Privacy, in plain English.

Information Stepiffy receives

• The public YouTube link you submit and the resulting video metadata.
• The generated guide, its creation date and your usage allowance.
• Your Google identifier, verified email, display name and optional profile image when you sign in.
• Stripe or Google Play customer, subscription, purchase-token and payment-status identifiers if you choose Premium.
• A secure guest identifier, session cookies and one-way network hashes used to prevent abuse.

Stepiffy does not receive or store your full card number; Stripe or Google Play handles payment details.

How video processing works

Supadata reads video metadata and retrieves captions or generates a transcript from audio when available. The transcript and relevant metadata are normally sent to OpenAI to create the guide, with model-response storage disabled. Stepiffy stores the finished guide but does not intentionally retain the fetched transcript after generation.

Why information is used

• To provide requested conversions, saved libraries and Premium access.
• To authenticate accounts and keep them secure.
• To prevent fraud, automated abuse and repeated allowance resets.
• To process subscriptions, cancellations and customer-support requests.
• To meet legal, accounting and regulatory obligations.

These uses rely on performing our contract with you, legitimate interests in operating and protecting Stepiffy, legal obligations and consent where the law requires it.

Service providers

Stepiffy uses Google for sign-in and Android billing, Stripe for website billing, Supadata for video transcripts, OpenAI for guide generation, and OpenAI Sites with Cloudflare infrastructure for hosting. Each provider processes only the information needed for its role under its own security and privacy commitments. Some processing may take place outside the UK using lawful transfer safeguards.

Guest use and abuse prevention

A secure browser identifier remembers your three guest conversions. A visitor’s network address is converted into a one-way keyed hash; the raw address is not saved. Short-term attempt records are periodically removed, while successful guest-allowance hashes may be retained for up to 370 days so clearing cookies does not reset the allowance. These identifiers are not used for advertising.

How long information is kept

Account details and saved guides are kept while your account remains open. You can delete guides individually and delete your account after any active paid period ends. Limited billing, transaction, fraud-prevention or support records may be retained where reasonably needed or required by law. Stripe keeps payment records under its own retention requirements.

Your choices and rights

You can export or delete guides, sign out, cancel Premium through Stripe or Google Play, and delete your Stepiffy account. You may also ask to access, correct, erase, restrict or receive your personal information, or object to certain processing. Email us to make a request. UK users may complain to the Information Commissioner’s Office.

Advertising and affiliate links

Affiliate links may earn Stepiffy a commission without changing your price. If third-party advertising is enabled later, Stepiffy will add the appropriate consent controls before using advertising cookies. Stepiffy does not sell your personal information.

Contact