-party analytics that track you across websites.

Even if you decline optional cookies, we count visits to our public pages (landing pages, free tools, public reel showcases) anonymously. This measurement works without cookies: no identifier or other personal data is stored on your device, and no stored personal data is read from it.

• What is measured: pages viewed, the referring site, and browser type - on our public pages only, never inside the logged-in app.
• How it works: no cookies are set and no identifier is stored on your device. The analytics tool reads only its own consent-status flag (strictly necessary to respect your cookie choice) and performs a one-time technical check that browser storage works, which writes a meaningless test value and removes it immediately. Your IP address and browser identifier are processed transiently on servers in the EU to compute a short-lived identifier that changes daily and cannot be reversed. Your raw IP address is not stored.
• Processor: PostHog Cloud EU (Frankfurt, Germany), under a data processing agreement.
• Legal basis: legitimate interest (Art 6(1)(f) GDPR) - measuring and improving our website.
• Retention: analytics includes event-level records as well as aggregate statistics. Cookieless visitor identifiers change daily; those identifiers alone do not link visits across days.

You have the right to object to this measurement at any time (Art 21 GDPR). Use the toggle below - it takes effect immediately. We also honour your browser's Do Not Track setting: if it is enabled, no measurement takes place.

Health3 AG, the operator of Reelry, is based in Switzerland. The European Commission has recognised Switzerland as providing an adequate level of data protection, so transfers of personal data between the EU/EEA and Switzerland do not require additional safeguards. For transfers of personal data to other jurisdictions (for example, to our US-based service providers), we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission, supplemented with the Swiss Federal Data Protection and Information Commissioner's (FDPIC) recognised addendum where applicable.
• Transfers to countries with an adequacy decision from the European Commission or the Swiss Federal Council.
• Reliance on the EU–US Data Privacy Framework and the Swiss–US Data Privacy Framework where our sub-processors are certified under them.
• Additional technical and organizational measures to protect your data during transfer.

Polar processes payment data in accordance with their own international transfer mechanisms as described in their Privacy Policy.

Reelry is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If we discover that we have collected data from a child, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. The “Last updated” date at the top of this page reflects the most recent revision.

Data controller: Health3 AG, a company incorporated in Switzerland with its registered office at Wiesenstrasse 10A, 8952 Schlieren, Switzerland, Swiss VAT number CHE-396.908.066 MWST, is the data controller for personal data processed through Reelry.

For privacy-related inquiries or to exercise your data protection rights, contact us at privacy@reelry.app. We will respond within 30 days (or sooner if required by applicable law).

Postal address:
Health3 AG
Wiesenstrasse 10A
8952 Schlieren
Switzerland

Health3 AG is based in Switzerland, outside the EU/EEA and the UK. Under Article 27 of the EU GDPR and the UK GDPR we have appointed representatives that you and data protection authorities can contact about how your personal data is handled:

• EU representative: iuro Rechtsanwälte GmbH t/a Prighter, Schellinggasse 3, 1010 Vienna, Austria.
• UK representative: Prighter Ltd, United Kingdom.

You can contact the relevant representative about any data protection matter concerning your personal data.