← Back to home

Privacy Policy

Last updated: 21 July 2026

1. Data controller

The data controller for personal data processed by YouShortsCoach is:

2. Data we collect

  • Account data: your email address and, if you sign in with Google, your Google display name and profile picture.
  • YouTube channel data (via YouTube Data API, read-only): your channel ID, title, thumbnail, subscriber, view, and video counts, and metadata about your public videos and Shorts (title, description, thumbnail, duration, publish date, view/like/comment counts).
  • OAuth tokens: encrypted access and refresh tokens required to call the YouTube Data API on your behalf.
  • Usage data: coaching reviews you request and the AI responses generated for your account.
  • Billing data: for paid plans, our payment processor handles card details; we only receive subscription status and invoice metadata.

3. Google API Services User Data Policy

YouShortsCoach’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

  • We only use YouTube and Google user data to provide user-facing features of YouShortsCoach (channel and Shorts analysis, coaching, and insights).
  • We do not sell YouTube or Google user data.
  • We do not use YouTube or Google user data for advertising.
  • We do not allow humans to read your Google user data, except (a) with your explicit consent, (b) as necessary for security (e.g. investigating abuse), (c) to comply with applicable law, or (d) in aggregated, anonymized form for internal operations.
  • We do not transfer YouTube or Google user data to third parties except as required to provide or improve user-facing features, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.

4. Legal bases (GDPR)

  • Contract (Art. 6(1)(b) GDPR): to provide the service you signed up for.
  • Consent (Art. 6(1)(a) GDPR): for connecting your YouTube account through Google OAuth.
  • Legitimate interests (Art. 6(1)(f) GDPR): to keep the service secure and to improve it.
  • Legal obligation (Art. 6(1)(c) GDPR): for accounting and tax records related to paid subscriptions.

5. Sub-processors

We share personal data only with the following sub-processors:

  • Supabase (database, authentication, storage) — data hosted in the EU.
  • Google LLC — YouTube Data API and Google OAuth.
  • Lovable AI Gateway / underlying model providers — to generate AI coaching responses. Prompts contain your channel and Shorts metadata but not your Google credentials.
  • Paddle — payment processing and EU VAT handling for paid subscriptions (when enabled).
  • Cloudflare — hosting and edge delivery.

6. International transfers

Where personal data is transferred outside the European Economic Area, we rely on the European Commission’s Standard Contractual Clauses or equivalent safeguards provided by our sub-processors.

7. Retention

  • Account and YouTube channel data: kept while your account is active.
  • OAuth tokens: kept until you disconnect your channel or delete your account, then deleted within 30 days.
  • Billing records: kept for the period required by Finnish accounting law (currently 6 years).

8. Your rights

Under the GDPR you have the right to:

  • access, rectify, or delete your personal data;
  • restrict or object to processing;
  • data portability;
  • withdraw consent at any time;
  • lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

You can revoke YouShortsCoach’s access to your Google/YouTube account at any time via https://myaccount.google.com/permissions. To exercise any of the rights above, email support@youshortscoach.com.

9. Security

We use industry-standard measures including TLS in transit, encryption at rest, row-level security in our database, and least-privilege access to protect your data.

10. Children

YouShortsCoach is not directed at children under 16 and we do not knowingly collect their personal data.

11. Changes

We will notify you of material changes to this policy through the app or by email at least 14 days before they take effect.

12. Contact

Actually Finland · Business ID 3203290-4 · Tampere, Finland · support@youshortscoach.com