The summary, in one screen
Lessi Cam records video and edits it on your own iPhone. Without an account, nothing leaves the device — not the video, not the audio, not the script, not a single usage statistic.
Creating an account serves one purpose: keeping your videos in the Lessi cloud, which is a paid plan. Then, and only then, your files leave the iPhone — because that is exactly what you are asking to happen.
And three things this app does not do, on any plan:
- No tracking. No usage analytics tool, no ad network, no advertising identifier. We do not know how many times you opened the app.
- We do not look at your content. Your videos sit in a space that is yours alone, and they are not accessed, analysed, moderated or used to train anything.
- Caption transcription happens inside the iPhone. The audio is not sent anywhere — not to us, not to Apple.
The rest of this document is the detail behind each of those sentences.
1. Who is responsible for your data
The controller of the personal data processed by Lessi Cam is Artstk Studio Ltda, registered under CNPJ no. 47.924.342/0001-61, with its registered office at Rua Domingos de Morais, 2187, conj. 513 — São Paulo/SP, CEP 04035-000.
Contact for any privacy matter, including exercising your rights: [email protected].
This policy applies to the Lessi Cam app for iPhone and to the website lessi.pro, and is governed by Law no. 13,709/2018 (Lei Geral de Proteção de Dados — LGPD), the Brazilian data protection law.
2. Using the app without an account: what happens to your data
Nothing. There is no collection.
Recording, trimming, reordering, colour grading, using the teleprompter, recording voiceover, placing photos on top, adding music, generating captions and exporting all work entirely inside your iPhone, with no information transmitted.
For that, the app asks iOS for these permissions, and here is what it does with each one:
| Permission | What for | Does it leave the iPhone? |
|---|---|---|
| Camera | recording the video | No |
| Microphone | recording the audio and the voiceover | No |
| Photos | saving the finished video to your library, and importing videos and photos you choose | No |
| Speech recognition | transcribing speech to generate captions | No — see item 3 |
The files live in the app's private area on your iPhone. Uninstalling the app deletes those files, as with any iOS application.
3. Captions: transcription happens on the device
The app generates captions by transcribing the speech in your videos. That transcription uses the speech recognition engine built into iOS, requiring on-device mode.
This is a technical requirement in the code, not a preference: when the chosen language has no on-device recognition support on your iPhone, the app refuses the transcription and tells you so — it does not fall back to server-based recognition. The audio of your videos is never sent to us or to Apple, under any circumstances.
The caption text is saved together with the project, on your iPhone. If you use the cloud backup, it goes up along with the rest of the project.
4. Creating an account: what we begin to process
The account exists to identify whose each stored file is. Without it, there would be no way to give you back what is yours.
4.1 What is collected
| Data | Where it comes from | Why it exists |
|---|---|---|
| you type it | identifying the account, recovering access, and notifying you about the subscription | |
| Password | you type it | authentication — stored only as a hash, never in readable form |
Apple identifier (apple_sub) |
Sign in with Apple, if you use it | identifying the account without a password |
| Contracted plan | Apple or our website | knowing how much space the account has |
| Account creation date | automatic | operation and support |
| Session tokens | automatic when you sign in | keeping you signed in and allowing "sign out of this device" |
| File index | automatic when you upload | path, size, date and signature of each file, so the quota can be added up and we know what is already uploaded without downloading anything |
| IP address and technical request data | automatic | security and abuse prevention, processed by Cloudflare |
We do not collect: name, phone number, postal address, national ID number, date of birth, location, contact list, or any advertising identifier.
We do not collect payment data. When you subscribe through the App Store, Apple processes it and we never have access to the card. If and when there is a subscription sold on our website, it will be processed by a payment provider and the same holds: card details do not pass through us.
4.2 What is uploaded when you use the backup
If — and only if — you turn on the backup for a video, the following are sent to the cloud:
- the video files of the takes;
- the audio files of the voiceovers;
- the photos used as overlays and the music you imported;
- the project file, which describes the order of the takes, the trims, the colour grade, the teleprompter script and the captions.
You choose video by video. Nothing is uploaded automatically before you send that video for the first time.
5. Legal bases (LGPD, art. 7)
| Processing | Legal basis |
|---|---|
| Account, authentication, storage and billing | Performance of a contract (art. 7, V) |
| Emails about the account, the subscription and password recovery | Performance of a contract (art. 7, V) |
| Technical records for security and fraud and abuse prevention | Legitimate interest (art. 7, IX) |
| Retention of application access logs | Legal obligation (art. 7, II, together with the Brazilian Internet Civil Framework, art. 15) |
We do not process personal data on the basis of consent for marketing purposes, because we do not do marketing with your data.
6. Who your data is shared with
We do not sell, rent or transfer personal data. The only third parties involved are the ones that make the service possible, each in the role below:
| Who | Role | What they receive |
|---|---|---|
| Cloudflare, Inc. | processor — server, database and storage | everything in item 4 |
| Apple Inc. | processing of subscriptions purchased in the App Store | the transaction data; Apple is the seller in that relationship |
| Cloudflare, Inc. | sending the account emails | your email address and the content of the message |
| [Provedor de pagamento, se houver venda no site] | payment processing | the data you provide to them directly |
We may also share data when there is a court order or a request from a competent authority, within the limits of the law.
7. Where the data lives, and international transfer
The server and the storage are operated by Cloudflare, and the data may be processed and stored outside Brazil.
This international transfer is based on art. 33, II, "d" and IX, of the LGPD — performance of a contract to which you are a party, and the regular exercise of rights — and Cloudflare acts as a processor under a contract that imposes data protection obligations.
8. How long we keep it
| Data | Period |
|---|---|
| Account and files in the cloud | for as long as the account exists |
| Session tokens | until they expire, or until you sign out or delete the account |
| Password recovery code | minutes — it expires on its own, and is replaced with each new request |
| Account deleted by you | flagged immediately, actually deleted 30 days later. Within those 30 days, signing in again with the same email and password brings everything back |
| Files after the subscription ends | they stay for 30 days in read-only mode, with the date shown on screen; after that period they are deleted |
| Project transferred between the apps | 30 days, then it expires on its own |
| Application access logs | 6 months (Brazilian Internet Civil Framework, art. 15) |
9. Your rights (LGPD, art. 18)
At any time, you may:
- confirm that we process data about you, and access that data;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of data that is unnecessary or processed in breach of the law;
- request portability of the data;
- delete data processed on the basis of your consent;
- know who we share your data with;
- withdraw consent, where that is the legal basis;
- object to processing carried out on the basis of legitimate interest.
Two of these rights you exercise on your own, without having to talk to anyone:
- Delete the account — inside the app, under Account and projects. It deletes the account and everything in the cloud, with the 30-day grace period described in item 8.
- Portability — the "Export all projects" function produces a file with all your videos and edits, in an open format, and works on any plan, including the free one.
For the rest, write to [email protected]. We answer within 15 days.
10. Security
- Passwords are stored only as a hash, never in readable form. The same goes for recovery codes.
- Your session token lives in the iPhone's Keychain, not in ordinary storage — it does not travel along if your iPhone backup is restored onto another device.
- All communication between the app and the server is encrypted (HTTPS). The app refuses unencrypted addresses.
- The application never holds the storage credential. For each upload, the server issues a short-lived authorisation restricted to a single file, inside your account's own space.
- Each account can see only its own space in the storage.
No system is infallible. In the event of a security incident with relevant risk, we will notify you and the ANPD, the Brazilian data protection authority, as required by art. 48 of the LGPD.
11. Children and teenagers
Lessi Cam is not intended for anyone under 13, and does not knowingly collect data from that age group. If we learn that an account was created by a child without the consent of whoever is responsible for them, we will delete the account and the data.
12. Cookies and the website
The website lessi.pro uses only strictly necessary cookies, to keep you signed in to your account. There are no advertising cookies, no audience analytics cookies and no third-party tracking cookies.
To know how many people visit each page, the website uses Cloudflare Web Analytics, which uses no cookies, stores nothing on your device and does not identify visitors. It only shows aggregated numbers, such as visits per page, country and device type. The legal basis is our legitimate interest in understanding how the website is used.
13. Changes to this policy
If this policy changes in a relevant way, we will let you know through the app and by email to the registered address, with reasonable notice. The version in force is always published at https://lessi.pro/pt/privacidade, with the date at the top.
14. Contact
Artstk Studio Ltda — CNPJ 47.924.342/0001-61 [email protected]
You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian data protection authority.
This is a courtesy translation. The binding version of this document is the Portuguese one, published at lessi.pro/pt/privacidade. If the two versions differ, the Portuguese text prevails. The app and this service are operated from Brazil and governed by Brazilian law.