Cutflash ("we", "us") is a photo and video editing product based in Bend, Oregon, USA. Cutflash is a
desktop application for Windows, with a small hosted service that handles sign-in, licensing, scoring and
downloads. This policy explains what we collect, why, and the choices you have. Questions? Email
cutflashapp@gmail.com.
The short version. Your photos and footage live on your computer and are edited there. Cutflash
does not upload your library. During scoring, small compressed still frames drawn from your media are sent
to our server and forwarded to our scoring provider so the app can judge moments and images. Nothing else
about your media leaves your machine, and your originals are never modified.
What we collect
Account info — the email address you sign in with and your password. Passwords are stored only as
a salted, hashed value; we never see or store your plain password.
Frames sent for scoring — when Cutflash rates your photos or picks moments in your footage, it sends
compressed still images (video frames, or a photo and a crop of it) together with technical measurements such
as exposure and sharpness. This applies to both the photo and the video app. These are the only parts
of your media that leave your computer. We do not send your RAW files, your original video files, your project
folders, or your library.
Media you upload to the hosted service — if you use a hosted feature that accepts an upload, those
files are processed on our server, kept in a per-account area, and are not shared with other users.
Editing activity — the picks, cuts and color choices you make help the tool learn your style. This is
tied to your account and used to improve your own results.
Feedback — anything you send through the in-app feedback tool, so we can fix bugs and prioritize work.
Marketing-site analytics — on our main marketing page we use the TikTok Pixel to understand how visitors
discover Cutflash. With your consent it sets cookies and shares limited browsing data (for example, pages viewed).
We do not run the pixel until you click "Accept".
How we use it
To run the editor, score your images and moments, and produce your finished photos and videos.
To let you sign in, hold your license, and keep your work separate from other users.
To improve your own results — the style-learning feature and your personal look are trained only on your own
editing and stay yours. Your media, your identity and your personal style are never shared with other users.
To improve scoring for everyone — anonymous, aggregated signals about which kinds of moments and images people
tend to keep or cut may help Cutflash choose better for everyone. This never includes your media, your identity,
your files or your personal style, only the coarse, de-identified pattern.
To send you service email you asked for, such as sign-in and account messages.
To measure marketing, which channels bring people to the site, and only with your cookie consent.
What we do not do
We do not sell your data.
We do not modify, move, rename or delete your original files. Every output Cutflash produces is a new file.
We do not upload your photo or video library.
We do not use your media to train our own models.
Cookies and tracking
Our marketing page shows a consent banner on your first visit. Tracking cookies (the TikTok Pixel) stay off until
you choose "Accept". You can change your mind at any time by clearing this site's cookies and storage in your browser,
which makes the banner appear again. Essential cookies needed to keep you signed in are exempt from consent.
Who we share data with
We do not sell your data. We use a small number of service providers strictly to run Cutflash:
Anthropic — photo and video scoring. The frames and measurements described above are sent to Anthropic's
API through our server. Per Anthropic's commercial API terms, they do not train on it.
Fly.io — hosting and storage for the hosted service and anything you upload to it.
Resend — delivery of service email, such as account and sign-in messages.
TikTok — marketing-site analytics via the pixel, only with your consent.
Stripe — if and when paid plans are enabled, Stripe processes payments. We never see your full card details.
Security
Sign-in uses hashed passwords and session tokens. Each account's data is held in a separate per-account area.
Traffic to the hosted service is encrypted in transit. No system is perfectly secure, and we will tell affected users
promptly if we become aware of a breach involving their personal data.
Data retention
Files you upload to the hosted service, and the outputs it renders, are working files and may be cleared
periodically. Frames sent for scoring are used to answer that request and are not retained by us as a library of your
media. Your account and your style-learning data persist while your account is active. Ask us to delete your account
and its data at any time.
Your rights
Depending on where you live (for example the EU and UK under GDPR, or California under CCPA), you can request
access to, correction of, or deletion of your personal data, and you can opt out of analytics. To exercise any of
these, email cutflashapp@gmail.com and we will respond.
International transfers
We are based in the United States and our service providers may process data in the United States and elsewhere.
If you use Cutflash from outside the United States, you understand that your data will be processed there.
Children
Cutflash is not directed at children under 13, or under 16 in the EU and UK, and we do not knowingly collect
their data.
Changes
We will update this page if our practices change and revise the "Last updated" date above.