JOKER HUB · PRIVACY
Your script, devices and data.
Updated October 5, 2026. Joker Hub is operated by Davis Larsen. This policy covers the Joker Hub iPhone, iPad, Mac and Apple Watch apps and their pages on DavisApps.fun. Questions or privacy requests: davis@davispeps.com.
Apple sign-in and device linking
Sign in with Apple provides an account identifier and authentication credentials so the app can register your Joker Hub account and link your devices. Our account service stores the account identifier, registered device identifiers and names, device public keys and session information. Authentication credentials are stored in the device Keychain; the service stores session token hashes. When an Apple authorization grant is provided during sign-in, the service encrypts and stores it so it can remove the app’s Apple authorization when you delete the account. If Apple permission removal cannot finish immediately, an encrypted revocation record may remain temporarily while the service retries. We do not receive your Apple password. Read Apple’s Sign in with Apple privacy details.
Browser sign-in for the Mac download
The directly downloaded Mac app completes Sign in with Apple through your browser. DavisApps.fun forwards Apple’s response to our account service, and the Mac proves possession of its device key before receiving an app session. This flow uses a separate secure, HTTP-only cookie lasting up to 10 minutes. Temporary sign-in records contain the device name and public key, verification values and the Apple account identifier after authorization. Sign-in attempts expire after 10 minutes, and scheduled cleanup removes the temporary records after a further hour. Apple authorization grants are encrypted and handled as described above.
Private website setup guide
The private setup guide on DavisApps.fun uses Sign in with Apple to verify your account and an approved-person list to control access. Our Cloudflare-hosted setup service stores approved names and email addresses, a linked Apple account identifier after an approved sign-in, personal invitation links supplied for that person, and hashed browser sessions. It uses secure, HTTP-only sign-in cookies (10 minutes) and session cookies (up to 7 days); it does not retain Apple identity tokens or receive your Apple password. Unapproved Apple identities, including unapproved private-relay identities, are denied. Signing out ends that browser session. Approved setup records remain while access is needed; contact Davis to remove them. Website access does not grant developer-team or TestFlight access. Read the website privacy details.
Saved scripts and local projects
When you save a script, its title and exact text are sent to our Cloudflare-hosted account service and stored for your signed-in script library. The app also keeps a local script cache. A project keeps a local snapshot of its selected script, camera/capture details, original video, transcript, review choices and rendered exports. Projects and videos are not uploaded to a cloud project library. Your local app files may be included in Apple device backups, depending on your settings.
Camera, microphone and helper devices
The app asks for camera and microphone permission to record video and audio. When you select another signed-in device as Camera or Teleprompter, the devices communicate directly over an authenticated local connection. Script text, teleprompter settings, camera commands and preview frames travel between the selected devices. A helper camera sends its recorded original to the control device. The developer’s account service does not receive these video originals or preview frames. USB networking may require Personal Hotspot and the system’s Trust/Allow prompts. The Watch companion exchanges remote-control commands and session state with its paired iPhone, which can relay commands to the connected control device. The Watch does not independently sign in or receive your original video.
Local transcription and online wording checks
In the latest editing workflow, Auto edit processes the full original recording on your device before choosing ordered script takes and refining pause cuts. On supported iOS / iPadOS 26 and macOS 26 devices it uses Apple’s on-device SpeechAnalyzer and SpeechTranscriber; other supported devices, or an unavailable Apple model, use a local WhisperKit compatibility model. Short uncertain passages can be rechecked with that local model. Audio and video are not uploaded for this transcription. First use may download speech-model files from Apple or the Argmax model repository hosted by Hugging Face, whose hosting service receives ordinary connection information for the download. See Apple’s on-device speech overview and Hugging Face’s privacy policy. Local transcripts and wording diagnostics are cached in the project’s app storage. When a wording check is needed, limited reference-script and transcript passages are sent over HTTPS to our account service, which forwards that text to TypeSafe AI’s JEV API. This check sends no audio or video, and our backend does not add the text to a persistent transcript library. Returned scores and review decisions are stored locally. If an online wording check is unavailable, the local script edit remains available and uncertain passages are flagged for your review. TypeSafe’s handling and retention are described in its privacy policy. Earlier beta builds used Apple Speech Recognition and could send audio to Apple when on-device recognition was unavailable; see Apple’s speech-recognition privacy information.
Photos, Files and sharing
You choose whether to save a finished video to Photos or a Files folder. Photos access is used for saving to your library. The app stores your export preference and a folder-access bookmark locally for the signed-in account, so it can reuse a folder you authorized. Your exported files remain in the destination you choose and may be synchronized by its provider, such as iCloud. Choosing Share video sends the export to the app or recipient you select under that destination’s privacy practices.
Hosting, beta testing and support
Cloudflare hosts the website and account service and processes ordinary connection information, including IP address and requests, to operate and protect them. See Cloudflare’s privacy policy. Cloudflare adds a Web Analytics script to measure website visits and page-load performance; its Web Analytics documentation explains the collection. The website has no advertising trackers. Joker Hub has no advertising SDK, social-account integration, subscription or payment collection. If you install through TestFlight, Apple separately collects crash and usage information and shares it with the developer; feedback or screenshots you submit may also be shared. We use that information to diagnose and improve the app under Apple’s TestFlight privacy terms. If you email support, we receive the address, message and attachments you send and retain the correspondence as needed to respond and resolve the issue.
Service security and model downloads
To prevent abuse and keep editing available, our account service stores a count and time window for automatic-edit requests, tied to your Joker Hub account. These account-based counters are removed when you delete that cloud account. For sign-in rate limits, it also stores a hash of the connecting IP address. This is a coded, pseudonymous identifier, not an anonymous record. Those sign-in keys are stored without Joker account, device-registration or script identifiers; they have no automatic deletion schedule and are not removed by account deletion. Unexpected service failures create retained logs with an error category. Our log message does not contain scripts, recordings or authentication tokens; the hosting service may also process connection metadata under its policy. When a local speech model is downloaded, Hugging Face receives the connection’s IP address and technical download-use information. Its privacy policy permits retaining that information and using it for operational research and analysis. We do not send your recordings, scripts or Joker account/device-registration identifiers with that model download. Provider retention follows the linked policies.
Retention, deletion and your choices
Saved scripts and account/device records remain in our account service until you delete the applicable script or account. Signing out or uninstalling does not by itself delete cloud scripts or the account. In Settings, open Joker Hub account and choose Delete Joker Hub account. Deletion removes your Joker Hub cloud account, saved scripts, settings and registered devices, plus the requesting device’s copied scripts, project/script/review metadata, export preferences and account credentials. Before confirming, choose whether to Keep video files on this device: enabled keeps original and rendered video files inside Joker Hub; disabled removes those app-owned videos on that device. Hub King account data and videos already exported to Photos or Files are not removed. Finish or recover any recording or import before deleting the account. If local cleanup cannot finish, the app shows a warning; remaining local files need removal on that device. Account deletion does not remotely erase app files on your other devices: offline devices may retain cached scripts, project metadata and video copies, and reconnecting ends access to the deleted cloud account without guaranteeing removal of every local copy. Remove those copies locally if desired. Delete a script from Scripts, or a project from Projects, to remove that item in the app; deleting a library script does not remove project snapshots. Copies in Photos, Files, helper devices or backups remain under your control and the relevant provider’s practices. You can manage permissions in Apple device settings and choose whether to run automatic editing or share a file. Contact davis@davispeps.com for account-data access or support-correspondence deletion requests, or if in-app deletion is unavailable. We update this page when the app’s data handling changes.