Privacy Policy

Account information. When you sign in, Kew receives basic identity information from your sign-in provider (Google, Apple, or email). This may include your email address and a profile identifier. You can also set a username and upload a profile photo.

YouTube connection data. If you connect your YouTube account, Kew stores OAuth access and refresh tokens that allow it to read your subscriptions and playlists on your behalf. Kew also stores the Google account email associated with your YouTube connection.

Queue and activity data. Kew stores the videos you add to your queue, your watch history within the app, and skip activity. This is the core data needed to operate the service.

Technical data. Kew uses Supabase for authentication and database storage. Supabase may collect basic technical information such as IP addresses and device metadata as part of its standard operation. See Supabase's privacy policy for details.

Kew uses the information it collects solely to operate the service:

• To authenticate you and maintain your account
• To sync your YouTube subscriptions and playlists into the Browse tab
• To save and restore your queue across devices and platforms
• To track your watch history within the app
• To generate aggregated, anonymized viewing statistics that may be shared with content creators upon request. These reports contain no personally identifiable information and cannot be used to identify individual users.

Kew does not sell your data, serve you ads, or share your information with third parties for marketing purposes.

Kew uses the YouTube API Services to access your YouTube account data. By using Kew and connecting your YouTube account, you are also subject to Google's Privacy Policy.

Kew uses the https://www.googleapis.com/auth/youtube.force-ssl scope, which allows Kew to: read your YouTube subscriptions and channel content for the Browse tab; and perform actions on your behalf via the Interact feature, including liking videos, posting comments, and managing your subscriptions. All Interact actions are explicitly initiated by you. Kew does not upload videos, manage your channel, or access any data unrelated to these functions.

Data protection. Kew takes the following measures to protect the YouTube data it accesses:

• All data transmitted between Kew and Google's APIs is encrypted in transit using HTTPS/TLS.
• OAuth access and refresh tokens are stored in Supabase's encrypted database (AES-256 encryption at rest) and are never logged or exposed in client-side code.
• Tokens are used solely to perform the functions described in this policy and are not shared with any third party.
• Access to the database where tokens are stored is restricted to Kew's backend service only, behind authenticated API calls.
• Kew does not retain raw YouTube API responses beyond what is necessary to display them to you in the app.

You can revoke Kew's access to your Google account at any time by visiting your Google account permissions page. Revoking access will disconnect your YouTube account from Kew and delete your stored tokens.

Kew will never sell your personal data or use it to serve you advertisements. Kew has no advertising business model and no relationships with advertisers.

If you see ads while using Kew, they are served by YouTube's embedded video player - not by Kew. Those ads are governed by YouTube's own policies and are outside Kew's control.

Kew relies on the following third-party services to operate:

• Supabase - authentication, database, and file storage (privacy policy)
• Google / YouTube - YouTube Data API v3 for subscriptions and playlists (privacy policy)
• Apple - Sign in with Apple authentication (privacy policy)
• Railway - backend API hosting (privacy policy)
• Netlify - web app hosting (privacy policy)
• Expo / EAS - mobile app infrastructure (privacy policy)

Your account data, queue, and YouTube tokens are retained as long as your account exists. If you request account deletion, your data will be removed from Kew's database. You can also disconnect your YouTube account from within the app at any time, which removes your stored YouTube tokens.

To request account deletion, email privacy@yourkew.app. Requests are typically handled within 30 days.

Kew is not directed at children under the age of 13. If you believe a child under 13 has created an account, please contact us and we will delete it.

If this policy changes materially, the effective date above will be updated. Continued use of Kew after changes constitutes acceptance of the updated policy.

Questions about this policy? Email privacy@yourkew.app.