Privacy Policy

1. Who is responsible

Ivan Schoeman trading as NutCap is the responsible party for the personal information NutCap controls. This policy covers the NutCap website, Windows app and optional phone-camera companion. Send privacy requests to owner@nutcap.net or use these business contact details:

2. Camera images and your creative work

The Windows app processes camera images locally to track head movement and place live eye and mouth images onto your chosen character. NutCap’s website does not receive those camera frames for face tracking. This feature does not use your face to identify or authenticate you.

If you choose the phone-camera feature, your phone sends its camera stream directly to your computer through an encrypted WebRTC connection. NutCap’s server exchanges temporary connection information to establish that connection; camera frames do not pass through that server. Connection information may include network addresses and device connection details.

Recordings, photos, imported models and app settings are stored on your computer when you use those features. NutCap does not automatically upload those creative files to an account library. Output you choose to send to OBS, Twitch or another application is handled by that service under its own settings and policies.

Tutorial videos use YouTube. Opening a tutorial watch page or playing a video connects your browser to YouTube, which may process your network address and browser information under its own policies. Tutorial thumbnails are hosted by NutCap.

3. Information used by online services

• Accounts: account identifier, email address, name and an optional profile-photo URL, supplied by you and our sign-in provider, Clerk. We also keep account status, role and profile-refresh timestamps.
• Purchases and access: order references, asset licences, plan grants, refund or revocation status, related timestamps, and any Creator-interest preference you submit. We receive transaction confirmations from the payment provider; NutCap does not store full payment-card numbers or security codes.
• Connected app devices: a device name, account association, sign-in or pairing records, securely hashed access tokens, and creation, last-use and revocation times.
• Phone-camera pairing: temporary pairing identifiers, securely hashed secrets, connection messages, expiry and activity times. Rate-limiting records use hashed network-address information to reduce abuse.
• Website and security information: network address, browser or device information, request times and technical errors may be processed by our hosting and authentication providers to serve and protect the website.
• Support: the contact information, messages and files you choose to send us. Avoid including sensitive information that is not necessary to resolve your request.

Optional integrations such as Twitch operate only when you connect them. The desktop app uses the connection credentials and event information needed for that integration. You can disconnect it through the app or revoke access with the provider.

4. Why we use information

We use information to create and secure accounts, connect the app, provide licences and downloads, operate optional features, process purchases and refunds, answer support requests, prevent abuse and meet legal or accounting obligations.

Depending on the activity and applicable law, we rely on performing a contract or steps you request before a contract, compliance with legal obligations, consent for optional activities where required, or legitimate interests in operating and securing the service while respecting your rights. We do not sell personal information or use your camera images to train AI models.

Account and transaction information is necessary if you want online accounts or paid delivery; without it we cannot provide those functions. A profile photo, optional integrations and Creator-interest submissions are voluntary. You can use the Free app’s local features without creating an account. Granting camera access is your choice, but camera-based features cannot work without it.

5. Providers and international processing

We use Clerk for authentication and profiles, and Cloudflare for website hosting, the account database, file storage and network protection. Email providers process messages you send to our support address. Providers receive information needed to perform their roles and may also process some data under their own legal responsibilities.

When an approved paid checkout offer is available, PayPal processes payment and related fraud checks. PayPal receives the billing information needed for the transaction under its Privacy Statement. NutCap receives order, subscription and payment references and verification results, but does not receive full card details. Sandbox checkout is for internal testing; live paid sales remain closed until launch approval. Earlier purchase and payment records may still identify the provider that processed them.

Service providers may process information outside South Africa, including in the United States or other countries where they operate. Where required, we use appropriate contractual or other lawful safeguards for cross-border processing, including protections required by POPIA. Contact us for information about safeguards relevant to your data.

We may disclose information when legally required, to respond to a lawful request, or where reasonably necessary to protect rights and security. We will assess the request and limit disclosure to what is necessary.

6. Cookies and device storage

The website uses cookies and similar storage needed for sign-in, security and session continuity. Your theme preference is stored in your browser. The app stores local settings and connection credentials needed for the features you choose.

We do not currently deploy advertising or cross-site marketing trackers. Hosting and authentication services still process operational and security information as described above. You can clear browser storage or block cookies in your browser, but this may interrupt sign-in and reset preferences. If we introduce non-essential tracking, we will update this policy and seek consent where required.

7. Retention and security

We keep account information while it is needed to operate your account and provide your library. Purchase, refund and accounting records may need to remain after account deletion to meet legal obligations or resolve disputes. Support records are retained only as needed to handle the matter and related obligations.

Sign-in, pairing and phone-camera connection records have time-limited validity. Expiry prevents reuse; expired records may remain until storage cleanup. We retain security information only as reasonably needed to investigate abuse, protect the service and meet legal requirements.

We use access controls, protected hosting, encrypted transport and hashed app-access secrets to reduce the risk of unauthorised access. No system can guarantee absolute security. You can revoke connected app devices through your account, sign out, and protect your email and sign-in credentials.

8. Your choices and rights

Depending on applicable law, you can ask to access your personal information, correct it, delete information we no longer need, object to processing, restrict processing, obtain a portable copy where that right applies, or withdraw consent for processing based on consent. Withdrawing consent does not affect earlier lawful processing.

Email owner@nutcap.net to exercise a right or request account deletion. We may need proportionate identity verification to protect your account. We will respond within applicable legal time limits and explain any lawful reason for retaining information or declining a request. Deleting an account may prevent us from delivering its online library or connected services; we will explain those consequences.

You may complain to South Africa’s Information Regulator or the relevant supervisory authority where you live. You do not have to contact us first.

9. Children

NutCap’s online accounts and purchases are not directed at children under 18. A parent or guardian should manage any account or purchase used by a child and supervise camera and streaming features. If you believe a child has provided personal information without appropriate authority, contact us so we can investigate and take appropriate action.

10. Updates

We will update this page when our practices change and revise the date above. For material changes we will provide an appropriate notice through the website or your account contact details, and obtain consent where required.