Privacy Policy

COOKOO Technologies, based in Islamabad, Pakistan, develops and operates Last Reel and is responsible for the personal information described in this policy (the “controller” under data-protection laws such as the GDPR). “We,” “us,” and “our” refer to COOKOO Technologies.

You can contact us about anything in this policy at hello@cookoo.dev.

Account information. When you create an account we collect your email address and the display name you choose. If you sign up with email, your password is handled by Firebase Authentication and stored only in hashed form; we never see it. If you sign in with Google (or Apple, where offered), that provider shares an account identifier and, depending on your settings with them, your name and email address. We also keep a record of which sign-in methods are linked to your account, and whether your email address is verified.

Your projects. Projects are stored in your account so they sync and are not lost: project titles, the credit blocks you add (for example title cards, cast and crew names, logos and music cues), timing, look, background and format settings, creation and update times, and a summary of your last render (such as whether it finished). Credits often contain other people’s names and roles. Please add only information you are entitled to use.

Preferences. Your project defaults, app settings (such as haptics and render notifications), privacy choices (such as personalised ads) and whether you agreed to receive product news by email.

Rendered videos. Exports are created on your device using its own video encoders. They are saved to your photo library or gallery, or passed to another app, only when you choose. We do not receive copies. To save videos, the app asks for permission to add to your photo library; it does not read your existing photos.

Technical and security information. When the app talks to our services, Google Firebase processes information such as your IP address, device and operating-system type, app version, authentication tokens and request times to deliver the service, keep sign-in secure and prevent abuse. The app downloads some typefaces from Google Fonts, which receives your IP address when it does.

Advertising information (free plan). On the free plan, Google AdMob shows ads in the projects library, while a video renders, when a render is ready, when you return to the app, and in optional rewarded ads that unlock a Pro render. To serve, limit, measure and protect those ads, Google collects information such as your IP address (and an approximate location derived from it), device and app information, ad interactions, diagnostic information and, on Android, your device’s advertising ID. See Ads and your choices.

Purchases and subscriptions. If you buy Last Reel Pro or restore a purchase, RevenueCat, which manages our subscriptions, receives your Last Reel account ID (a random identifier, not your name or email), details of the purchase and subscription (product, price, currency, dates, renewal status and store transaction identifiers) and basic device and app information. Payment itself is handled by Google Play or the App Store.

Usage analytics. Google Analytics for Firebase records how the app is used: events such as app opens, sessions, features used and purchases, together with a random app-instance identifier, device model, operating system, app version, language, and country or approximate location derived from your IP address. On Android it may also collect your device’s advertising ID where available. Google Analytics is on by default; you can turn it off at any time under Usage analytics in Settings → Privacy & data.

Session recordings. Microsoft Clarity records how you use the app so we can find and fix problems: what appears on screen (which can include your project content, such as names in your credits), taps, swipes, scrolling and screen changes, session length, device model, operating system, app version, approximate location derived from your IP address, and a random Clarity identifier. Email and password fields are always hidden from recordings. Clarity runs whenever the app is open.

Neither Google Analytics nor Clarity receives your name, email address or Last Reel account ID from us.

Support messages. If you contact us, we receive your email address and whatever you choose to include.

What we do not collect. Last Reel does not request your precise location, contacts, camera or microphone, and does not read your photo library. It does not use a crash-reporting service. We never receive your payment card details.

Ads appear only on the free plan. Pro accounts do not load the ad service at all.

Non-personalised by default. Last Reel asks Google for non-personalised ads unless you turn on Personalised ads in Settings → Privacy & data. Non-personalised ads are chosen using context, such as the app and your approximate location, rather than your interests across apps and websites.

Consent where required. In the European Economic Area, the United Kingdom and Switzerland, and anywhere else the law requires it, Google’s consent form asks for your choices before any ad is requested. You can change them later under Ad privacy choices in Privacy & data.

Device settings. On Android you can reset or delete your advertising ID in your device’s Google or privacy settings. On iOS, Last Reel does not ask for permission to track you, so your device’s advertising identifier is not shared.

Google processes advertising data under its own privacy policy. Learn more about how Google uses information from apps that use its services.

Google Analytics is on by default. Turn off Usage analytics in Settings → Privacy & data and the app stops sending analytics from that point. Google processes this data under its own privacy policy; see how Google uses information from apps that use its services.

Microsoft Clarity runs whenever the app is open and cannot be switched off in the app. It never records email or password fields. If you object to it, email us and we will explain your options and delete recordings we can associate with you. Microsoft processes Clarity data under the Microsoft Privacy Statement.

We use both to understand how Last Reel is used and to improve it.

Your projects are private to your account. There is no public profile, sharing or collaboration in Last Reel.

Service providers. We use Google Firebase (Authentication and Cloud Firestore) to run accounts and store projects; Google Sign-In and, where offered, Sign in with Apple to sign you in; RevenueCat to manage subscriptions; Google Analytics for Firebase and Microsoft Clarity for usage analytics and session recordings; Google AdMob for ads on the free plan; and Google Fonts for typefaces. They process information to provide their services under their own terms and data-protection commitments.

App stores. If you buy Last Reel Pro, the purchase is processed by Google Play or the Apple App Store under their terms. We and RevenueCat receive only what we need to confirm and manage your plan, not your payment details.

At your direction. When you save or share a video, it goes to the app or place you choose.

Legal and safety reasons. We may disclose information if required by law or valid legal process, or to protect the rights, property or safety of our users, the public or COOKOO Technologies.

Business changes. If COOKOO Technologies is involved in a merger, acquisition or sale of assets, information may transfer as part of that transaction, subject to this policy or equivalent protections. We will tell you before that happens.

We do not sell personal information. Personalised ads may count as “sharing” for cross-context behavioural advertising under some US state laws; they are off unless you turn them on, and you can turn them off at any time in Privacy & data.

We are based in Pakistan, and our service providers (Google, Microsoft and RevenueCat) are based in or operate from the United States, so your information may be processed there and in other countries that may not have the same data-protection laws as yours. Where required, transfers rely on safeguards such as the European Commission’s standard contractual clauses included in our providers’ data-processing terms. Contact us for more information about these safeguards.

Information is encrypted in transit and at rest by our providers. Database rules allow each account to read and change only its own projects and profile, and sensitive actions such as deleting your account require you to sign in again. No service can guarantee perfect security. If you think your account is at risk, contact us straight away.

In the app you can edit your name, manage your sign-in methods, delete individual projects, turn usage analytics and personalised ads on or off, change ad privacy choices where offered, and delete your account. To stop product emails, use the unsubscribe link in any of them or email us.

Depending on where you live, you may also have the right to access your information and receive a copy of it, correct it, delete it, restrict or object to how we use it, receive it in a portable format, withdraw consent, and opt out of targeted advertising. These include rights under the EU and UK GDPR, the California Consumer Privacy Act and other US state privacy laws, and the data-protection laws of other countries.

To make a request, email hello@cookoo.dev from the address on your account. We may need to verify your identity first. We respond within one month, or within the time your local law allows (for example, 45 days under California law), and will tell you if we need longer. You can use an authorised agent where the law allows. We will not discriminate against you for exercising your rights.

If you are unhappy with how we handled your information, please contact us first. You also have the right to complain to the data-protection authority where you live.

In the past 12 months we have collected these categories of personal information: identifiers (such as email address, account ID, app-instance and Clarity identifiers, IP address and advertising ID); customer records (such as your name); commercial information (your subscription and purchase history); internet or electronic activity (such as how you use the app, session recordings and ad interactions); approximate geolocation derived from IP address; and the content you add to your projects. We collect it from you, your device and our sign-in, subscription, analytics and ad providers, for the purposes described above, and disclose it only to the service providers listed in this policy.

We do not sell personal information and do not use or disclose sensitive personal information for purposes that would require a right to limit. We do not knowingly sell or share the personal information of consumers under 16.

Last Reel is not directed to children. You must be at least 13 years old, or the minimum age required to consent to data processing where you live if that is higher (for example, 16 in some EU countries), to create an account. If you believe a child has given us personal information, contact us and we will delete it.

We will update this policy when Last Reel, our providers or the law change, for example if we add a new service provider. We will post the new version here with a new effective date and, for material changes, tell you in the app before they apply.