This Privacy Policy explains how Drillin OÜ ("we", "us") collects, uses, and
protects information when you use the Drillin AIR mobile app (the "App"). By using the
App you agree to this policy.
Information we collect
Account identifiers. When you sign in with Apple we
receive a unique account identifier and, if you choose to share it, your
name. We create a corresponding Firebase Authentication user ID. We do not
receive your Apple password.
Subscription & purchase status. When you buy or renew
a subscription, Apple processes the payment and we receive the transaction
status (which plan, active/expired, renewal dates) to unlock features and
meter your monthly generation allowance. We never receive your full payment
card details.
User content. To generate a scene, the App sends the
image you capture and the text prompt you enter to our processing backend
and our AI provider (RunwayML). Generated videos are returned to your
device and stored locally; an associated record (prompt, timing, credits
used) is stored in your account.
Diagnostic data. We log technical events (e.g. generation
success/failure, errors) to operate and debug the service.
How we use information
To provide the core feature: generating and delivering AR video scenes.
To authenticate you and sync your library and subscription across launches.
To enforce your monthly generation allowance and prevent abuse.
To maintain, secure, troubleshoot, and improve the App.
Third-party services
We share the minimum data necessary with service providers who process it on
our behalf:
Apple — Sign in with Apple and In-App Purchases /
subscription billing.
Google Firebase (Authentication, Cloud Firestore, Cloud
Functions) — account, subscription, and generation records, and backend
processing.
RunwayML — receives your captured image and prompt solely
to generate the requested video.
We do not sell your personal information and we do not use third-party
advertising or tracking SDKs.
Data retention & deletion
We retain account, subscription, and generation records for as long as your
account exists. You can delete your account at any time from the App
(Settings → Delete account), which removes your authentication record,
subscription and token data, and generation history from our systems. Locally
stored videos are removed when you delete them or uninstall the App.
Security
Data in transit is encrypted with HTTPS/TLS. Access to backend data is
restricted and our AI provider key is held server-side and never shipped in the
App.
Children
The App is not directed to children under 13 (or the equivalent minimum age
in your jurisdiction) and we do not knowingly collect their data.
International users
Drillin OÜ is based in Estonia (European Union). By using the App you
consent to processing of your information as described here. Where applicable,
you have rights to access, correct, or delete your data; contact us to exercise
them.
Changes
We may update this policy; material changes will be reflected by a new
effective date on this page.