Privacy policy
Updated 16 September 2026
Who we are
MagicFolder is operated by Splitlight Ltd (company 16318475, England and Wales), the controller for personal data used to run the service. Registered office: Silverstream House, 45 Fitzroy Street, London, England, W1T 6EB. Contact support@splitlight.co.uk for privacy questions.
What we process
We process your account name, email, account identifier and authentication information; folder names, prompts, uploaded photos and documents, generated results and file metadata; and credit, storage and job-usage records. Our hosting and authentication providers also process connection information such as IP addresses and technical logs. Information you send to support or through TestFlight is processed to respond to your feedback.
Why we use it
We use account and content data to provide the service you request, including signing you in, storing files and performing transformations (performance of our contract with you). We use limited operational and security information to keep the service reliable, prevent abuse and investigate failures (our legitimate interests). We may retain records to meet legal obligations. Optional device access is controlled by your choices in iOS.
Where your files go
This is an online service: selected files are uploaded, not processed solely on your phone. Clerk handles authentication; Convex stores account records and files; Vercel hosts the web application and API; Inngest coordinates processing. Folder instructions may be sent to OpenAI for interpretation. Depending on the operation and selected model, prompts and files may be processed by Google Gemini, Replicate, FLORA or CloudConvert. Standard image operations run on our server infrastructure. Provider processing and retention depend on the operation and their applicable terms; we do not promise that every third-party model has identical retention or training policies. Avoid uploading confidential or sensitive material during the beta.
Diagnostics and payments
The website and server use Sentry for error and performance reporting when configured, with automatic default personal-data collection disabled and website session replay disabled. This iOS beta does not include advertising, cross-app tracking, Sentry or optional Clerk SDK telemetry. Apple separately processes TestFlight installation, crash and feedback information under its own privacy terms. Purchases are unavailable in this iOS beta. Any future purchases offered inside the iOS app will use Apple in-app purchase. The existing website uses Stripe for web billing; web billing records are separate from this purchase-free iOS build.
Device storage and permissions
The app keeps authentication credentials in the iOS Keychain and sign-in preferences in app storage. The system Photos and Files pickers give the app the items you select. Opening a result downloads a temporary local copy for preview and sharing; copies you explicitly save or share remain in the destination you choose. We do not request access to contacts, location or your entire photo library.
Retention and deletion
Original files, results and folder records remain in your account until you delete them, subject to plan limits and any version-history cleanup. Account deletion starts deletion of associated service records and files; background cleanup and provider backups may take additional time. Operational, security, support and billing records may be retained where needed for their purpose or legal obligations. You can delete individual items, use Delete account in app Settings or website Settings, or contact support@splitlight.co.uk. Deletion affects the same account on both platforms. Copies you saved or shared outside MagicFolder are outside our control.
Sharing and international processing
We use service providers to deliver the functions above and may disclose information where legally required or to protect the service. We do not sell your uploaded content or use it for advertising. Providers may process information outside the UK. Where required, transfers need an appropriate legal mechanism, such as an adequacy decision or approved contractual safeguards. Contact us for details of the arrangements relevant to your data.
Your rights
Depending on applicable law, you can ask for access, correction, deletion, restriction or portability of your personal data and object to processing based on legitimate interests. You can withdraw consent for any processing that relies on it without affecting earlier lawful processing. We may need to verify your identity. Contact support@splitlight.co.uk. You can complain to the UK Information Commissioner’s Office at ico.org.uk or your local data-protection authority.
Children and updates
MagicFolder is a general-purpose file tool and this private beta is intended for adult testers. If a child has supplied personal data, contact us so we can investigate. We will update this policy as the service changes and communicate material changes where required.