Your camera stays yours.

The short version

• The camera feed never leaves your phone. All sign translation happens on-device.
• We collect your email if you join the waitlist, and anonymized product analytics (page views, button clicks) to know what to fix.
• We do not sell data, share it with advertisers, or train third-party models on it.
• You can request a copy of everything we have on you, or ask us to delete it, by emailing hello@gestura.app.

If you only read this section, you have the gist.

Who runs this

Gestura is operated by Marin Mikulec, an independent studio based in Croatia. For privacy questions, reach a human at hello@gestura.app.

For the purposes of the EU General Data Protection Regulation (GDPR), Gestura is the data controller for personal data described below.

What we collect, and what we do not

Camera and video

• What we collect: nothing. Your camera feed is processed entirely on the device by an on-device model that ships with the app.
• What leaves your phone: nothing. No frames, no transcripts, no telemetry derived from your camera content.
• Why it matters: sign language is identity. Treating it like ad inventory would be wrong, and we built the product so it is impossible.

Email address (waitlist)

• What we collect: the email you submit when you join the waitlist.
• Why we collect it: so we can send you a beta invite and occasional, low-volume updates from the team.
• Where it lives: in our hosting provider's database, in the European Union.
• How long we keep it: until you ask us to delete it, or until you have been inactive for two years after launch.

Product analytics

• What we collect: page views, button clicks, the page you came from, your country (derived from IP, not stored as an IP), browser type, and approximate device.
• What we do not collect: your IP address, anything from your camera, any sign language content, anything you type into the app outside the waitlist email.
• Why we collect it: to know which parts of the site are useful, which features people try, and where the experience breaks.
• Tool we use: PostHog Cloud EU. Data is stored in the European Union.

Learning progress (after launch)

• What we collect: which chapters you completed, which signs gave you trouble, your streak count.
• Why we collect it: to sync your progress across your devices if you choose to sign in, and to make the learning path better.
• Opt out: you can turn this off in the app and use Gestura completely locally.

What we do not do

• We do not sell personal data. Not to advertisers, not to brokers, not to anyone.
• We do not run third-party advertising on Gestura.
• We do not use your video, transcripts, or any in-app content to train external AI models. We only train our own on data we have explicit consent for, primarily from Deaf community partners who chose to be part of the build.
• We do not track you across the web. We do not embed Facebook pixels, ad SDKs, or session replay tools that record your screen.

Cookies

The Gestura website uses a small number of cookies:

• Essential: required to serve the page and remember you accepted the cookie notice.
• Analytics: an anonymous identifier from PostHog so we do not double-count the same visitor across pages. No advertising cookies.

You can clear cookies at any time from your browser settings. Doing so will not break the site.

Your rights under GDPR

If you live in the European Economic Area, the UK, or Switzerland, you have the following rights at no cost:

• Access: ask us for a copy of the data we hold on you.
• Rectification: ask us to fix data that is wrong.
• Erasure: ask us to delete your data. We will, unless we are legally required to keep some of it (which is rare for what we collect).
• Portability: ask us to send your data to you, or to another service, in a machine-readable format.
• Restriction and objection: ask us to stop or limit how we use your data.
• Withdraw consent: if we are processing your data based on consent (e.g. the waitlist), you can withdraw it any time.

To exercise any of these rights, email hello@gestura.app. We will respond within thirty days, usually sooner. If you are not happy with our response, you can complain to your local data protection authority. In Croatia, that is the Croatian Personal Data Protection Agency (AZOP).

Children

Gestura is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us and we will delete it.

Security

We use industry-standard transport security (HTTPS) for everything that leaves a device. The on-device model means the most sensitive thing about you, your sign language, never leaves your device in the first place. No security model is perfect, but the surface we expose is intentionally small.

Changes to this policy

We will update this page when our practices change. Material changes get a banner on the homepage and an email to waitlist members. The "last updated" date at the top of this page always reflects the most recent version.

Contact

• Email: hello@gestura.app
• Subject line: Privacy
• Response time: within one business day, in most cases.