Privacy Policy for TuneTube

Last updated: July 2026

Welcome to TuneTube ("we," "our," or "us"). TuneTube operates strictly as a custom visual client interface layer (an overlay framework) designed for the Amazon Fire TV platform. We respect your privacy and are committed to protecting it. This Privacy Policy explains how data is handled when you use our application.

1. Data Collection and Usage

TuneTube is built on a framework of strict data minimization.

• What We Collect: When you sign in with your Google account, we collect and store the following information on our backend server:
  • Your Google user ID (a stable identifier)
  • Your email address
  • Your display name
  • Your profile picture URL
  • An OAuth refresh token (to maintain your YouTube API session)
• Why We Collect It: This data is necessary to:
  • Authenticate your identity across app sessions
  • Maintain a persistent YouTube API connection without requiring repeated sign-in
  • Retrieve your personal YouTube playlists and recommendations
• What We DO NOT Collect: We do not collect search histories, viewing habits, tracking profiles, or any other behavioral data. We do not collect or store YouTube video content on our servers.

2. Third-Party Integrations and Account Authentication

Because TuneTube serves as a custom overlay client for YouTube services, your interaction relies on official, secure Google channels:

• Google OAuth Handshakes: If you choose to authenticate your profile, logins are processed through the Google OAuth 2.0 Device Flow. TuneTube never sees, receives, or stores your Google/YouTube password or master credentials.
• Official YouTube APIs: Search results, playlists, and track metadata are requested in real-time using the official YouTube Data API v3 and rendered securely via the official YouTube IFrame Player API.

3. Real-Time Content Handling

Media content itself is handled in a volatile, session-based manner:

• Dynamic Loading: Your media selections and search results are loaded dynamically via secure HTTP streams during your active session.
• No Media Caching or Ripping: No offline local storage or "ripping" of audio/video files takes place on your Fire TV device. YouTube content is streamed in real time and is not permanently stored by TuneTube.

4. Data Transfer to Third Parties

• No Third-Party Sharing: We do not sell, rent, trade, or distribute your Google user data to any third-party advertisers, analytics networks, or data brokers.
• Upstream Providers: Because media components are delivered natively from public YouTube endpoints, your viewing activity is subject to Google's standard Google Privacy Policy and YouTube Terms of Service.

5. Google User Data — Limited Use

TuneTube's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Data Collected:
  • Google user ID (sub claim) — for user identification
  • Email address — for user account management
  • Display name — for backend record
  • Profile picture URL — for backend record
  • OAuth refresh token — stored securely to maintain YouTube API access
  • Read-only access to user's YouTube playlists (via youtube.readonly scope)
• Purpose Limitation: Google user data is used solely to:
  1. Authenticate the user via Google OAuth Device Flow
  2. Retrieve the user's YouTube playlists and content for display within the app
  3. Maintain an active session across app restarts
• No Transfer: We do not transfer your Google user data to any third party, analytics provider, advertising network, or data broker.
• No AI Training: User data is never used for machine learning, AI training, or automated decision-making.
• No Selling: We never sell user data.

Users may revoke TuneTube's access to their Google data at any time by visiting Google Account Permissions. Upon revocation, stored refresh tokens are no longer usable, and the user's TuneTube session will require re-authentication.

6. Data Retention and Deletion

• OAuth Tokens: Refresh tokens are stored on the backend server for the duration of your TuneTube account session. When you revoke TuneTube's access via your Google Account Permissions or use the "Sign Out" feature within the app, your stored refresh tokens are deleted.
• User Profile: Your email, name, and profile picture are stored as part of your account record and are deleted when you sign out or revoke access (or upon a deletion request).
• YouTube Content Data: No YouTube video content, search history, or playlist data is stored on our servers. All content is streamed in real-time during your active session.
• Deletion Request: To request deletion of all your data, sign out of the app (which triggers deletion of tokens) or contact us at support.tunetube@gmail.com.

7. Security Practices

• OAuth refresh tokens are stored on our backend and encrypted at rest.
• Google access tokens are short-lived and are not persisted on the backend.
• Your Google password is never received or stored by TuneTube.
• Communication with our API uses HTTPS in production environments.

8. Media Rendering and Tracking

Ad Preservation: TuneTube does not filter out or block advertisements. All native, programmatic advertisements delivered by YouTube are handled natively inside the player environment. We do not generate independent tracking identifiers for these ad loops.

9. Children's Privacy

TuneTube is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. All upstream content filtering, parental controls, and age restrictions set up on your native YouTube or Google Account are strictly respected and applied by our interface.

10. Contact Information

If you have any questions or security concerns regarding this Privacy Policy or our Fire TV client architecture, please contact our team directly at: support.tunetube@gmail.com