Privacy Policy

Slushie is an AI content studio operated by Timeloop Inc. (“we”, “us”). This policy describes what we collect, why, and what we will never do with it. It is written to be read, not to hide things.

What we collect

Account data — your email address (sign-in is a one-time code mailed to you; the shared account that app-store reviewers use signs in with a password instead), held in our authentication provider (Supabase), and, if you choose to add one, your profile photo, kept in private storage and shown only through short-lived links. Brand data — the brand profiles, voice baselines, drafts, edits, approvals, standing orders and published-post records you create in the studio. Connected-account credentials — the access and refresh tokens a platform issues when you link an account through Slushie Connect, ad-platform tokens, and model-provider keys you supply. We never see or store your platform passwords: you sign in on the platform’s own screen. Tokens are encrypted at rest (AES-256-GCM) and decrypted only server-side at the moment of use. Usage and cost records — a ledger of AI calls made on your behalf, kept so spending is always accountable.

On the phone

Microphone — used only while you hold the mic button to tune a draft or add a brand note. The clip is sent to OpenAI to turn it into text, then deleted from your phone; we keep the text, not the audio. Camera and photo library — used only when you choose a profile photo. Error reports — when the app hits an error it sends us the error message, a short technical trace and which screen it was on, with your account email, so we can find and fix it. Draft reports — when you report a draft, we keep the report and the draft’s text so a person can review it. The app has no ads, no ad identifier and no tracking across other companies’ apps or websites.

What we do with it

Everything we collect exists to run your studio: generating and refining content you review, publishing where you have connected accounts, verifying that published content matches what you approved, harvesting engagement metrics, and improving your own brands’ results over time. Your brand data trains your studio’s memory — it is not pooled into other customers’ brands and it is not sold, rented or shared with advertisers.

The vault

Each brand has a vault: photos and videos you choose to add so the studio can find and use them. Your device makes a small preview of each file before it uploads; the original is stored privately in our storage provider and only opened when you open it or when you approve a post that uses it. The studio looks at the preview (never the original) once, to describe it, judge its quality, spot duplicates and note which formats it suits; that description is what search uses. Only add files you own or have the rights to use. Deleting a file from the vault deletes the original, its preview and its description; deleting a brand deletes its whole vault.

Slushie Connect — linked social accounts

When you link an account (X, LinkedIn, Instagram, TikTok or YouTube), the platform shows you exactly which permissions Slushie is asking for, and you approve them there. With those permissions we read your account’s identifier and handle, your own recent posts (to learn how the brand already sounds) and the public engagement numbers on posts Slushie published for you (likes, reposts, replies, views) — and we publish only content you approved in the studio. We do not read your direct messages, your followers’ data, or anything beyond those uses, and we never sell or share data obtained from a platform.

Unlinking an account in the studio revokes the token with the platform where Slushie can, and always deletes our copy. You can also revoke Slushie from the platform’s own app settings at any time. Use of YouTube features is subject to the YouTube Terms of Service and the Google Privacy Policy; Slushie’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party AI

Slushie writes with AI, and the app asks your permission before it starts. Anthropic (Claude) receives your brands’ notes, drafts and edits and what you type or say to tune a draft, to write and revise drafts, and the small previews of files you add to a brand’s vault, to describe them. OpenAIreceives voice clips you record (to transcribe them), image descriptions (to make images) and the text descriptions of vault files (to make them searchable). Neither receives your email, photo or sign-in, and under their business terms neither trains its models on what we send. Drafts are written by AI: they can be wrong, and if your brand’s voice swears, so can they. Nothing is published until you approve it, and you can report any draft from the app.

Third parties we touch

Content generation uses model providers (Anthropic, OpenAI — or your own keys if you supply them). Publishing and metrics go directly to the platforms you link (X, LinkedIn, Meta/Instagram, TikTok, Google/YouTube) under their terms and only with the permissions you grant — no intermediary service holds your tokens. Payments are processed by Stripe; we never see your card number. Hosting is on Vercel and Supabase. Each processor receives only what its function requires.

Ad-platform data

If you connect an ad account (Meta or Google Ads), we read campaign performance data — spend, impressions, clicks, conversions — solely to show you analysis of your own campaigns. We do not modify campaigns, we do not share this data with anyone, and disconnecting removes our access. Google user data handling complies with the Google API Services User Data Policy, including Limited Use requirements.

Retention and deletion

Data is kept while your account is active. Delete your account in the app: Settings → Delete my account — or on the web, Settings → Delete my account at slushie.studio/home/settings. Your sign-in and your profile photo are deleted at once. The brands you work on, their drafts and posts and what the studio learned belong to the studio you work with and stay with it; to delete a brand and everything about it, the studio owner can ask us. Deleting a brand permanently removes its memory, drafts, credentials and records. You can also export your data or request full deletion by emailing team@slushie.studio — that completes within 30 days. How to delete data that came from a linked platform, including through Meta’s own controls, is set out on our data deletion page.

Who Slushie is for

Slushie is a business tool for people invited to run a studio’s brands. It is not directed at children under 13, and we don’t knowingly collect data from them. If you believe a child has given us data, write to us and we will delete it.

Contact

Questions: team@slushie.studio.