Affilio Privacy Policy
Last updated: October 2026.
Affilio (“we”, “the app”), operated by Moro Labs LLC, is a tool for TikTok Shop creators to track products,
generate marketing scripts, and edit videos on your device. This policy explains
what we collect, why, and your rights over it.
You do not need an account to use Affilio. Nothing here asks
for your name, email address or any other personal detail before you can use the
app or subscribe. Creating an account is optional and is described below.
Information we collect
- Device account (no sign-up required). The first time you
open Affilio it creates an anonymous identifier so your products, scripts and
settings can be saved. It contains no name, email address or other contact
detail, we cannot use it to contact you, and it belongs to this installation of
the app. Settings shows you the first characters of it — that is what support
uses to find your data if you ever write to us.
- Optional account. If you choose to create an account — so
you can use Affilio, your subscription and your work on your other devices — we
then also store your email address and the user ID from your sign-in provider
(email/password, Google, or Apple). Creating an account upgrades the same
identifier, so nothing you have already made is moved, copied or lost. If you
use Sign in with Apple’s private-relay email, we only ever see the relay
address.
- Content you create. Products you add, captions, marketing
scripts, saved video styles, and brand-brief text you enter are stored under
your identifier so they persist. Until you create an account this
content belongs to this installation of the app: deleting the app removes the
only key to it, and it cannot be recovered by us or by you. Creating an
account is what makes it recoverable and available on your other devices.
- Creator profile (optional). You may tell the app an age
range, a gender, and a short free-text description of yourself and what you
sell. Every field is optional and can be left empty or cleared. It is used only
to shape the wording of the scripts the app generates for you; it is stored with
your other content, is never sold, and is not used for advertising.
- Product data. When you save a TikTok Shop product link we
fetch public product details (name, image, price, description). This public
product data is stored in a shared catalog to avoid re-fetching the same
product; it is not personal to you.
- TikTok Showcase (optional). This import is currently switched off in the app. If you tap “Sync my TikTok
Showcase”, you give us your TikTok username and we read the public list of
products on that TikTok profile (its Showcase): each product’s name, picture,
link, price and star rating. Use it only for your own account. The products are
added to your product list like ones you add yourself; your TikTok username is
stored with your settings so the list can be kept up to date, and you can stop
syncing at any time in Settings → TikTok Showcase. To limit how often the sync
runs, we keep a count of today’s syncs with a scrambled (one-way hashed) form of
the username, which is deleted automatically within 2 days. We do not collect
anything else about that TikTok account or anyone else’s.
- Purchase status. If you subscribe, we and our payments
processor (RevenueCat) record which plan you hold. Payment itself is handled
entirely by Apple — we never see your card details.
Processing on your device
By default your videos are edited on your device. Speech-to-text
transcription runs locally using an on-device model, and edited videos are stored
only on your device unless you choose to save or share them. One
exception: when you use the B-roll or image-check features, the app
takes a small number of still frames (single pictures, not video or audio) from
the clips you chose and sends them, over an encrypted connection, to our server,
which passes them to an AI provider (DeepSeek, or Google Gemini if we have it
configured) to describe what is in the picture, for example to match B-roll to
what you say or to check an image. The frames are looked at to answer that one
request. We do not keep them, and we do not use them to train AI models. If a
frame shows you or anyone else, that picture is sent.
On-device model downloads
Some features need a speech or language model that is too large to ship inside
the app. When you turn such a feature on, the app downloads the model file from our
server or a public model host. The download request, like any web request,
reveals your IP address and device type to that server; it carries none of your
content, and the model then runs entirely on your device. You can remove
downloaded models by turning the feature off, and they are deleted when you use
Settings → Delete account or delete the app.
Cloud processing of uploads (only when you choose it)
Where the app offers cloud processing and you choose to use it, the video you
select is uploaded to our Firebase Storage bucket so that our processing computer
can edit it. The upload is transient: our processing computer
downloads the file, deletes it from cloud storage, processes it, and returns the
result to you. As a backstop, anything still in that upload area is automatically
deleted after 2 days. Uploaded videos are used only to produce
the edit you asked for — never to train AI, never shared, never used in
marketing. If you never choose cloud processing, your video never leaves your
device for editing.
Smart cuts learning from your edits
Smart cuts is Affilio's automatic cut engine. By default, each
time you save an edited video, we receive the words it heard and when they were
said, what smart cuts decided to cut or keep and why, the AI review's notes on
those cuts, the changes you made afterward, and the app and phone system version —
never your video, your audio, your photos or your saved product
details. The words are what you say in the video, so they include a product's
name if you say it. Using Affilio means you agree to this (see our Terms of
Use). The first time you save an edited video, the app tells you this before
anything is sent. To have what was already sent deleted, use Settings → Report a
problem in the app and include your Account ID (shown in Settings). Deleting your
account stops it and erases what was sent.
Everything sent this way is deleted automatically within 90 days regardless,
and it is used only to make smart cuts — including our on-device auto-cut
model — more accurate. It is never shared, never sold, and never used in
marketing.
Third parties that process data for us
- Firebase and Google Cloud (Google) — issue the anonymous
identifier, hold any optional account, store your content, and run our servers.
Our servers also keep a small record per account of how many AI requests it has
made each month (a request count and a token total) and whether a free trial
was started, to stop abuse; these are erased when you delete your account.
- DeepSeek, OpenRouter and Moonshot AI — generate marketing
scripts and polish transcripts. Whichever provider is available handles the
request; what is sent is product text you supplied and, when you polish a
script, the transcript text of your video. Your video and audio files
themselves are never uploaded to these providers (only the still frames
described under “Processing on your device”, and only to the vision provider).
- Google (Gemini) — when configured, it may be the provider
that looks at the still frames from your clips described under “Processing on
your device” (otherwise DeepSeek does). It receives the frames and a short
instruction, and nothing that identifies you.
- Moonshot AI — additionally extracts the text of
brand-brief images or PDFs you add. Those files are sent for extraction and
deleted on a best-effort basis after processing; a short-lived residual copy
may persist on their systems.
- AI features are on by default and covered by our Terms. You can turn them
off at any time in Settings → AI features; nothing is then sent to the AI
providers above.
- Apify — for paid accounts, also fetches public TikTok Shop
product details (such as the description) from a link you provide.
- ScrapeCreators — when a paid account adds a TikTok Shop
link, the link and its product identifier are sent to ScrapeCreators to read
the product’s public details (title, price, images, description, options,
specs, rating and review count) and short public buyer quotes, with no
reviewer identity. The result is cached in our database for up to 30 days
(the cache keeps up to 10 quotes; the app shows at most 3) and shared with
other users who add the same product, as a shared product cache. Daily limits
apply per account and overall, tracked with a per-account counter that is
deleted automatically after about 2 days. It receives the link and product identifier and nothing else
about you. (The optional TikTok Showcase import described above, which would
send the TikTok username you give us to ScrapeCreators, is currently switched
off.)
- Stripe — processes payments made on our website, and
stores the billing details you enter there. We never see your card number.
- RevenueCat — manages your subscription status. It
receives your anonymous account identifier and purchase receipts from Apple
or Google; it is told to delete that record when you delete your account.
- Resend — delivers programme emails, such as telling an
affiliate they earned a commission. It receives the recipient’s email address
and the message content.
Website cookies
Our website sets one first-party cookie of its own, affilo_ref,
only when you arrive through an affiliate’s referral link. It stores that
affiliate’s referral code for 30 days so that, if you subscribe, the affiliate
who referred you is credited. It contains no personal information about you and
is not used for advertising or tracking across other sites. You can delete it at
any time in your browser settings; the only effect is that the referral is not
credited. When you pay on our website, Stripe’s checkout page sets its own cookies
needed for payment and fraud prevention, governed by
Stripe’s privacy policy.
How we use your information
To operate the app’s features you request, keep your content available to you
(and, if you create an account, on your other devices), provide support, process
subscriptions, and diagnose problems. We do not sell your personal information,
and we do not use your content for advertising or profiling. We do not use your
content to train AI models, except the smart-cut notes described
above — words, timings, cut decisions and your corrections, as described
above — which we use to improve smart cuts, including our
on-device auto-cut model.
Your rights and choices
- Delete everything. Settings → Delete account works whether
or not you created an account, and needs no password when you have not. It
permanently removes your identifier, products, scripts, settings, and any
problem reports you filed together with their attachments. Shared public product
data (not personal) is retained; any best-effort residual copies on Moonshot’s
side age out per their retention. An active subscription must be cancelled
separately in the App Store (Apple ID → Subscriptions) or in Google Play
(Payments & subscriptions → Subscriptions).
- Problem reports. If you send one, any screenshots or
recordings you choose to attach are used only to reproduce and fix that problem
— never to train AI, never shared, never used in marketing — and are deleted
within 90 days regardless. You can remove them sooner yourself: Report a problem
→ “Delete the reports I’ve sent” erases every report you filed and every file
attached to it, without touching anything else. You can also quote the reference
shown after you send a report and ask us to delete it.
- Smart-cut notes. You can ask us to delete what was sent at
any time: use Settings → Report a problem with your Account ID (shown in
Settings). Deleting your account stops it and erases them. It holds words,
timings, cut decisions, the AI review's notes, your own corrections and the app
and system version only — never your video, audio, photos
or product details — and is deleted within 90 days regardless.
- Access & export. Contact us for a copy of your data.
If you have no account, include the Account ID shown in Settings so we can find
it.
- Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA),
you may have additional rights to access, correct, or erase your data.
Children
Affilio is for adults conducting commerce and is not directed to children under
13. We do not knowingly collect data from children.
Retention
Your content is kept until you delete it or use Settings → Delete account.
Problem reports and their attachments are deleted automatically within 90 days.
Smart-cut notes are deleted automatically within 90 days, or immediately when
you delete your account or ask us to through Settings → Report a problem.
Cloud-processing uploads are deleted as soon as they are processed and in any
case within 2 days. The daily TikTok Showcase sync count is deleted within 2 days;
your TikTok username stays with your settings until you choose “Stop syncing” or
delete your account. Payment and commission records are kept as long as tax and
accounting law requires.
Contact
Questions or requests: email support@affilio.net or use Settings → Report a problem in the Affilio app.
Postal address: Moro Labs LLC, c/o Northwest Registered Agent LLC, 7901 4th St N, STE 300, St. Petersburg, FL 33702, USA