Privacy Policy

1. Introduction

Tubely ("we", "our", or "us") is a parental control video application that allows parents to curate safe YouTube content for their children. This Privacy Policy explains how we collect, use, and protect information when you use our mobile application and related services.

2. Information We Collect

Account Information: When you create an account, we collect your name, email address, and an encrypted password. If you sign in with Google or Apple, we receive your name and email from those providers.

Child Profiles: Parents create child profiles with a display name only. We do not collect personal information directly from children.

Usage Data:We collect watch history, favorites, and viewing duration to provide parents with analytics about their children's viewing habits. This data is associated with child profiles, not with identifiable children.

Video Library: We store references to YouTube videos and channels that parents add to their library. We do not host or stream video content.

3. How We Use Information

• To create and manage parent accounts and child profiles
• To maintain the curated video library
• To provide viewing analytics and watch history to parents
• To enforce parental controls (PIN protection, video limits)
• To manage subscriptions and process payments via RevenueCat
• To improve our services and fix bugs

4. Children's Privacy (COPPA Compliance)

Tubely is designed to be set up and managed by parents. We do not knowingly collect personal information from children under 13. Child profiles contain only a display name chosen by the parent. All content curation and account management is performed by the parent. Video playback is handled directly by YouTube's embedded player on the device.

5. Data Sharing

We do not sell, trade, or rent your personal information. We share data only with:

• YouTube API: To search and display video content (subject to Google's Privacy Policy)
• RevenueCat: To manage subscriptions and in-app purchases
• Google/Apple Sign-In: Authentication only — we receive name and email
• Railway: Our backend hosting provider (data stored in PostgreSQL)

6. Data Security

We implement industry-standard security measures including:

• Passwords and PINs are hashed with bcrypt
• JWT-based authentication with token rotation
• HTTPS for all data transmission
• Secure storage for tokens on device

7. Data Retention

Account data is retained as long as your account is active. You can request deletion of your account and all associated data by contacting us. Child profile data and watch history are deleted when the profile or account is removed.

8. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and all associated data
• Export your data

9. Subscriptions and Payments

Payments are processed through Apple App Store and Google Play Store via RevenueCat. We do not store credit card or payment information. Payment processing is subject to the respective store's privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the app or via email.

11. Contact Us

If you have questions about this Privacy Policy, contact us at:

Email: privacy@tubelyapp.com
Website: tubely.app