DirectorSeat Privacy Policy

Effective November 2, 2026

DirectorSeat helps you plan, film and finish short films on your iPhone. It is built so that as little as possible leaves your phone, and nothing leaves it without your permission.

Who we are

DirectorSeat is made by Ege Hazar, an independent developer in Türkiye, who is responsible for your data under Turkish data-protection law (KVKK, Law No. 6698), as its data controller. Contact: ege.hazar42@gmail.com.

DirectorSeat is run by one person with no employees, and its main activity isn't processing special categories of personal data. Under the Personal Data Protection Board's decision 2018/87, as amended, such data controllers are exempt from registering with the Data Controllers' Registry (VERBIS). That doesn't change any other duty in this policy.

What leaves your phone, and why

Only the text you write to get a plan, and only after you agree. Before your first plan, DirectorSeat asks your permission. If you agree, it sends:

• the idea you type, and any optional notes (for example "tripod" or "outdoors");
• who is in the film (for example "me and 1 other person"), the shooting language, and the template you picked, if any;
• when you ask to change a shot: your messages and the current plan, including the character names and dialogue in it.

This text goes over an encrypted connection to DirectorSeat's server, which passes it to Anthropic (the company that makes the Claude AI) to write or revise your plan, and sends the answer back to your phone. When a plan arrives, two lines of it, the music mood and the one-line story (both written by the AI from your idea), also go from our server to Cloudflare's own AI, which picks the music and the look the Finish screen marks as suggested.

• Our server doesn't keep what you wrote or what the AI wrote back. It passes them through and keeps no copy. Its log holds only technical details (error codes, which kind of request it was, how a reply ended), never the content of a request or anything that identifies you, and is deleted after 7 days at most.
• Anthropic processes the text to produce your plan. Under its commercial terms it doesn't use it to train its models and deletes it within 30 days, except content flagged for a safety review, which it may keep longer (up to 2 years), or where the law requires it to keep it.
• Cloudflare's AI (Workers AI) reads only the plan's music mood and one-line story. Cloudflare keeps neither once it has answered and doesn't use them to train AI models.
• Please don't include sensitive personal information about yourself or anyone else in what you type.

You can turn this off at any time in About → Use AI to write plans. From then on nothing you type is sent anywhere, and you can't write new plans or chat about shots until you turn it back on.

What never leaves your phone

• Your videos and sound. Everything you film, every take, and every film DirectorSeat assembles is recorded, edited and rendered on your iPhone. We never upload, see or have access to your footage.
• Your projects. Plans, takes and settings are stored on your device.
• Your finished films go to your Photos library only when you choose to save them, and are shared only when you choose to share them.

The camera and microphone are used only while you are filming.

Other data we process

• A random device identifier. Your iPhone creates a random code the first time it sends a request. It isn't tied to your name, your Apple Account or anything you write. Our server uses it only to count requests so that each device stays within a daily limit, and deletes each day's count, with the code, within about a day.
• Your IP address is seen by Cloudflare, which runs our server, in order to deliver each request. Cloudflare also counts requests from each address for one minute, so that no single network can send too many at once; the count is gone after that minute. We don't store your IP address, and it isn't in our log.
• Apple's DeviceCheck. Your first film's clean export is free, once per iPhone. To keep it to once, when a film is ready to export the app sends our server a DeviceCheck token (a one-time code from Apple's DeviceCheck service that says nothing about who you are). Our server asks Apple whether this iPhone has had its free export, and tells Apple once it has. Apple keeps that single yes/no for this device. We don't store the token or the answer; the app also remembers the answer in your iPhone's Keychain.
• How the App Store lists this. The daily count is kept against a code unique to your iPhone, and Apple keeps the free-film answer for your iPhone, so the App Store's privacy details list the identifier and this usage data as "linked to you". What you write is listed as not linked: our server keeps none of it, and it reaches Anthropic without the code.
• Actor pages. Before a shoot you can give each actor a code (or a link) to read their part on their own phone. Their role, shots and lines are written into the link itself, after the "#" sign, and browsers never send that part of a link to a server. When the actor opens it, their browser loads an empty page from our server and fills it in on their phone; our server never sees the lines and nothing is stored. Anyone you give the code or link to can read that part, so share it only with your cast.
• Purchases are handled entirely by Apple. We never see your payment details. To make sure each purchase adds your Film Passes exactly once, the app keeps the purchase's transaction number, and how many passes you have, in your iPhone's Keychain.

Who else handles your data, and how it's protected

Only the companies named above: Cloudflare (our server, and its AI), Anthropic (the plans) and Apple (DeviceCheck and purchases). Cloudflare and Anthropic handle your data only on our behalf, under data-processing terms that bind them to use it only to provide their service to DirectorSeat and to keep it confidential and secure, giving it the same or equal protection as this policy. Apple handles the DeviceCheck answer and your purchases under its own privacy policy, with the same or greater protection. No one else receives your data.

What we don't do

No accounts. No advertising. No analytics or tracking tools. We don't sell or share your data. If you install DirectorSeat from the App Store or TestFlight, Apple may share crash reports and basic statistics with us under Apple's own privacy terms, if you allow it in your iPhone's settings.

Age

DirectorSeat is for adults, 18 and over. This isn't because of mature content: the AI service that writes the plans requires extra safeguards for younger users that DirectorSeat doesn't have yet. We don't knowingly process data of anyone under 18.

Transfers outside Türkiye

When you ask for a plan or send a shot-chat message, your text goes to our server, which Cloudflare, Inc. (USA) runs in its data centres around the world, and from there to Anthropic PBC (USA), which writes the reply. A new plan's music mood and one-line story also go to Cloudflare's own AI, which suggests music and a look. Cloudflare also keeps the random device identifier and the daily count, and Apple Inc. (USA) answers the free-first-film check. Cloudflare and Anthropic act only on our instructions, as our data processors. Under Article 9 of Law No. 6698 these are transfers of personal data abroad.

DirectorSeat isn't offered in the European Union, the wider European Economic Area or the United Kingdom, so the GDPR and the UK GDPR don't apply to it, and it has no representative there. We'll update this policy before that changes.

How long data is kept

Data	Where	Kept
Idea, notes, plans, chat messages	Anthropic	Up to 30 days (longer only if flagged for a safety review)
The same text	DirectorSeat's server	Not kept; passed through
A plan's music mood and one-line story	Cloudflare's AI	Not kept once it has answered
Technical log (no content, nothing that identifies you)	DirectorSeat's server	Up to 7 days
Daily request count, with the random device identifier	DirectorSeat's server	About a day
Videos, projects, settings	Your iPhone	Until you delete them or the app
Film Passes, purchase numbers, whether the free first film is used	Your iPhone's Keychain	Until the iPhone is erased; they stay when the app is deleted, so a reinstall finds them
Whether this iPhone has used its free first film	Apple (DeviceCheck)	Kept by Apple for this iPhone until we reset it, which we don't

Turning the AI off, and deleting your data

• To withdraw your permission: About (the (i) button on Home) → turn off Use AI to write plans. Nothing you type is sent from then on.
• To delete what's on your iPhone: delete a film from Home, or delete the app.
• To ask us to delete anything else: write to ege.hazar42@gmail.com. Our server keeps nothing you wrote, and the daily count with the random identifier deletes itself within about a day, so in practice there is nothing more for us to delete; Anthropic deletes its copy within 30 days, as above.

Your rights

Under KVKK (Article 11) you can ask what data about you is processed, ask for it to be corrected or deleted, object to processing, and complain to the Turkish Personal Data Protection Authority (KVKK). Write to the address above; we answer free of charge within 30 days. Because we keep no copy of what you write and have no accounts, deleting the app removes your projects and films. Two things stay by design: your unused Film Passes and purchase record in the Keychain (so a reinstall finds them), and Apple's DeviceCheck record of whether this iPhone has had its free first film. Anything already sent to Anthropic is deleted by Anthropic on its own schedule.

Information notice (Law No. 6698, Article 10)

• Data controller: Ege Hazar, ege.hazar42@gmail.com.
• What we process: the text you type for a plan or a shot change (your idea, notes, character names, messages); a random identifier created on your iPhone, with today's request count; a one-time Apple DeviceCheck token; and the network (IP) address your phone connects from.
• Why, and on what legal basis: to write and revise the plan you ask for, and to suggest music and a look for it, which is performing our contract with you (Article 5(2)(c)); for other people your text names, our legitimate interest in writing the plan you asked for (Article 5(2)(f)); and to keep the daily limit and the one free export per iPhone, our legitimate interest in keeping the service available and preventing abuse (Article 5(2)(f)).
• How: electronically, by the app, only when you ask for a plan, send a message or export a film.
• Who receives it: Cloudflare, Inc. (runs our server, and its AI suggests music and a look), Anthropic PBC (writes the plans) and Apple Inc. (DeviceCheck), all in the USA; see "Transfers outside Türkiye".
• How long: as in "How long data is kept".
• Your rights: those in Article 11 of Law No. 6698, such as access, correction, deletion and objection. Write to ege.hazar42@gmail.com; we answer free of charge within 30 days.
• Please don't include health, religious or similar sensitive details about anyone in what you type.

Aydınlatma Metni (6698 sayılı Kanun, Madde 10)

• Veri sorumlusu: Ege Hazar, ege.hazar42@gmail.com.
• İşlenen kişisel veriler: plan veya çekim değişikliği için yazdığınız metin (fikriniz, notlarınız, karakter adları, mesajlarınız); iPhone'unuzda oluşturulan rastgele bir tanımlayıcı ve o günkü istek sayısı; tek seferlik bir Apple DeviceCheck jetonu; telefonunuzun bağlandığı ağ (IP) adresi.
• İşleme amaçları ve hukuki sebepleri: istediğiniz planı yazmak ve düzeltmek, ona müzik ve görünüm önermek; bu, sizinle aramızdaki sözleşmenin ifasıdır (Kanun md. 5/2-c). Metninizde adı geçen diğer kişiler için, istediğiniz planı yazmaktaki meşru menfaatimiz (md. 5/2-f). Günlük kullanım sınırını ve her iPhone'a bir ücretsiz dışa aktarımı uygulamak için, hizmeti ayakta tutma ve kötüye kullanımı önleme yönündeki meşru menfaatimiz (md. 5/2-f).
• Toplama yöntemi: elektronik ortamda, uygulama tarafından; yalnızca plan istediğinizde, mesaj gönderdiğinizde veya film dışa aktardığınızda.
• Aktarılan kişiler: sunucumuzu işleten ve yapay zekâsıyla müzik ve görünüm öneren Cloudflare, Inc., planları yazan Anthropic PBC ve DeviceCheck için Apple Inc.; üçü de ABD'de. Ayrıntılar "Transfers outside Türkiye" bölümünde.
• Saklama süresi: "How long data is kept" bölümündeki gibi.
• Haklarınız: Kanun'un 11. maddesindeki haklarınızı (bilgi talep etme, düzeltme, silme, itiraz ve diğerleri) kullanmak için ege.hazar42@gmail.com adresine yazabilirsiniz; başvurunuzu en geç 30 gün içinde ücretsiz olarak yanıtlarız.
• Lütfen yazdıklarınıza kimsenin sağlık, din veya benzeri hassas bilgilerini eklemeyin.

Changes

If we change what is sent, where it goes or who processes it, the app will ask for your permission again before sending anything. The date at the top shows when this policy last changed.