FinishReel
Privacy Policy
1. The short version
- We collect your name, your email address, how you sign in, billing details if you buy a plan, and the video you upload
- Video containing identifiable people is personal information, and we treat it that way
- We use them to make your reels and send them to you
- We keep your finished reels for a period that depends on your plan: 7 days on the free tier, 30 days on Starter, 90 days on Competitor, and 12 months on Academy and Academy Plus. Source video is deleted after 30 days on every plan. Your account area shows the exact date each reel expires.
- We don't use your video to train AI models, and neither does our AI provider under the paid terms we use
- You can ask us to delete everything by emailing support@finishreel.com
2. Video is personal information
The video you upload may contain images of identifiable people — you, your opponent, referees, spectators.
We treat all uploaded video containing identifiable people as personal information under this policy, and it receives the same protections as your email address or any other personal data we hold. This is true even though we do not attach your name to the video, and even though we do not perform facial recognition or any biometric identification.
3. What we collect
You give us:
- Your name and email address
- If you sign up with an email address, a password. We store only a one-way scrambled form of it, never the password itself
- The video you upload
- The sport you select
- Any title you choose to add to your reel
- Any feedback, corrections, or support messages you send
Collected when you sign in or buy a plan:
- How you sign in (Google, or email and password). If you use Google, the account ID that service gives us. We never receive your password for that service
- A two-letter country code indicating where your account was created or your billing country
- If you buy a plan on our website: your billing country, and the customer and subscription IDs our payment processor, Stripe, gives us. Your card details go to Stripe, not to us
- If you buy a plan in our Android app: the purchase and payment IDs Google Play gives us
Collected automatically:
- Your IP address. We keep a one-way hash of it to apply fair-use limits. We store your IP address in encrypted form as part of the consent record for each upload. It becomes permanently unreadable after 12 months, or sooner if you ask us to delete your data. We do not use your IP address for tracking, profiling, or any purpose other than evidencing your consent to our Terms.
- A consent record for each upload: when you confirmed, which version of our Terms applied, your IP address (encrypted, as above), and your browser identifier
- Basic technical information about your browser or device
- Technical details of your upload (file size, duration, resolution, format)
- Records of how your upload was processed
We do not ask for your age or date of birth.
4. Why we collect it
| What | Why |
|---|---|
| Email address | To send you your reel, to respond to support requests, and to apply fair-use limits |
| Video | To produce your reels — this is the service |
| Reel title | Rendered onto your reel, if you provide one |
| IP hash | To apply fair-use limits and prevent abuse |
| Technical details | To diagnose faults and improve the service |
| Feedback and corrections | To understand where the service gets things wrong |
We don't sell your personal information. We don't share it for advertising.
5. How long we keep things
| What | Kept for | Then |
|---|---|---|
| Source video you uploaded | 30 days | Deleted |
| Clips extracted from it | 30 days | Deleted with the source |
| Finished reels | 7 days to 12 months, depending on your plan | Deleted |
| IP address | A one-way hash, for fair-use limits. The address itself only in encrypted form, in each upload's consent record | Unreadable after 12 months, or sooner if you ask us to delete your data |
| Processing records | 12 months | Deleted |
| Application logs (hosting platform) | 30 days | Deleted automatically by the hosting platform |
| Audit logs (hosting platform, imposed by the provider) | 400 days | Imposed by the hosting provider and not configurable by us; deleted automatically at the end of the provider's retention period |
| Email address | Until you ask us to delete it | Deleted |
| Support messages | 24 months | Deleted |
| Account data in point-in-time recovery snapshots (excludes video, which is destroyed by key deletion) | Up to seven days | Overwritten |
After a reel is deleted, the link we sent you stops working. Download anything you want to keep.
Deletion. When we delete video under our crypto-shredding scheme, it is permanently removed and cannot be recovered from any backup. Stored files are encrypted at rest.
During upload, your video briefly passes through a temporary staging area in our secure infrastructure before being re-encrypted under a unique key we control. This staging copy is deleted immediately after processing, with automatic expiration after 24 hours as a backstop.
6. Artificial intelligence
FinishReel uses automated analysis, including a third-party AI service, to identify which moments of a match to include in a reel.
We do not train AI models, and we do not use your video to train any model.
Your whole match is sent to Google's Gemini API for analysis: a reduced-size copy, with its audio, in 90-second pieces, plus shorter clips of likely highlights and of the end of the match. This is a required part of producing your reel. We use Google's paid service tier, under which Google does not use submitted content to train or improve its models. Google's free tier operates under different terms that do permit such use — we do not use it.
Google keeps submitted content for up to 55 days to detect abuse of its service. During that time, authorised reviewers at Google may inspect content that Google's systems flag. This retention is governed by Google's terms, not by this policy.
If we ever wish to use your footage to improve our own internal quality benchmarks, we will ask you explicitly and it will be off unless you turn it on.
7. Service providers — and exactly what each one receives
We deliberately keep your identity separate from your video: no provider receives both.
| Provider | Receives | Does not receive |
|---|---|---|
| Google (Gemini API) | Your whole match, as a reduced-size copy with its audio (see section 6), with nothing attached that identifies you | Your email, name, match title, IP address, or anything identifying whose match it is |
| Google Cloud | Runs our processing software, under Google's Data Processing Addendum | Google does not access or use this content |
| Cloudflare (R2) | Video files stored under randomly generated names | The email address attached to an upload — it is encrypted before storage and Cloudflare cannot read it. Waitlist and support messages are covered in section 11. |
| Vercel | Web requests and IP address | Your video |
| Resend | Your email address and a link | Your video |
| Stripe (merchant of record) | Customer's email address and account identifier from checkout; Stripe also collects transaction data in its own right (payment method, billing details, tax, subscription status, dispute records) under its own privacy policy | Video. We do not pass video to Stripe. Card details are never seen or stored by us. |
Only our own systems connect your email address to your video. Our AI provider has no way to know whose match it is analysing.
One exception you control: if you add a title containing names, that title is rendered into the finished video. It is added after analysis is complete, so it is never sent to our AI provider — but it appears in the stored reel and anything you post.
8. Children
FinishReel is for adults. You must be 18 or older to use it.
During our beta period, footage containing any person under the age of 18 may not be uploaded. Grappling has many junior competitors, and we are not currently equipped to handle their data with the protections the law requires.
If we become aware that uploaded footage contains a person under 18, we will delete that footage and all associated data immediately.
We do not knowingly collect personal information from or about children under 13. If you believe we have, contact support@finishreel.com and we will delete it.
9. Where we operate
FinishReel is available only to users in the United States, and data is processed in the United States. We do not currently offer the service to users in the European Union, the United Kingdom, or elsewhere outside the US.
10. Deleting your data
You can delete your account and everything in it yourself: in the FinishReel app under Account → Delete account, or on our website under Account → Settings → Delete account.
Email support@finishreel.com and ask. Include the reference code from any FinishReel email if you have it. We'll delete your uploaded video, your reels, and your email address.
What we keep despite a deletion request. Some records are not deleted when you ask, because we need them to operate the service or meet legal obligations. This section says what those are and why.
Consent evidence. We keep a record of the version of the Terms of Service you agreed to and the timestamp of that agreement. It is linked to you by a one-way code derived from your email address, not the address itself, and does not include your IP address or any video. We keep it for as long as the Terms under which you used the service may need to be enforced, which we set at seven years from the end of your relationship with us.
When you subscribe on our website, we also record your agreement to automatic renewal: the plan, the price shown, when you agreed and which wording you agreed to, linked to your account number. We keep it for seven years.
Support messages. Messages you send us through our contact form or by email are retained for 24 months from the date each message was received. They are encrypted at rest and are not covered by per-job crypto-shredding. We retain them to resolve support requests, investigate disputes, and defend against claims.
DMCA records. Records related to notices and counter-notices under the Digital Millennium Copyright Act, including the complainant's contact details, a description of the work, and a one-way code linked to the uploader's email address, are retained for seven years from the date of the notice or counter-notice.
We remove your data from our live systems immediately when you delete your account in the app. If you ask us by email, we process the request by hand and complete it within 7 days. Account data may persist in point-in-time recovery snapshots for up to seven days, after which it is overwritten and unrecoverable. Video is not included in these snapshots — it is destroyed by encryption-key deletion, which takes effect immediately and is not subject to any recovery window.
Platform logs are retained by our hosting provider and are not covered by our deletion process. Application logs are retained for 30 days. Audit logs are retained for 400 days; this period is fixed by the hosting provider and cannot be shortened by us. These logs carry a non-reversible token derived from your email address, not the address itself. They are not reachable by a deletion request.
Data held by Stripe as merchant of record — including transaction data and your Link account — is governed by Stripe's privacy policy and deletion process, not ours. Contact Stripe through Link to manage or delete that data.
11. Security
Uploads travel over encrypted connections. Stored files are accessible only through unguessable links that we generate. Credentials are never included in our logs.
When your email address is encrypted. The email address attached to a video you upload is encrypted before it is written to storage, so our storage provider cannot read it. Two other places hold your address without that encryption: the waitlist, if you ask to be told when we support another sport, and any message you send us through the contact or report-a-problem forms. We are changing that, and this page will say so when we have.
No system is perfectly secure, and we don't claim otherwise.
12. Changes
We may update this policy. Material changes will be flagged in the app.