Privacy

Last updated: 10 October 2026

AdLibly keeps scripts available on your devices, syncs them through your private iCloud account, and processes speech locally. This policy explains what the app and website handle, where that information goes, and the choices available to you.

Your scripts

Scripts are stored on your device and, when iCloud is available, synchronized through Apple CloudKit in your private iCloud database. This lets your scripts remain available offline and appear on your iPhone and iPad. No AdLibly account is required. Optional Cloud glasses prompting uses a separate encrypted relay described below; it does not replace your iCloud script library.

Speech and microphone access

AdLibly requests microphone and speech-recognition permission only when you ask it to track your place as you speak. Speech processing is performed on-device where supported. AdLibly does not record, retain, upload, or sell your audio.

iPhone Companion

If you pair an iPhone with an iPad, the devices create an encrypted local connection. The iPad sends the script to the paired iPhone, and the iPhone returns only script-position and confidence updates. Audio does not leave the iPhone and the connection does not use an AdLibly server.

Meta Ray-Ban Display

Glasses prompting is optional. Speech recognition stays on the iPhone using its microphone. Audio and recognized transcripts are not sent to the Cloud display relay.

Direct (coming soon): this option is not yet available in the App Store app. In the development version, the iPhone sends the reading view to the paired glasses through Meta’s device connection. This display path does not use AdLibly’s Cloud relay. Meta AI handles glasses pairing and registration and may process information under Meta’s own terms and privacy policy. AdLibly disables the Device Access Toolkit’s optional analytics and crash reporting.

Cloud: the iPhone and glasses connect through a Cloudflare-hosted relay. Your devices encrypt the script, reading-position updates and control messages before transmission. The script encryption key stays on the paired devices. The relay processes encrypted content, random room identifiers and credential hashes to authorize the connection; normal infrastructure connection and security metadata, such as IP addresses, may also be handled by Cloudflare.

The relay retains a temporary encrypted script snapshot until the phone disconnects or the snapshot expires, at most four hours after that phone socket was authorized. It retains credential hashes for future connections, with no automatic pairing expiry. One-time pairing codes expire after five minutes and pairing records are deleted after acknowledgement or expiry. Aggregate service metrics are used to monitor reliability and cost; the reading viewer has no advertising or third-party analytics scripts.

Pairing credentials and the script key are kept in the iPhone Keychain and the glasses Web App’s browser storage. Scripts in the Web App are held in memory, not its offline asset cache. Closing the viewer closes its socket; clearing its browser storage requires pairing again. Unlinking rotates the viewer credential and script key. If the phone is offline, server-side revocation takes effect when the phone next reaches the relay. Unlinking does not immediately erase the retained room authorization record; contact us about deletion requests.

Data collection

The AdLibly app does not use advertising trackers or third-party data brokers. Optional Cloud glasses prompting handles the encrypted content and connection information described above for app functionality. We do not use your scripts or speech for advertising.

Website analytics and consent

This website uses Google Analytics to understand website traffic and performance. The Google tag starts with analytics storage denied and may send limited, cookieless measurement and consent signals to Google. If you choose “Allow analytics,” it may set analytics cookies and process information such as pages viewed, device and browser information, interactions with the site, and approximate location derived from your IP address. Advertising storage, advertising signals, and personalisation remain disabled. You can change your choice at any time through Cookie settings. Google describes how it handles information in its privacy policy.

Retention and deletion

You can delete individual scripts in the app; that deletion syncs through iCloud to your other devices. Removing AdLibly from one device removes its local app data but does not by itself delete scripts already synchronized to iCloud or stored on another device. You can manage AdLibly’s iCloud data through Apple’s iCloud settings. The website’s consent preference can be removed by clearing site data in your browser.

Changes to this policy

If this policy changes materially, we will update this page and its effective date.