MeTube Privacy Policy                                      Page 1

   Last updated: January 30, 2026

   MeTube is a non-algorithmic YouTube client for Apple platforms. This
   policy explains what data the MeTube service collects and how it is
   used. MeTube uses YouTube API Services (including the YouTube Data
   API and the YouTube embedded player).

   YouTube and Google Policies
   - YouTube Terms of Service: https://www.youtube.com/t/terms
   - Google Privacy Policy: https://www.google.com/policies/privacy

   Data We Collect
   - Apple Sign in identifier (Apple subject ID), a pseudonymous string
     used to create and authenticate your account. We do not store your
     Apple email address.
   - Optional display name if Apple provides it during your first sign-in.
   - Channel IDs you choose to follow (including imports from YouTube).
   - Video metadata for followed channels (video ID, title, channel ID,
     publish time, duration, URL) stored to build your feed.
   - Account timestamps (such as account creation and last sign-in).
   - Watch status and playback position stored in your private iCloud
     database via CloudKit to resume playback and sync across devices (not
     stored on our servers).
   - Standard request data handled by our hosting provider (such as IP
     address and user agent) for security and operations.

   YouTube API Data We Access
   - Subscription lists you choose to import ("Sync from YouTube").
   - Channel search results and channel details you request.
   - Video details and statistics for videos you view.
   - Ratings and comment actions you submit (if you use those features).

   How We Use Data
   - Authenticate your account and keep you signed in.
   - Sync your followed channels and provide your feed (no recommendations
     or profiling).
   - Remember watch status and playback position across devices.
   - Operate, secure, and improve the service.

   Data Protection
   - We use HTTPS/TLS to encrypt data in transit between the app, our
     service, and third-party providers.
   - Data stored in Cloudflare D1 is encrypted at rest and in transit by
     Cloudflare.
   - Watch status and playback position stored in your private iCloud
     database are protected by Apple's iCloud security, including
     encryption in transit and at rest.
   - Access to production systems is limited to authorized operators for
     service operations and support.

   Device Storage and Cookies
   - The app stores data on your device, such as sign-in tokens, settings,
     cached thumbnails, and offline preferences (Keychain/UserDefaults).
   - The embedded YouTube player and Google sign-in flows use web views
     and may store or access cookies or similar technologies on your
     device or browser.

   Sharing
   - We do not sell your data and we do not use it for advertising or
     tracking.
   - We share data only with service providers needed to run the service
     (for example, Cloudflare) and with Apple for Sign in with Apple and
     iCloud/CloudKit sync.
   - We may disclose information if required by law.

   Retention
   - Account data is retained until you delete your account.
   - Public video metadata cached for followed channels may be retained
     to serve other users.
   - Service logs are retained only as long as needed for security and
     operations.

   Your Choices
   - You can delete your account from within the app, which removes your
     account and followed channels from the service.
   - Disconnect YouTube in the app to stop new API access.
   - Revoke MeTube's access to your YouTube data at:
     https://myaccount.google.com/connections?filters=3,4&hl=en
   - You can remove local data by signing out or uninstalling the app.

   Contact
   - andreas@pardeike.net