Privacy Policy

Updated 21 October 2026

This policy explains what SubFly ("we") collects when you use this website, why, and the choices you have.

What we collect

Account details - your email address, optional name, and a salted hash of your password (never the password itself).
Your subtitle files and translations - the files you upload, the lines parsed from them, and the translated lines we produce, so you can review and download them.
API keys you add - your Gemini API keys, encrypted with AES-256-GCM. They are never shown again after you save them and are never sent back to your browser.
Usage records - which jobs ran, how many lines were translated, and which model was used, so we can show progress, enforce plan limits, and keep the service reliable.
Billing records - if you subscribe, your plan, subscription status, and payment references from our payment processor. We never see or store your card, UPI, or bank details - those go directly to the processor.

How we use it

To run translations you ask for, show you your history, enforce your plan's limits, send service emails (for example password resets and receipts), prevent abuse, and fix problems. We do not sell your data and we do not use your subtitles to train AI models.

Google (Gemini API) - the dialogue text of the lines being translated, and the prompt that goes with it, is sent to Google to produce the translation. On the free plan this uses your own API key under Google's terms; on paid plans it may use a key we provide.
Payment processors - Stripe and/or Razorpay process payments for subscriptions.
Email delivery - our email provider delivers account and billing emails.
Google AdSense - on public pages that show ads, Google receives the information its ads need, such as your IP address and its cookies, under Google's privacy policy.

Each of these processes data only to provide its service to us.

How long we keep it

Projects, files, and translations stay until you delete them; deleting a project deletes its files and translations. If you ask us to delete your account, we delete your data except records we must keep for tax or legal reasons (such as invoices).

Cookies

We use one essential cookie that keeps you signed in. When advertising is switched on, Google sets its own cookies on the public pages that show ads (see below). See the cookie policy for details.

Advertising

Some public pages, such as our guides, may show ads served by Google AdSense. Ads never appear inside your account, and never to subscribers on paid plans.

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to SubFly or other websites.
Google's use of advertising cookies lets it and its partners serve ads to you based on your visits to this site and/or other sites on the internet.
You can opt out of personalised advertising in Google's My Ad Center, and opt out of some other vendors' use of cookies for personalised advertising at aboutads.info.
Read how Google uses information from sites that use its services.

Where the law requires it - for example in the European Economic Area, the UK and Switzerland - you're asked for consent before personalised ads are shown, through a consent message provided by Google. You can change your choice at any time from the privacy link that message adds to the page.

Security

Connections are encrypted in transit, API keys are encrypted at rest, and access to admin tools is restricted and logged.

Your choices

You can view and delete your projects and translations at any time. To request a copy of your data or deletion of your account, email our support address.

Children

SubFly is not intended for children under 13, and we don't knowingly collect their data.

Changes

If we change this policy in a meaningful way, we'll update this page and, where appropriate, let you know by email.

Contact

Questions about privacy: our support address.