1. Who we are
Slate AI Teleprompter (the “App”) is provided by New Level Apps LP, a limited partnership registered in England and Wales under number LP023145, with its registered office at 167-169 Great Portland Street, Fifth Floor, London, United Kingdom, W1W 5PF (“we”, “us”, “our”).
We are the controller of the personal data described in this policy.
Contact, including for anything about privacy: support@slateteleprompter.com
We have not appointed a Data Protection Officer, as we are not required to do so under Article 37 of the UK GDPR.
2. The short version
We built Slate so that your scripts and your recordings never leave your device. We cannot see them, we do not store them, and we have no way to retrieve them.
| What | Where it lives | Can we see it? |
|---|---|---|
| Your video and audio recordings | Only on your device | No |
| Your scripts, projects and takes | Only on your device | No |
| Files you import (DOCX, TXT, clipboard) | Only on your device | No |
| Text you send to the AI script generator | Sent to OpenAI to generate a reply | No — it goes from your device to OpenAI, not through us |
| App usage events, device identifiers | Our analytics and advertising partners | Yes, in aggregate and pseudonymous form |
| Your subscription status | Our subscription partners and Apple | Yes |
We do not sell access to your recordings or scripts. We do not have them.
If we ever introduce an optional feature that would send your content off your device — cloud sync, for example — we will tell you before it launches, it will be off by default, and we will ask for your consent before anything leaves your device.
We do use advertising and attribution tools, and under several US state privacy laws that activity counts as a “sale” or “sharing” of personal information. Section 10 explains what that means and how to opt out.
3. What stays on your device
The following is processed locally on your device only. It is not uploaded to our servers, we do not have access to it, and it is not included in any backup we control:
- video and audio you record in the App, including any recording of your face and voice;
- scripts you write, paste, import or edit;
- projects, takes, folders and the settings attached to them;
- documents you import from the Files app, from DOCX or TXT files, or from your clipboard.
If you delete a recording or a script in the App, or delete the App, that content is removed from your device. Because we never received a copy, there is nothing for us to delete on our side.
Your device may include this content in your own iCloud or local backups. Those backups are governed by Apple’s privacy policy, not ours.
Camera, microphone and photo library permissions are requested by the App so that it can record and save video on your device. Access is used for that purpose only.
4. AI script generation
When you ask the App to generate or rewrite a script, the text of your request is sent directly from your device to OpenAI, which returns generated text. We do not route this through our own servers and we do not keep a copy.
| What is sent | The instructions and any text you provide for generation or rewriting, plus technical data your device necessarily discloses when connecting (including your IP address) |
| Who receives it | OpenAI, L.L.C. and its affiliates |
| Where it is processed | Our OpenAI project is set to Global residency, which means OpenAI may process your request in any jurisdiction where it or its sub-processors operate, including the United States |
| Our agreement with OpenAI | OpenAI acts as our processor under its Data Processing Addendum, which incorporates the EU Standard Contractual Clauses as amended by the UK Addendum. A current list of OpenAI’s own sub-processors is published at platform.openai.com/subprocessors |
| Used to train models? | No. Data submitted through the OpenAI API is not used to train or improve OpenAI’s models unless the customer explicitly opts in. We have not opted in. |
| How long OpenAI keeps it | Up to 30 days for abuse monitoring, then deleted, unless a longer period is required by law |
| Our legal basis | Performance of our contract with you (Article 6(1)(b) UK GDPR) — generating scripts is a core feature you asked us to provide |
Please do not put confidential information, or personal data about other people, into the AI generator. Anything you type there leaves your device. If you need a script about sensitive matters, write it yourself in the App — text you type directly into a script is never transmitted.
You choose what to send. If you submit personal data about other people to the AI features, you do so on your own account and you are responsible for having a lawful basis to do so and for meeting any obligations you owe those people. We do not receive, store or review what you submit, so we are not in a position to act on it for you.
Generated text is produced by a statistical model. It can be wrong, outdated or misleading. You are responsible for checking anything you say on camera. See the Terms of Use for the full position.
5. What we and our partners collect
We do not ask you to create an account. We do not collect your name, email address or postal address unless you write to us yourself.
We and the partners listed below collect the following about your device and your use of the App:
| Category | Examples |
|---|---|
| Device and pseudonymous identifiers | Identifier for Vendor (IDFV), the identifier assigned by our analytics provider, and — only if you allow tracking when asked — the Identifier for Advertisers (IDFA) |
| Device and technical data | Device model, operating system version, App version, language, time zone, and your IP address (from which an approximate country- or city-level location can be inferred; we do not collect precise GPS location) |
| Usage data | App launches, sessions, screens viewed, features used, number and length of sessions, onboarding and paywall interactions |
| Purchase data | Which subscription or purchase you hold, whether you are in a free trial, renewal and cancellation events, purchase and expiry dates, and the country of your App Store account. We never receive your card number — Apple handles payment |
| Marketing attribution data | Which advertisement or campaign led you to install the App, install and re-engagement events |
| Correspondence | If you email us, your email address and whatever you write to us |
Why we process it, and on what basis
| Purpose | Data used | Legal basis (UK/EU GDPR) |
|---|---|---|
| Running the App and its features, including AI script generation | Device and technical data; usage data | Contract — Art. 6(1)(b) |
| Managing subscriptions, trials, restores and entitlements | Purchase data; device identifiers | Contract — Art. 6(1)(b) |
| Understanding how the App is used so we can improve it | Usage data; pseudonymous identifiers | Consent — Art. 6(1)(a) |
| Measuring which advertising works, and showing you relevant advertising | Advertising identifiers; attribution data; usage data | Consent — Art. 6(1)(a) |
| Answering your support messages | Correspondence | Contract, and our legitimate interest in supporting our users — Art. 6(1)(b) and (f) |
| Preventing fraud and abuse, and protecting our rights | Device identifiers; purchase data | Legitimate interests — Art. 6(1)(f) |
| Complying with legal obligations, including tax and accounting | Purchase data | Legal obligation — Art. 6(1)(c) |
How we ask for consent. Today we ask through the tracking permission prompt the App shows you, and you can change that answer at any time in Settings → Privacy & Security → Tracking on your device. Declining it stops your advertising identifier being used to link your activity with data from other companies.
That prompt covers advertising, but not analytics. To refuse analytics as well, email us at the address in Section 1 and we will stop analytics processing for your device.
Where we rely on consent, you can withdraw it at any time — see Section 11. Withdrawing consent does not affect processing that took place before you withdrew it, and it does not stop the App from working.
6. Who we share data with
We use the following service providers. Each acts as our processor, except where noted.
| Provider | What it does for us | Data it receives | Where |
|---|---|---|---|
| OpenAI, L.L.C. | AI script generation | Your generation requests and the text returned; IP address | United States |
| AppsFlyer Ltd | Marketing attribution and analytics | Device and advertising identifiers, IP address, install and in-app events | Israel |
| Apphud, Inc. | Subscription management and entitlements | Device identifiers, purchase and subscription events, App and device data | United States |
| Superwall, Inc. | Paywall presentation and testing | Device identifiers, paywall and purchase events, App and device data | United States |
| Meta Platforms, Inc. / Meta Platforms Ireland Ltd | Advertising measurement and delivery | Advertising identifier (only with your permission), app events, IP address | Ireland and United States |
| Apple Inc. | Distribution and payment processing. Apple is an independent controller for payment data | Purchase and subscription transactions | Ireland and United States |
| Tilda Platform Cloud Services Co. LLC (“Tilda”) | Hosting of slateteleprompter.com, cookieless visitor statistics, and delivery of the support form. Form submissions are passed to our email and are not retained by Tilda | Page views, the campaign tag of the page you landed on, and the IP address of website visitors; the content of a support message in transit | Website hosting in Germany (Hetzner Online GmbH). Tilda is established in the United Arab Emirates and uses sub-processors in the EU, the United States and Kazakhstan |
Where the App is distributed through the App Store, Apple processes your payment and holds your billing details. We never see them. Apple’s handling of that data is governed by Apple’s own privacy policy.
We may also disclose personal data where we are legally required to, where necessary to establish, exercise or defend legal claims, or in connection with a merger, acquisition or sale of assets — in which case we will tell you before your data becomes subject to a different privacy policy.
We do not sell your recordings, your scripts or your generated text to anyone. We do not have them.
6A. Our website
This policy also covers slateteleprompter.com. The website is a marketing site: it describes the App, links to the App Store, and offers a form for contacting support.
Cookies and similar technologies
Our website uses two kinds of cookies and similar browser storage.
Strictly necessary. These deliver the pages you ask for, make the contact form work, keep your session, remember what you typed, and protect against abuse. The site cannot function without them, so they are always active and no consent is needed — but we tell you about them here.
Site statistics, counted without cookies. Tilda Publishing, which hosts our website, provides built-in visitor statistics, and we run them in cookieless mode. In this mode no cookies are used to count visitors or sessions, and campaign tags from the link you arrived by are not stored in cookies. What we see is the number of page views, which pages were viewed, and the campaign tag on the page you first landed on. Your IP address is processed by the hosting to serve the page and may be used to derive an approximate country-level location.
No third-party analytics, advertising or conversion-tracking service is connected to our website.
We use this only to understand how many people reach the site and which pages work. It is not used for advertising, profiling, cross-site tracking or building a profile of you, we do not combine it with anything from the App, and we do not pass it to any third-party analytics or advertising service.
We do not run advertising on our website and we set no advertising or cross-site tracking cookies on it.
Because these statistics work without storing anything on your device or reading anything from it, they do not require your consent under UK PECR or the EU ePrivacy rules. We rely on our legitimate interest in understanding how our website is used (Article 6(1)(f) UK GDPR). You have the right to object to that processing at any time — see Section 10.
You can block or delete cookies in your browser settings at any time. If you block strictly necessary cookies, the contact form may stop working.
If you write to us through the website
The support form collects your email address and the message you send, so that we can reply. We also see whatever you choose to include in the message.
| Purpose | Answering your enquiry and keeping a record of the exchange |
| Legal basis | Performance of our contract with you where the enquiry concerns the App you have bought (Art. 6(1)(b)), and our legitimate interest in supporting our users and keeping a record of what was asked and answered (Art. 6(1)(f)) |
| Who else sees it | Tilda, whose servers pass the message on, and our email provider |
| Where it is stored | Only in our email account. The form does not retain submissions: Tilda passes your message to us and does not store it |
| How long we keep it | 24 months from the last message in the exchange, unless it relates to a dispute or we need it for accounting |
We use your email address only to answer you. We do not add you to a mailing list and we do not send marketing email. If that ever changes, we will ask for your consent first and every message will carry an unsubscribe link.
Please do not include health information, payment card details, government identification numbers or other sensitive information in a support message. We do not need any of it to help you.
Do Not Track
There is no agreed industry standard for how a website should respond to a browser “Do Not Track” signal, and we do not currently change what we collect in response to one. In practice there is little for such a signal to switch off: our website sets no advertising or cross-site tracking cookies, and our visitor statistics are counted without cookies. You can control cookies through your browser settings, object to our site statistics as described in Section 6A, and control tracking in the App as described in Section 11.
7. International transfers
We are established in the United Kingdom. Some of our providers process data outside the UK and the EEA.
| Destination | Safeguard we rely on |
|---|---|
| Israel (AppsFlyer) | European Commission adequacy decision for Israel, and the corresponding UK adequacy regulations |
| Ireland / EEA (Meta Ireland, Apple) | EEA — covered by UK adequacy regulations |
| Germany (Tilda’s hosting of our website and support form) | EEA — covered by UK adequacy regulations |
| United Arab Emirates, and Tilda’s sub-processors in the United States and Kazakhstan — website hosting and statistics only | EU Standard Contractual Clauses, incorporated into Tilda’s data processing agreement, under which Tilda acts as our processor |
| United States (Apphud, Superwall, Meta Platforms Inc., Apple Inc.) | EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, and, where the recipient is certified, the EU–US Data Privacy Framework and its UK Extension. Apphud’s data processing addendum incorporates the Standard Contractual Clauses as amended by the UK Addendum |
| Any jurisdiction where OpenAI or its sub-processors operate (AI script generation) | Our OpenAI project uses Global residency, so the processing location is not fixed to one country. Transfers are covered by OpenAI’s Data Processing Addendum, which incorporates the EU Standard Contractual Clauses as amended by the UK Addendum, under which OpenAI acts as our processor |
You can request a copy of the safeguards we rely on by writing to us at the address in Section 1.
8. How long we keep data
| Data | Retention |
|---|---|
| Your recordings, scripts and projects | On your device, until you delete them. We hold no copy |
| AI generation requests | Not retained by us. Retained by OpenAI for up to 30 days for abuse monitoring |
| Attribution and advertising data | For as long as the campaign it relates to is being measured and evaluated, and no longer than the retention window configured with our attribution provider. Aggregated campaign statistics that cannot identify you may be kept for longer |
| Usage and product analytics | Up to 26 months in identifiable form; aggregated statistics that cannot identify you may be kept indefinitely |
| Subscription and entitlement records | For as long as your subscription is active, and for 12 months afterwards |
| Purchase and transaction records | 6 years from the end of the relevant financial year, to meet UK accounting and tax obligations |
| Support correspondence | 24 months from the last message, unless it relates to a dispute |
When a retention period ends, we delete the data or irreversibly anonymise it.
9. Security
We take appropriate technical and organisational measures to protect personal data, including transport encryption (TLS) for all data leaving the App, restricted access to our provider dashboards, multi-factor authentication on our accounts, and contractual security obligations on our processors.
The strongest protection in the App is structural: your recordings and scripts stay on your device, so there is no server-side store of them to breach.
No system can be guaranteed completely secure, and we cannot protect data once it is on your device or in your own accounts. Keeping your device, your Apple ID and your own backups secure is your responsibility.
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of it, and we will notify you directly where the law requires it.
10. Your rights
If you are in the UK, the EU or the EEA
Under the UK GDPR and the EU GDPR you have the right to:
- be informed about how we use your data — that is what this document is for;
- access your personal data and receive a copy of it;
- rectify data that is inaccurate or incomplete;
- erase your personal data (“right to be forgotten”);
- restrict our processing in certain circumstances;
- object to processing based on our legitimate interests, and to object at any time, for any reason and free of charge, to processing for direct marketing;
- data portability — receive data you gave us in a structured, commonly used, machine-readable format;
- withdraw consent at any time where we rely on it;
- not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not carry out such decision-making.
How to exercise them: write to us at the address in Section 1. We respond free of charge and within one month. If your request is complex we may extend this by up to two further months, and we will tell you why within the first month. We may ask for information to confirm that the request comes from you.
Complaints: you can complain to the UK Information Commissioner’s Office at ico.org.uk, or, if you are in the EU/EEA, to the supervisory authority in your country of residence, place of work, or the place where you believe an infringement occurred. We would rather you came to us first, but you are not required to.
If you are in the United States
Twenty US states now have comprehensive consumer privacy laws. Rather than reproduce each one, we extend the following rights to every US resident, whether or not the law of your state requires it of a company of our size:
- Know and access — what categories of personal information we collect, the sources, the purposes, the categories of third parties we disclose it to, and the specific pieces we hold about you.
- Delete — request deletion of personal information we hold about you, subject to legal exceptions.
- Correct — request correction of inaccurate personal information.
- Portability — receive a copy in a portable, usable format where technically feasible.
- Opt out of sale, sharing and targeted advertising — see below.
- Limit use of sensitive personal information — we do not collect sensitive personal information, so there is nothing to limit.
- No retaliation — we will not deny you the App, charge you a different price, or give you a worse experience because you exercised a privacy right.
- Appeal — if we refuse your request, you may appeal by replying to our decision. We will respond in writing within 45 days, or 60 days where your state’s law provides for it. If we deny the appeal, you may complain to your state Attorney General.
Categories of personal information we have collected in the past 12 months: identifiers; commercial information; internet or other electronic network activity information; and coarse location inferred from IP address. We do not collect sensitive personal information as that term is defined by the CCPA, and we do not ask you to provide any. We do not knowingly collect personal information from anyone under 16, and therefore we do not sell or share the personal information of minors.
Sale, sharing and targeted advertising. We use AppsFlyer and the Meta SDK for advertising attribution and measurement. Under the CCPA/CPRA and comparable state laws, disclosing device identifiers to advertising partners in this way is treated as a “sale” and as “sharing” for cross-context behavioural advertising, and as “targeted advertising” under the Virginia, Colorado, Connecticut, Texas, Oregon and other state acts — even though no money changes hands for your data. We do not treat our subscription and infrastructure providers as sales; they are service providers or processors acting on our written instructions.
How to opt out. You have two routes, and neither requires you to verify your identity:
- On your device: decline the App Tracking Transparency prompt when the App asks, or turn tracking off at any time in Settings → Privacy & Security → Tracking. Declining stops the advertising identifier being used and is the fastest way to opt out.
- By email: write to us at the address in Section 1 with the subject line “Opt out”. We will act on your request and confirm when it is done. You do not need to give a reason, and we will not ask you to prove who you are.
Timing. We acknowledge requests within 10 business days and respond within 45 days. If we need longer we will tell you why, and we may take up to 90 days in total. Access requests cover the preceding 12 months; for personal information collected on or after 1 January 2022 you may ask us to go further back, and we will unless doing so is impossible or would take disproportionate effort.
Requests are free. We may charge a reasonable fee, or decline, only if a request is manifestly unfounded, excessive or repetitive, and we will explain why. You may make an authorised agent request; we may ask for proof of the agent’s authority.
Global Privacy Control. GPC is a browser signal, and it has no equivalent inside an iOS app. Our website sets no advertising or cross-site tracking cookies and does not sell or share personal information, so there is nothing on it for a GPC signal to switch off. The sale and sharing described in this section happen in the App, where the two routes above apply.
California Online Privacy Protection Act. You can browse slateteleprompter.com and use the App without creating an account — there is no registration and no login. This policy is linked from the footer of every page of slateteleprompter.com and from the App’s App Store listing, and the link is titled “Privacy Policy”. Section 5 lists the categories of personal information we collect and Section 6 lists the categories of third parties we disclose it to. Because there is no account, there is no profile for you to review or edit; to see, correct or delete what we hold, use the routes in this section or in Section 10. When we change this policy we update the “Last updated” date at the top, and for material changes we notify you as described in Section 13.
11. Your choices
| What you want to do | How |
|---|---|
| Stop advertising tracking | Decline the tracking prompt, or Settings → Privacy & Security → Tracking on your device |
| Withdraw analytics or advertising consent | Turn tracking off in Settings → Privacy & Security → Tracking on your device, or email us — see Section 10 |
| Turn off push notifications | Settings → Notifications → Slate on your device |
| Revoke camera or microphone access | Settings → Slate on your device. The App will not be able to record |
| Manage or cancel your subscription | Settings → [your name] → Subscriptions on your device, or via Apple Support |
| Delete everything | Delete your recordings and scripts in the App, then delete the App |
12. Children
The App is not intended for anyone under 16, and we do not knowingly collect personal data from children under 16. We do not ask for age verification beyond the confirmation given when the App is first used, and we rely on that confirmation.
If you believe a child under 16 has provided us with personal data, write to us and we will delete it and close off the relevant identifier promptly.
We do not knowingly sell or share the personal information of anyone under 16.
13. Changes to this policy
We may update this policy. When we do, we will change the “Last updated” date above.
If a change materially affects how we handle your personal data, we will tell you before it takes effect — through a notice in the App, or by another means reasonably likely to reach you. Where a change requires your consent, we will ask for it. We will not rely on you checking this page.
We keep a record of each version of this policy and the date it took effect. Previous versions are available on request.
14. Contact us
New Level Apps LP
167-169 Great Portland Street, Fifth Floor, London, United Kingdom, W1W 5PF
Registered in England and Wales, LP023145
Email: support@slateteleprompter.com
Supervisory authority: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom — ico.org.uk