The summary, in one screen
Lessi Cam records video and edits it on your own iPhone. Nothing you record comes to us — not the video, not the audio, not the script — and the app sends no usage statistics.
On the Pro plan, you can turn on sync with your own iCloud. Your videos and projects then go to your Apple account, not to Lessi: we have no access to them (item 2.1).
Creating an account is optional and serves one purpose: bringing a subscription bought on our website into the app. The account holds no videos.
And three things this app does not do, on any plan:
- No tracking. No usage analytics tool, no ad network, no advertising identifier. We do not know how many times you opened the app.
- We do not look at your content. It stays on your device and, if you turn on sync, in your iCloud. It never reaches us, and it is not analysed, moderated or used to train anything.
- Caption transcription happens inside the iPhone. The audio is not sent anywhere — not to us, not to Apple.
The rest of this document is the detail behind each of those sentences.
1. Who is responsible for your data
The controller of the personal data processed by Lessi Cam is Artstk Studio Ltda, registered under CNPJ no. 47.924.342/0001-61, with its registered office at Rua Domingos de Morais, 2187, conj. 513 — São Paulo/SP, CEP 04035-000.
Contact for any privacy matter, including exercising your rights: [email protected].
This policy applies to the Lessi Cam app for iPhone (which also installs on iPad, in compatibility mode), to the website lessi.pro and to the account area at account.lessi.pro, and is governed by Law no. 13,709/2018 (Lei Geral de Proteção de Dados — LGPD), the Brazilian data protection law.
2. Using the app without an account: what happens to your data
Nothing. There is no collection.
Recording, trimming, reordering, colour grading, using the teleprompter, recording voiceover, placing photos on top, adding music, generating captions and exporting all work entirely inside your iPhone, with no information transmitted.
For that, the app asks iOS for these permissions, and here is what it does with each one:
| Permission | What for | Does it leave the iPhone? |
|---|---|---|
| Camera | recording the video | No |
| Microphone | recording the audio and the voiceover | No |
| Photos | saving the finished video to your library, and importing videos and photos you choose | No |
| Speech recognition | transcribing speech to generate captions | No — see item 3 |
The only exception to this table is sync with your own iCloud, if you turn it on: what you record and use in your projects then also goes to your iCloud (item 2.1).
The files live in the app's private area on your iPhone. Uninstalling the app deletes those files, as with any iOS application. The copy in your iCloud, if there is one, is not deleted when you uninstall.
2.1 Sync with iCloud (Pro plan)
You can turn on sync with your own iCloud, the one tied to the Apple account on your iPhone, under Settings › iCloud inside the app. It comes turned off, and only you can turn it on. Sending to iCloud is part of the Pro plan.
What is sent. When it is on, it sends your videos and projects to your iCloud: the takes, the voiceovers, the photo overlays, the music in your library in the app, the fonts you imported, each video's cover image and each project's file, with the title, the order of the takes, the trims, the colour grade, the script and the captions. To show the list of your devices, it also sends each device's model and the version of the app installed on it.
On the other devices where you use the app with the same iCloud, everything stays the same, in both directions: what changes on one shows up on the others. On a new device, the whole library comes back. Videos recorded to a card or external drive are not sent. Videos only upload over Wi-Fi, unless you allow mobile data.
Where it is kept, and who can see it.
- In the private database of the iCloud of your Apple account (CloudKit). iCloud is an Apple service: what goes there uses your iCloud storage and is subject to Apple's terms and privacy policy.
- Lessi has no access to that content. It does not pass through our server, we do not read it and we keep no copy of it. Sync does not need a Lessi account.
- The files are protected by iCloud's own encryption. The edit, the title and the music details also get the end-to-end encryption Apple offers for this kind of data. Only a few technical details are readable by Apple: each file's identifier (a fingerprint of the content, which does not show what is in it), the device model and the app version.
- Silent notifications. To know that something changed on another device, the app receives silent notifications from iCloud itself. They do not appear on your screen, they are sent by Apple, and Lessi keeps no identifier of your device for them.
Without the plan.
- Without Pro, you can turn on sync just to bring things in: the app downloads what is already in your iCloud and sends nothing.
- When the subscription ends, the app stops sending new things, keeps receiving and downloading, and deletes nothing, neither from iCloud nor from the device. If you subscribe again, uploading resumes where it stopped.
Turning it off and deleting.
- Turning sync off on a device only stops syncing that device. It deletes nothing, neither from the device nor from iCloud.
- "Delete Forever", in the app's trash, with sync on, deletes the video from your iCloud and from every connected device. The app warns you before you confirm, and it cannot be undone. A video that stays in the trash for more than 30 days is deleted the same way. With sync turned off on a device, deleting applies only to that device, and the copy in iCloud stays.
- Content that is also in another video (a duplicated video, for example) stays in iCloud while it is in use. The music in the app's library is not removed when a video is deleted.
- So that nothing is lost by mistake, some things stay in your iCloud even after they leave the video: photos and voiceovers you removed, deleted takes, the original version of a take the app compressed, and the version kept when a video was edited on two devices at the same time. They go when you delete the video forever, or when you delete Lessi Cam's data in iCloud.
- When another device deletes a photo or a voiceover, on this device the file is not deleted: it goes to "No Longer Used", under Settings › iCloud, where you can bring it back or free up the space.
- To delete everything from your iCloud at once: on the iPhone, go to Settings › [your name] › iCloud › Manage Storage › Lessi Cam. This deletes only the iCloud copy: what is on the device stays there.
- Deleting your Lessi account does not delete the iCloud copy, because we do not hold it. Uninstalling the app does not either.
- Signing out of iCloud, switching Apple accounts or deleting Lessi Cam's data in iCloud deletes nothing from the device.
iPhone backup. So that the same video does not take up space twice, a file that iCloud has confirmed receiving leaves the iPhone backup (the copy iOS makes of the whole device). If you turn sync off, sign out of iCloud or delete Lessi Cam's data in iCloud, the file goes back into the iPhone backup. The edit of your videos always stays in the iPhone backup.
3. Captions: transcription happens on the device
The app generates captions by transcribing the speech in your videos. That transcription uses the speech recognition engine built into iOS, requiring on-device mode.
This is a technical requirement in the code, not a preference: when the chosen language has no on-device recognition support on your iPhone, the app refuses the transcription and tells you so — it does not fall back to server-based recognition. The audio of your videos is never sent to us or to Apple, under any circumstances.
The caption text is saved together with the project, on your iPhone. If you turn on sync with iCloud, it goes to your iCloud along with the rest of the project (item 2.1).
4. Creating an account: what we begin to process
The account is optional. It exists for one purpose: bringing a subscription bought on our website into the app, so you can use Pro on your iPhone. If you subscribe through the App Store, inside the app, you do not need an account.
4.1 What is collected
| Data | Where it comes from | Why it exists |
|---|---|---|
| you type it | identifying the account, recovering access, and notifying you about the subscription | |
| Password | you type it | authentication — stored only as a hash, never in readable form |
Apple identifier (apple_sub) |
Sign in with Apple, if you use it | identifying the account without a password. If you choose to hide your email, Apple gives us a relay address instead |
| Contracted plan | Apple or our website | knowing whether the account has Pro, to unlock it in the app |
| Data about a subscription bought on the website | Paddle | the subscription and customer identifiers at the provider, the status and the end of the paid period, to unlock the plan and let you cancel or switch between monthly and yearly |
| Account creation date | automatic | operation and support |
| Session tokens | automatic when you sign in | keeping you signed in and allowing "sign out of this device" |
| IP address and technical request data | automatic | security and abuse prevention, processed by Cloudflare |
We do not collect: name, phone number, postal address, national ID number, date of birth, location, contact list, or any advertising identifier. And the account holds none of your videos, audio, photos or projects.
We do not collect payment data. When you subscribe through the App Store, Apple processes it and we never have access to the card. When you subscribe on our website, it is processed by Paddle, and the same holds: card or Pix details are typed into Paddle's form and are not stored by us.
5. Legal bases (LGPD, art. 7)
| Processing | Legal basis |
|---|---|
| Account, authentication and billing | Performance of a contract (art. 7, V) |
| Emails about the account, the subscription and password recovery | Performance of a contract (art. 7, V) |
| Waitlist and emails about the launch and news | Consent (art. 7, I) — you can leave at any time |
| Anti-bot check on the waitlist form (Cloudflare Turnstile) | Legitimate interest (art. 7, IX) |
| Technical records for security and fraud and abuse prevention | Legitimate interest (art. 7, IX) |
| Retention of application access logs | Legal obligation (art. 7, II, together with the Brazilian Internet Civil Framework, art. 15) |
The only processing based on consent is the waitlist (item 12). We do not sell or hand over your data for anyone's marketing.
6. Who your data is shared with
We do not sell, rent or transfer personal data. The only third parties involved are the ones that make the service possible, each in the role below:
| Who | Role | What they receive |
|---|---|---|
| Cloudflare, Inc. | processor — the account server and database, and the website | everything in item 4 |
| Apple Inc. | processing of subscriptions purchased in the App Store | the transaction data; Apple is the seller in that relationship |
| Resend, Inc. | processor — sending the account emails, support replies and emails to the waitlist | your email address and the content of the message; for the waitlist, also a copy of the list (email address and whether you are subscribed). Open and click tracking is turned off |
| Paddle | merchant of record for subscriptions bought on the website; Paddle is the seller in that relationship | the data you provide to them directly, and your Lessi account identifier, to link the payment to the account |
iCloud is not in this table because we are not the ones handing data to Apple: with sync on, it is your device that sends your content to your own Apple account, and we receive nothing (item 2.1).
We may also share data when there is a court order or a request from a competent authority, within the limits of the law.
7. Where the data lives, and international transfer
The server, the account database and the website are operated by Cloudflare, emails are sent by Resend, and website purchases from outside Brazil are processed by Paddle. For that reason the data may be processed and stored outside Brazil.
This international transfer is based on art. 33, II, "d" and IX, of the LGPD — performance of a contract to which you are a party, and the regular exercise of rights — and Cloudflare and Resend act as processors under a contract that imposes data protection obligations.
The copy in your iCloud, if you turn on sync, is kept on Apple's servers, in the countries Apple chooses, under Apple's terms. That transfer is not made by us: it is part of the iCloud service you have with Apple.
8. How long we keep it
| Data | Period |
|---|---|
| Account | for as long as the account exists |
| Session tokens | until they expire, or until you sign out or delete the account |
| Password recovery code | minutes — it expires on its own, and is replaced with each new request |
| Account deleted by you | flagged immediately, actually deleted 30 days later. Within those 30 days, signing in again with the same email and password brings everything back |
| Application access logs | 6 months (Brazilian Internet Civil Framework, art. 15) |
| Copy in your iCloud | not kept by us. It stays in your iCloud until you delete it (item 2.1). Neither the end of the subscription nor deleting the Lessi account deletes any of it |
| Email on the waitlist | while you are on the list. If you leave, the email stays flagged as removed, only to make sure you receive nothing else; to have it erased for good, write to the contact in item 1 |
9. Your rights (LGPD, art. 18)
At any time, you may:
- confirm that we process data about you, and access that data;
- correct incomplete, inaccurate or outdated data;
- request anonymisation, blocking or deletion of data that is unnecessary or processed in breach of the law;
- request portability of the data;
- delete data processed on the basis of your consent;
- know who we share your data with;
- withdraw consent, where that is the legal basis;
- object to processing carried out on the basis of legitimate interest.
Two of these rights you exercise on your own, without having to talk to anyone:
- Delete the account — inside the app, under Account and projects, or in the account area, at account.lessi.pro. If you subscribe through our website, deleting the account cancels the renewal immediately; if you subscribe through the App Store, cancel with Apple first, because we cannot cancel it for you. It deletes the account, with the 30-day grace period described in item 8. Your videos are not in the account and are not affected, and neither is their copy in your iCloud. To delete that copy, see item 2.1.
- Portability — the "Export all projects" function produces a file with all your videos and edits, in an open format, and works on any plan, including the free one.
For the rest, write to [email protected]. We answer within 15 days.
10. Security
- Passwords are stored only as a hash, never in readable form. The same goes for recovery codes.
- Your session token lives in the iPhone's Keychain, not in ordinary storage — it does not travel along if your iPhone backup is restored onto another device.
- All communication between the app and the server is encrypted (HTTPS). The app refuses unencrypted addresses.
No system is infallible. In the event of a security incident with relevant risk, we will notify you and the ANPD, the Brazilian data protection authority, as required by art. 48 of the LGPD.
11. Children and teenagers
Lessi Cam is not intended for anyone under 13, and does not knowingly collect data from that age group. If we learn that an account was created by a child without the consent of whoever is responsible for them, we will delete the account and the data.
12. The website: waitlist, cookies and analytics
Waitlist. Before launch, you can leave your email on the website to be told when the app comes out and to receive news from Lessi. We keep only the email, the language of the page, where you came from (for example, a social media link), the version of the text you accepted, and the dates you joined and left. We do not keep IP address, browser, country or device. The emails carry no tracking pixel and no tracked links. To leave, use the link in every email or the unsubscribe page on the website. This list lives in a database separate from the app accounts, and a copy of it (only the email and whether you are subscribed) is kept at Resend, which sends the emails.
To keep bots out, the form uses Cloudflare Turnstile, which checks the browser without asking you to solve puzzles. We do not pass on your IP address in that check.
Cookies. The website lessi.pro and the account area (account.lessi.pro) use only strictly necessary cookies, to keep you signed in to your account. There are no advertising cookies, no audience analytics cookies and no third-party tracking cookies.
To know how many people visit each page, the website uses Cloudflare Web Analytics, which uses no cookies, stores nothing on your device and does not identify visitors. It only shows aggregated numbers, such as visits per page, country and device type. The legal basis is our legitimate interest in understanding how the website is used.
Country and language. To open the website in your country's language and show the right options for it (in Brazil, for example, the website points you to download the app), Cloudflare tells the page the approximate country you are visiting from, based on your IP address. That country is not stored or sent to anyone. If you pick a language with the EN/PT button, the choice is kept only in your browser, like the light or dark theme.
Subscribe page. When you subscribe on the website with Paddle, Paddle's payment form appears inside our page and its script runs there, and only there. What you type into it goes straight to Paddle, under Paddle's own privacy policy.
13. Changes to this policy
If this policy changes in a relevant way, we will let you know through the app and by email to the registered address, with reasonable notice. The version in force is always published at https://lessi.pro/pt/privacidade, with the date at the top.
14. Contact
Artstk Studio Ltda — CNPJ 47.924.342/0001-61 [email protected]
You may also file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian data protection authority.
This is a courtesy translation. The binding version of this document is the Portuguese one, published at lessi.pro/pt/privacidade. If the two versions differ, the Portuguese text prevails. The app and this service are operated from Brazil and governed by Brazilian law.