Privacy policy
What Acto knows about you, why, where it is kept, and how to have all of it erased.
Last updated: 2026-10-29
1. In short
Acto sells nothing, tracks nobody and embeds no advertising beacon. The database is hosted in France. You can erase everything from inside the app, in a few taps.
The data controller is Arnaud CHIKHANI, 37 rue Saint-Ambroise, 75011 Paris, France. For any question about your data: contact@acto.re.
2. The data Acto processes
Your account. Your email address, your display name, your profile picture if you add one, and your password, which we never see in clear text. If you sign in with Apple, we receive the associated email address (or Apple’s relay address, if you chose to hide yours) and, on your very first sign-in only, the name you gave Apple. If you sign in with Google, we receive your email address, your name and your Google profile picture. That name and picture become those of your Acto profile, and you can change them at any time. Without a name, your display name is taken from the start of your email address.
Your profile, visible to other actors. Your name, your picture, and whatever you choose to fill in on the Info tab of your profile (stage name, city, agency, height, languages, skills, availability, bio) are visible to anyone signed in to Acto: that is what lets people find you and add you as a contact. To tell apart two actors with the same name, search may show a masked form of your email address (only a few characters), and someone who already knows your address can find you with it. Your photos, on the other hand, are visible to your contacts only.
What you create. Your scenes and imported texts, your video takes, clips, photos, comments and audio recordings.
Your network. The actors you add as contacts, your pending requests, the people you have blocked, and your reports.
Acto never accesses your phone’s address book. Your network is built inside the app only.
Your notifications. If you accept them: a technical token provided by your phone, your time zone and the time you usually work on Acto, so that we only write to you at a reasonable hour. The content of a notification (for example the name of the person who liked your clip, or an excerpt of a comment) goes through Expo, then through Apple (APNs) on iPhone or Google (Firebase Cloud Messaging) on Android, which deliver it to your phone.
Nudges. When you are away, Acto may tell you what your network did in the meantime, then check in after three weeks; and your phone may remind you of a text you worked on that is starting to fade. These nudges can be switched off in Settings, Notifications section (“When you are away”, “Memory nudges”).
Usage measurement. Pseudonymised events: screens opened, features used, errors encountered. They carry a randomly drawn identifier, not your name or your email address, but we can link it to your account, for example to understand a problem you report to us. Never the content of your scenes, never your messages. This measurement can be switched off in Settings.
AI features (Google Gemini). Only with your consent: the text of a scene you have analysed and, for a difficult import, the file (PDFs included) or the photos of pages you import are sent to Google Gemini to produce the answer. Google may keep them for a limited time to detect abuse, and does not use them to train its models. Your videos and recordings are never sent to it.
Speech recognition. When Acto listens to you say your line, it is your phone’s speech recognition service that transcribes your voice: Apple’s on iPhone (on the device when possible, otherwise on Apple’s servers), Google’s on Android, which may go through Google’s servers. Acto only receives the recognised text, on your phone.
Image analysis, on your phone. For framing tips and background removal in the Studio, Acto analyses the image on the device: with Apple’s system on iPhone, with Google ML Kit on Android. The image does not leave your phone. On Android, however, ML Kit sends Google technical information (device model, system and app version, an installation identifier, performance metrics) for its own diagnostics.
Your IP address. As with any online service, our hosts see your phone’s IP address with every exchange. Supabase keeps it with your sign-in session for as long as it is open, and our hosts keep it in their technical logs for a few days. Acto uses it neither to locate you nor to track you.
The waitlist and beta sign-up. If you sign up on acto.re before launch, or to test the beta: your first name, your last name, your email address, your school or your agency, and what you told us in the form (your profile, the struggles you ticked). We use it to prepare your access and to let you know when it opens, nothing else. When we write to you, we know whether the message reached you, whether it was rejected or marked as spam, and whether you unsubscribed; clicks on its links are counted without knowing who clicked, and we don’t measure whether it was opened. A link at the bottom of every message is all it takes to stop receiving anything: your address then joins, as a hash, a list that stops us from writing to you again.
A library text sent by email. If you ask to receive a text by email, your address is used for that email, which Resend delivers, and for nothing else. We don’t keep it: only a hash of it remains for two days, to prevent abusive sending. If you tick the box provided, you also join the waitlist.
Visiting the site. On acto.re (the home page, the blog, the text library, shared clips and invitations, these pages): the page opened, its language, the name of the site or link that sent you our way, how long you stayed, how far you scrolled, whether you interacted with the page, the links and buttons you tap or click and the texts you download. A randomly drawn number ties together the pages of a single visit; it is erased the moment you close the tab. No IP address, no profile, and nothing that recognises you from one visit to the next. If your browser sends a “do not track” signal, nothing is measured at all.
Crash reports. When the app crashes or an operation fails, a technical report goes to our diagnostics provider, Sentry: the error trace, the device model, the Acto version and the screens you had just been through. Identifiers that could point to you are stripped from it, and Sentry keeps neither your IP address nor your location. Never the text of your scenes, never a screenshot. This collection stops together with usage measurement, in the same setting: once it is off, Sentry no longer starts at all.
Import diagnostics. When you import a text, we keep what you provided (the file, the photos or the pasted text, with its name) and the text the app extracted from it, along with technical information about the attempt. They are used only to understand and fix an import that goes wrong: only the Acto team can access them, and they are deleted after 30 days.
3. What Acto does not do
- no selling or renting of your data;
- no advertising, therefore no advertising profiling;
- no advertising SDK, no advertising tracker, no advertising pixel;
- no tracking pixel in our emails: we don’t know whether you opened them;
- no tracking across apps or websites, so nothing to allow on iOS;
- no AI model trained on your content;
- no human reading of your videos or recordings, except a report under moderation.
4. Why, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of the contract |
| Providing the app’s features (texts, takes, clips, podcast) | Performance of the contract |
| Network between actors: contacts, likes, comments | Performance of the contract |
| Moderation, safety, fighting abuse | Legitimate interest and legal obligation |
| Push notifications | Your consent, withdrawable in your phone settings |
| Pseudonymised usage measurement | Legitimate interest, with opt-out in Settings |
| Crash reports and technical diagnostics | Legitimate interest: keeping the app in working order, with opt-out in Settings |
| IP addresses and our hosts’ technical logs | Legitimate interest: security and proper running of the service |
| Nudges when you are away, memory nudges | Your consent to notifications, with opt-out in Settings |
| Import diagnostics (imported document and recognised text) | Legitimate interest: fixing imports that fail or go wrong, with the right to object by writing to us |
| Audience measurement on the acto.re site | Legitimate interest: anonymous, limited to a single visit, never cross-referenced |
| Emailing you a library text, at your request | Performance of your request |
| AI features with Google Gemini (difficult import, scene analysis) | Your explicit consent, revocable |
| Service emails (confirmation, password) | Performance of the contract |
| Waitlist: letting you know at launch | Your consent, withdrawable at any time |
| Tracking of our emails: delivery, rejection, spam reports, unsubscribes, clicks counted without knowing who clicked | Legitimate interest: checking that our messages arrive, and no longer writing to anyone who doesn’t want it |
5. Where your data is kept
| Provider | What it processes | Where |
|---|---|---|
| Supabase | Account, texts, network, usage measurement | European Union (Paris) |
| Cloudflare R2 | Videos, photos, audio recordings, imported documents (diagnostics) | Distributed, possibly outside the EU |
| Google (Gemini) | The text, page photos and PDFs you submit to the AI features | United States |
| Resend | Your email address, for our emails (service and waitlist) | United States |
| Expo | The notification delivery token and the content of notifications | United States |
| Apple (APNs) and Google (Firebase Cloud Messaging) | Delivering notifications to your phone | United States |
| Sentry | Crash reports and technical diagnostics, without IP address | European Union (Germany) |
| Cloudflare Pages | The acto.re website | United States |
These providers act as processors, on instruction, and have no right to use your data for their own purposes.
6. Transfers outside Europe
Some providers in the table above are established in the United States, or may store data there. Those transfers rely on the European Commission’s standard contractual clauses, backed by each provider’s own safeguards.
If this matters to you, you can keep your content off the network: nothing obliges you to publish a clip or a photo.
7. For how long
- Your account and content: as long as your account exists. They are erased when you delete it; what remains, with nothing that identifies you, is detailed on the Delete my account page.
- Your notification token, time zone and usual time: as long as notifications are active on your phone. Erased when you sign out or delete your account.
- Your IP address: for the length of your sign-in session at Supabase, and a few days in our hosts’ technical logs.
- Usage measurement: 13 months, then automatic purge. Same for site measurement.
- Import diagnostics: 30 days for the imported document, its name and the recognised text; 13 months for the technical information about the attempt.
- Crash reports: at most 90 days at our diagnostics provider, then deletion.
- Reports: for as long as it takes to handle them, then as long as needed as evidence in case of repeat offence or legal follow-up. If the reported account is deleted, the report no longer keeps anything that identifies it.
- Service emails: a few days at our sending provider.
- The waitlist and beta sign-up: until your access opens, and at most one year after you signed up, then automatic erasure. They are also erased if you delete your Acto account. A message to us is enough to be taken off sooner.
- A text sent by email: your address is not kept; its hash is erased after two days.
- Tracking of our emails (delivered, rejected, reported, unsubscribed): one year after sending, then only totals remain. The hash of an unsubscribed address is kept for as long as needed to stop writing to you.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions on what happens to your data after your death.
The fastest route is the app itself: you edit your profile in the Profile tab and your address in Settings, you switch usage measurement off in one gesture, and you delete your whole account without asking anyone (Profile tab, gear icon at the top right, Delete my account). For anything else, write to contact@acto.re, we answer within one month.
How to delete your account, and what gets erased, is detailed here: https://acto.re/en/delete-account. This page can be read without an account and without the app.
If our answer does not satisfy you, you can refer the matter to the French data protection authority, cnil.fr.
9. Security
Exchanges between the app and our servers are encrypted in transit. Passwords are hashed. Access to your content is controlled row by row at database level, and media are only served through signed, time-limited links.
No system is perfect. In the event of a data breach posing a risk to you, we will tell you and notify the CNIL within the timeframes set by the GDPR.
10. Minors
Acto is not aimed at children. You must be at least 16 to create an account.
If you notice an account belonging to someone younger, write to us at contact@acto.re: we will close it.
11. Cookies
The app uses no cookies. The acto.re website sets a single one, `acto-lang`, which remembers the language you chose. It serves no advertising purpose and requires no consent.
Site pages additionally keep, for the duration of your visit, a randomly drawn number used to know how many pages were opened and how long they were read. It lives in the tab’s memory and vanishes when you close it: it follows you neither from one day to the next nor from one site to another, and is cross-referenced with nothing. That is why this measurement falls under the exemption granted to audience measurement and does not require your prior consent. It switches itself off if your browser sends a “do not track” signal.
12. Changes
This policy may change. The last updated date appears at the top of this page, and any substantial change will be flagged to you inside the app or by email.