Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains what information (“we”, “us”) collects when you use the Service, how we use it, and the choices you have. We collect as little as we can get away with: no ad trackers, no selling of data.

1. Information we collect

Information you give us

• Account details — email address, display name, and (if you use email sign-in) a password handled by Firebase Authentication. Signing in with Google shares your Google account email and profile photo with us.
• Your library — favorites, folders, and saved channels you create in the app.

Information collected automatically

• Usage counters — we count your daily downloads to enforce plan limits. For signed-in users this is keyed to your account; for guests it is keyed to a one-way hash of your IP address (we do not store the raw IP), and counters are only meaningful for the current day.
• Technical logs — our hosting providers (Vercel, Railway) keep standard server logs (IP address, user agent, timestamps) for security and debugging.

Payment information

Subscriptions are processed by Stripe. Your card number never touches our servers — we store only your Stripe customer ID, subscription ID, and subscription status. Stripe’s handling of your data is described in the Stripe Privacy Policy.

2. How we use information

• to operate the Service (accounts, your library, search, downloads);
• to enforce plan limits and prevent abuse;
• to process subscription payments and manage billing;
• to respond to support requests and legal notices;
• to keep the Service secure.

We do not sell your personal information or use it for third-party advertising.

3. Third-party services

The Service is built on the following processors, each with its own privacy policy:

• Google / Firebase (authentication and database) and YouTube API Services (search and video metadata). Use of YouTube data is subject to the Google Privacy Policy.
• Stripe — payments.
• Vercel and Railway — hosting infrastructure.

4. Cookies and local storage

We use browser storage strictly for the Service to function: keeping you signed in (Firebase Auth tokens), remembering preferences such as download quality, and short-lived state like a pending upgrade. We do not use advertising or cross-site tracking cookies.

5. Data retention and deletion

• Account data and your library are kept until you delete your account.
• Deleting your account (Settings → danger zone) removes your profile, favorites, folders, and saved channels from our database.
• Billing records tied to your Stripe customer are retained as required for tax and accounting purposes.
• Guest usage counters expire naturally — they are only read for the current day.

6. Your rights

Depending on where you live (e.g., GDPR in the EU/UK, CCPA in California), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Most of this you can do directly in the app; for anything else, email and we will respond within 30 days.

7. Children

The Service is not directed to children under 13 (or the applicable age of digital consent) and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

8. Security

Data is encrypted in transit (HTTPS everywhere). Database access is restricted by per-user security rules, and server credentials are held only in our hosting providers’ secret managers. No method of storage is 100% secure, but we design so that a single compromised layer exposes as little as possible.

9. Changes to this policy

We will post any changes here and update the “Last updated” date. Material changes will be announced on the Service or by email.

10. Contact

Privacy questions or requests: . See also our Terms of Service and DMCA Policy.