Privacy Policy

katingmi Creator Toolbox ("this site") is operated by an independent developer at katingmi.com. This page explains how we handle your files and data when you use our PDF, media, AI subtitle, and AI language notes tools, and how we use cookies and third-party services. If you do not agree with any part of this policy, please stop using this site.

1. How Your Files Are Processed

This site's PDF merge/split/rotate/sign and media trim/watermark/convert features all run locally in your browser (via JavaScript/WebAssembly); your files themselves are never uploaded to our servers.

The AI Auto Subtitles feature has "cloud-accelerated recognition" enabled by default. In this mode, your audio is uploaded to our transcription service (running on Cloudflare Workers) to be converted to text, and is not retained or used for any other purpose afterward. If you uncheck this option, transcription instead runs entirely on your own device, and your audio never leaves your browser. You are free to choose whether to use cloud acceleration.

The PDF library feature stores the PDFs you add in your browser's local storage (IndexedDB), which exists only on the device and browser you're using — this site cannot read or access that content.

Unlike the local tools above, the AI Language Notes tools (Japanese notes at /nihongo and English notes at /english) must process and store data in the cloud so that you can sync your notes between your phone and computer and use the AI features:

• Notes: The note text, word cards, and grammar cards you enter or generate with AI are stored in this site's database on Cloudflare so they can sync across your devices. Each notebook is identified by a notebook key, and the database stores only a hash of that key. Anyone who has your notebook link or QR code can read and edit that notebook, so please keep it safe. Notes are not end-to-end encrypted; the site operator can technically access them but does not view them or use them for any other purpose.
• Photos: Photos you upload for text recognition are sent to the AI service only at the time of recognition. This site does not store your photos.
• AI processing: When you use the free AI quota provided by this site, your note text and photos are processed by Cloudflare Workers AI. If you enter your own Google Gemini API key in the settings, that content is sent directly from your browser to Google and is subject to Google's terms and privacy policy (content sent through Gemini's free tier may be used by Google to improve its services). Your API key is stored only in your browser and is never sent to this site's server.
• Speaking practice and pronunciation: Microphone speech recognition uses your browser's built-in feature. This site does not receive or store your recordings, but some browsers (such as Chrome) send the audio to the browser vendor's servers for recognition. Conversation text is sent to the AI to generate replies and is not stored. When cloud pronunciation is used, the text to be read aloud is sent to Cloudflare Workers AI for speech synthesis, and the resulting audio may be cached to speed up repeated playback.
• IP address: To count each day's free AI uses, this site converts your IP address into an irreversible hash and records that day's usage count. These records are deleted regularly.
• Browser storage: Your notebook key, settings (including your Gemini API key, if entered), quiz history, and a cached copy of your notes are stored in your browser's local storage (localStorage).
• Deletion: You can delete individual cards or entire notes on the notes page; deleted data is removed from the database. To have an entire notebook deleted, send us the notebook link using the contact details on the About page. Please do not include sensitive personal information, such as ID or phone numbers, in your notes or photos.
• Video and audio study: When you create a study video or audio item, the subtitle text is sent to AI to add punctuation, translate, and pick key words; sentences you select to "explain" during playback are also sent to AI, and the results are saved in your notebook with the subtitles. When you use "AI transcription", the audio is uploaded to this site's recognition service on Cloudflare, converted to text, and not kept afterward (if the cloud fails, recognition runs locally on your device). A local audio file you choose is stored only in this device's browser (IndexedDB) and is not uploaded; if you enter an MP3 link, the link is synced with your notebook.

AI Voiceover (Gemini voices), AI Bible Study, and the Video Editor's AI subtitle proofreading, subtitle translation and YouTube title & description features use a Google Gemini API key that you enter yourself:

• What is sent: the text you ask to process (for example, the script to voice, the selected Bible verses, or subtitle text) is sent directly from your browser to Google. It does not pass through this site's server, and this site does not store it. Your video and audio files are not uploaded by using these features.
• Key storage: your API key is stored only in this device's browser (localStorage), shared by this site's tools, and is never sent to this site's server. You can remove it at any time in "AI settings". AI Bible Study results and your voice preferences are also stored only in your browser.
• Google's terms: processing of this content is subject to Google's terms of service and privacy policy, and usage and costs count against your own Google account. Content sent through Gemini's free tier may be used by Google to improve its services, so please do not submit sensitive personal information.

In addition, the following features use this site's free AI (Cloudflare Workers AI); the content is sent to this site's server for processing and is not kept afterward: "AI edit subtitles by prompt" in the Video Editor (sends subtitle text), cloud voices in Text-to-Speech (sends the text to be read; generated audio may be cached to speed up replays), and AI background generation in the Worship Presenter (sends the description you enter; images are not stored). The Worship Presenter's "Share project" temporarily stores the project file you choose to share in this site's database and deletes it automatically within 24 hours; anyone with the share code can download it during that time.

2. Cookies and Analytics

This site does not show ads and does not use any advertising cookies. To improve the site, we use Google Analytics to understand overall traffic and feature usage (for example, which tools are used most). Google Analytics uses cookies to collect usage data such as browser type and pages visited; we only look at aggregated reports, and the content of files you process is never included.

• If you prefer not to be counted, you can install the Google Analytics Opt-out Browser Add-on , or block and delete cookies in your browser settings.
• To learn how Google uses data, see the Google Partner Sites Policy.
• Sponsorship: If you support us through ECPay, Buy Me a Coffee, Ko-fi, or PayPal, payment is completed on that platform. We never receive your card or other payment details; your data is handled under each platform's own privacy policy.

3. Third-Party Services

Some features on this site fetch public resources (not your file content) from the following third-party services:

• Google Fonts (typefaces), Font Awesome (icons), jsDelivr/unpkg/cdnjs (open-source libraries such as ffmpeg.wasm, Transformers.js, pdf-lib, and iztro).
• Local recognition model files for AI subtitles, downloaded via a proxy on this site's own domain.

4. Data We Do Not Collect

This site does not require account registration and does not collect your name, email address, or other personally identifying information. Our server only generates the general access logs needed to operate the site (such as browser type, pages visited, and timestamps), used for basic traffic statistics and security protection; this data is not combined with other data to identify a specific individual.

Exception: When you use the AI Language Notes tools, the note content you choose to enter is stored in this site's database as described in Section 1. If you choose to sign in, your email address and other account data are stored as described below.

Optional account sign-in (Worship Presenter, Language Notes): Signing in is entirely optional — every feature works without it. If you choose to sign in with a Google account or a passkey, we only obtain and store: your Google account ID, email address, name and profile picture URL (through Google's openid, email and profile permissions — signing in never reads your Google Drive, Gmail or any other data); your passkey's public key (your fingerprint or face data never leaves your device); sign-in records (browser, approximate location, IP address and time, for security); and the data you ask us to sync (Worship Presenter songs, service order, YouTube list, style and layout settings, up to 1 MB; slides, backgrounds and media files are not uploaded). When you link a Language Notes notebook to your account, we also store an encrypted copy of the notebook key (the decryption key is kept in the server configuration, not in the database), so the same notebook opens automatically when you sign in on another computer; you can unlink it at any time in the Language Notes settings. This data is stored in this site's Cloudflare D1 database and is never sold or shared with third parties. You can delete passkeys, sign out of all devices, or delete your account at any time on the "My account" page or in the Worship Presenter sign-in window; deleting your account immediately removes all of the data above (including the notebook link; the notebook content itself is kept and deleted as described in Section 1). Go to "My account"

Picking files from Google Drive (Worship Presenter): This is an optional feature. When you click "Google Drive" in the presenter, we use Google's drive.file permission to access only the files you pick yourself in Google's file picker; we cannot see anything else in your Drive. The selected files are downloaded by your browser directly from Google (Google Slides are converted to PDF by Google) and stay only in this device's browser — they are never uploaded to our servers. The access token is kept only in that page's memory (it expires after about an hour) and is never sent to or stored on our servers. We never modify, delete or share your Drive files. You can revoke access at any time in your Google Account's third-party access settings . Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Changes to This Policy

We may update this privacy policy from time to time; significant changes will be reflected in the "Last updated" date at the top of this page. We recommend checking back periodically.

6. Contact Us

If you have any questions about this privacy policy, please reach us via the contact details on our About page.