AVE Privacy Policy.

Summary

AVE is built as a local-first Mac video editor. Your project files, imported media, local analysis, timeline execution, and exports stay on your Mac by default. This policy explains what TinyThings receives through the website, downloads, purchases, updates, app usage analytics, support, and optional provider workflows.

Information AVE keeps local by default

Local project data includes footage, screen recordings, camera and microphone tracks, audio, graphics, transcripts, visual notes, timelines, generated local analysis, render outputs, and project files stored by the desktop app. TinyThings does not automatically receive that local project data just because you use AVE. Screen recording requires macOS permission; camera and microphone access are requested when you enable those inputs. Recorded media and its editable settings are saved in your local project.

Information you may provide to TinyThings

• Contact information, such as your email address, when you contact support.
• Support material you choose to send, such as screenshots, logs, diagnostics, or written descriptions.
• Purchase and license information needed to activate, refresh, and support AVE Pro.
• Technical download or update information handled by the distribution services used for AVE releases.

Please do not send raw provider keys, unredacted license keys, confidential client footage, private media, or sensitive personal information unless support explicitly asks for a safe redacted sample.

Mac app usage analytics

Starting with AVE 1.2.1, privacy-preserving usage analytics through TelemetryDeck are enabled by default. These events help us understand which features people use and where workflows succeed or fail. You can turn them off at any time in Settings → About → Share anonymous usage analytics. AVE remembers your choice across restarts and updates.

Events include feature usage, trial and license activation events, workflow outcomes, AI provider type, some operation durations, access tier (Free, Trial, Monthly, or Lifetime), and app version/build, macOS version, and processor architecture. AVE generates a random installation identifier, which the TelemetryDeck SDK hashes before sending, and a session identifier to group events from the same app session. These identifiers are not based on your email address or license key.

Analytics do not include your media, transcripts, prompts, project names, filenames, file paths, license keys, or provider credentials. AVE does not automatically send raw error logs, stack traces, or crash reports through this integration. Turning analytics off stops future events and clears pending events on your Mac; it does not delete events already received by TelemetryDeck.

Website analytics

The AVE website uses Google Analytics 4 to understand page visits, traffic sources, and aggregate site usage. Analytics starts when the website loads unless you have rejected analytics in the last 30 days. If you reject analytics, the website switches analytics storage to denied, disables future Google Analytics hits on that page, and attempts to clear existing Google Analytics cookies.

Your analytics choice is stored in this browser for 30 days. After that, the site asks again. Ad measurement is a separate, optional choice and stays off until you enable it. Keeping analytics on does not enable ad measurement. Website analytics do not give TinyThings access to local AVE project files, imported media, timelines, exports, provider keys, or other content inside the Mac app.

The website also records checkout attribution when you click an AVE Pro checkout link. This stores the app, product, landing page path, checkout page path, CTA identifier, UTM source, medium, campaign, term and content, referrer host, generated intent ID, and purchase or drop-off status so TinyThings can understand which pages lead to checkout activity. If you keep analytics on using the preference panel, we can also associate a verified purchase with your Google Analytics browser identifiers. Arbitrary query strings are not stored in page paths.

Founder alerts may be sent to Telegram for completed sales and checkout drop-offs. These alerts intentionally exclude customer name, email address, billing address, license keys, project files, footage, prompts, timelines, exports, and other AVE app content.

Manage site preferences

Optional ad measurement

If you enable ad measurement, we save the ad-click identifiers supplied by Google in this browser and share them with Google alongside verified purchase details: the order identifier, product, amount, currency and purchase time. This helps us measure which ads lead to sales. Personalized advertising stays off. We do not send names or email addresses for this purpose or use customer lists, fingerprinting or a shared identity across devices.

Download attribution is kept in this browser for up to 30 days. Checkout attribution is kept on our server for up to seven days. A secure cookie and a server record remember your separate ad-measurement choice for up to 30 days. Small order-delivery records are retained to prevent duplicate reporting; they contain no customer details or ad-click identifiers.

You can turn ad measurement off in Manage site preferences. This clears saved ad-click identifiers from this browser and updates our server to stop future ad reporting for that permission, including pending purchases. If the server cannot be reached, we show a retry message; server-side withdrawal takes effect when it receives the update. Withdrawal does not recall data already sent to Google. Re-enabling ad measurement does not authorize reporting under an earlier, withdrawn permission.

Download and purchase attribution depends on using the same browser and profile with its saved data intact. It does not follow an installation to a different browser or device.

Requested download emails

If you ask us to email a Mac download link, we send your email address and the localized download link to Resend to deliver that one transactional email. The link may include limited campaign attribution. This form does not subscribe you to marketing emails.

To prevent abuse, we keep keyed hashes of the requesting IP address and recipient address in Redis for up to 24 hours. We do not add email addresses to website analytics. Email delivery records are retained according to Resend’s account settings. You can use sharing or copy the link instead.

Optional AI providers and external services

AVE can use local models, installed assistants, custom API endpoints, and bring-your-own generation providers. If you connect an external provider, the information sent to that provider depends on the provider, model, prompt, settings, and feature you choose. Those providers process data under their own terms and privacy policies.

Provider API keys are handled by the desktop app and stored using encrypted secure storage where supported. AVE Pro checkout and license handling are processed through Polar. AVE downloads are distributed through GitHub Releases.

How information is used

• To provide downloads, updates, activation, support, and license management.
• To respond to support requests and troubleshoot user-reported issues.
• To maintain security, prevent abuse, and verify download or license state.
• To comply with legal obligations and enforce applicable terms.

Sharing

TinyThings does not sell personal information. TinyThings may share information with service providers used to operate AVE, such as Polar for checkout and license management, GitHub for release downloads and updater artifacts, Google Analytics for website analytics unless rejected, TelemetryDeck for Mac app usage analytics unless disabled, Upstash or Vercel storage for checkout attribution, Telegram for founder alerts, email providers for support, and any external AI or generation provider you choose to connect.

TinyThings may also disclose information if required by law, to protect rights or security, or with your consent.

Privacy choices and rights

You can choose not to connect external AI providers. You can avoid sending support diagnostics or media unless you decide they are needed. You can contact TinyThings to request access, correction, or deletion of personal information TinyThings holds about you, where applicable.

If a privacy law gives you additional rights, such as rights to know, delete, correct, opt out of sale or sharing, or limit certain uses of sensitive personal information, TinyThings will respond as required by that law. Because TinyThings does not sell personal information, there is no separate sale opt-out flow on this site at launch.

Retention and security

TinyThings keeps personal information only as long as reasonably needed for the purposes above, unless a longer period is required for legal, tax, accounting, security, or dispute-resolution reasons. Checkout attribution records are retained for limited operational periods. AVE uses a local-first architecture, encrypted secure storage for supported secret handling, and Mac download verification steps, but no software or service can guarantee perfect security.

Children

AVE is not directed to children under 13. Do not use AVE or contact TinyThings with a child account or child personal information unless a parent, guardian, school, or organization has a lawful basis to do so.

Changes

TinyThings may update this policy as AVE changes. The effective date above shows when this policy was last materially updated.

Contact

Questions about privacy can be sent to support@tinythings.app.