RoastMyTube (“we”, “the app”) generates humorous AI roasts based on your public YouTube activity. This policy explains exactly what data we touch, why, where it goes, and how you delete it.
1. Data we collect
- Google account basics: name, email address, and profile photo — provided by Google when you sign in.
- YouTube read-only data (scope youtube.readonly): channel statistics, subscription names, liked video titles, and playlist names. We request read-only access — the app cannot post, delete, like, or modify anything on your account.
- Roast reports: the AI-generated roast text, score, and language you chose, linked to your account so you can view history.
- OAuth tokens: Google access and refresh tokens, stored so the app can fetch YouTube data without asking you to log in every time.
- Takeout uploads (optional): if you use God-mode, your Takeout JSON is parsed entirely in your browser. Only the small aggregate (top search terms, top channels, counts) is sent to our server. Your raw history file never leaves your device.
2. How we use it
Your YouTube data is used for one purpose only: generating the roast report you asked for. We do not profile you for advertising, sell data, or use it to train models.
3. Who else sees your data
- Groq (primary AI provider) and Google Gemini (fallback) — your YouTube summary is sent to them as the roast prompt. See their respective privacy policies.
- Neon (Postgres host) and Vercel (app host) — infrastructure only.
- We share data with no one else, for no other reason.
4. Data retention & deletion
- Delete roast history anytime from Profile → Danger Zone.
- Disconnect YouTube anytime from Profile → Danger Zone. This revokes our Google access token and deletes the stored account credentials — next login asks for consent again.
- For full account deletion (user + sessions + all reports), email us at sainrahul374@gmail.com and we will delete everything within 7 days.
5. Security
All traffic runs over HTTPS. API keys and OAuth secrets live only in server-side environment variables — never in client code. Databases are hosted on managed, access-controlled infrastructure (Neon). No system is perfect; if you suspect an issue, email us immediately.
6. Children
The app is not directed at children under 13, and we do not knowingly collect their data.
7. Changes to this policy
If this policy changes materially, we will update the “Last updated” date above. Continued use of the app means you accept the updated policy.
8. Contact
Rahul Sain — sainrahul374@gmail.com