Privacy Policy

Effective date: 2025-06-19

SubTube ("we", "us", "the App") is a mobile application that provides AI-generated summaries of YouTube videos from your subscriptions. This Privacy Policy explains how we collect, use, store and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR), the Google API Services User Data Policy, and applicable laws.

1. Data Controller

The data controller is the operator of SubTube, reachable at [email protected].

2. Data We Collect

2.1 Account Data

When you sign in via Google, we receive:

• Your name and email address (from your Google profile)
• A Google OAuth access token and refresh token (to access YouTube Data API on your behalf)

We do not receive or store your Google password.

2.2 YouTube Data

With your explicit consent (OAuth scope youtube.readonly), we access:

• Your YouTube channel subscriptions (channel names, IDs, thumbnails)
• Public metadata of recent videos from those channels (title, thumbnail, publish date, view/like counts, description)

We do not access your private/unlisted videos, playlists, watch history, comments, or any data beyond the read-only subscription scope.

2.3 AI-Generated Summaries

Video descriptions and publicly available metadata are sent to an AI language model (LLM) to generate text summaries. The summaries are cached in our database linked to your account.

2.4 User Settings

Preferences you configure: interface language, summary length, email digest settings, playback speed.

2.5 Email Address for Digest

If you enable the email digest feature, we store the email address you provide to send periodic summary digests. This may be your Google login email or a different address you specify.

3. Legal Basis for Processing (GDPR Art. 6)

• Consent (Art. 6(1)(a)) — accessing your YouTube subscriptions via Google OAuth.
• Contract performance (Art. 6(1)(b)) — providing the core service (summaries, playback).
• Legitimate interest (Art. 6(1)(f)) — improving service quality, preventing abuse.

4. How We Use Your Data

• Fetch and display your YouTube subscriptions and recent videos
• Generate and cache AI text summaries of video content
• Provide text-to-speech playback of summaries
• Send email digests of recent summaries (if enabled by you)
• Remember your preferences across sessions

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Sharing & Third-Party Services

6. Google API Services — Limited Use Disclosure

SubTube's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we:

• Only request scopes necessary for core functionality (youtube.readonly)
• Do not use Google user data for advertising, market research, or profiling
• Do not sell or transfer Google user data to third parties except as needed to provide or improve user-facing features
• Do not use Google user data to build user profiles unrelated to the App's functionality
• Allow users to revoke access at any time via Google Account Permissions

7. Data Storage & Security

• Data is stored in a secure database hosted on cloud infrastructure
• OAuth tokens are stored encrypted at rest
• All communication uses HTTPS/TLS
• Access to production systems is restricted to authorized administrators

8. Data Retention

• Account data: retained while your account is active. Deleted within 30 days of account deletion request.
• Cached videos & summaries: retained while your account is active; automatically refreshed based on your time range settings.
• OAuth tokens: revoked and deleted upon logout or account deletion.

9. Your Rights (GDPR Art. 15–22)

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time without affecting prior processing (Art. 7(3))

To exercise any right, contact us at [email protected]. We will respond within 30 days.

10. Revoking Google Access

You can revoke SubTube's access to your Google account at any time:

• Visit https://myaccount.google.com/permissions
• Find "SubTube" and click "Remove Access"

11. Children's Privacy

SubTube is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us to have it deleted.

12. Changes to This Policy

We may update this policy. Material changes will be communicated via the App or email. Continued use after changes constitutes acceptance.

13. Contact

For privacy questions or data requests: [email protected]

© 2026 SubTube. All rights reserved.