Privacy Policy

Last updated: June 4, 2026

1. Who We Are

Unwatched (unwatched.app) is a web application that generates AI-powered summaries of YouTube videos. It is operated by an individual and offered as a paid subscription service. You can reach us via our contact form.

2. Data We Collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture from Google's OAuth service. We use your email address to authenticate you and manage your account.

YouTube data

When you submit a YouTube video or playlist URL, we fetch the video's publicly available transcript via the YouTube transcript API. If you connect your YouTube account, we may also access your YouTube playlists to enable features such as liking videos or reordering playlist items.

Usage data

We store a record of each video you have summarised, including the video ID, title, channel, duration, the AI model used, token counts, and estimated cost. This data is used to display your activity history and to manage service costs.

Billing data

Payment and billing information is handled exclusively by Lemon Squeezy, our payment processor. We do not store your payment card details. We may receive billing-related data such as your subscription status and transaction history from Lemon Squeezy.

3. How We Use Your Data

• To authenticate you and manage your subscription.
• To generate and cache AI summaries of YouTube videos.
• To display your personal activity history.
• To interact with YouTube on your behalf when you connect your account.

We do not use your data for advertising, profiling, or any purpose beyond operating the service for you.

4. Third-Party Services

Unwatched relies on the following third-party services, each with their own privacy policies:

• Google OAuth & YouTube Data API — for sign-in and YouTube access.
• Google Gemini API — video transcripts are sent to Gemini for summarisation.
• DeepSeek API — transcripts may also be sent to DeepSeek as a fallback model.
• Supabase — our database provider, where transcripts, summaries, and user activity are stored.
• Lemon Squeezy — our payment processor and Merchant of Record, who handles all billing and payment data. See their Privacy Policy.

Transcripts and summaries are transmitted to AI providers solely to generate the requested summary. They are not used by the operator for any other purpose.

5. Disclosure of Google User Data

Data obtained through Google APIs (including Google OAuth and the YouTube Data API) is subject to the Google API Services User Data Policy, including the Limited Use requirements. We disclose Google user data only as described below:

• Supabase — your Google account identifiers (user ID, email), OAuth credentials (encrypted), and YouTube activity records are stored in our Supabase-hosted database solely to operate the service.
• Google Gemini API — YouTube video transcripts (public video content fetched via YouTube) are sent to Google Gemini to generate AI summaries. No personal account information is included in these requests.
• DeepSeek API — if Gemini is unavailable, transcripts may be sent to DeepSeek under the same conditions. No personal account information is included.
• Lemon Squeezy — your email address (obtained from Google OAuth) is associated with your subscription record at Lemon Squeezy solely for billing and subscription management.

We do not sell, rent, or share Google user data with any other parties, nor do we use it for advertising or profiling.

6. Data Retention

Cached transcripts and summaries are automatically deleted after a configurable retention period (typically 90 days). Activity records associated with deleted summaries are also removed. You may request deletion of your data at any time by contacting us.

7. Security

OAuth credentials are encrypted at rest using symmetric encryption before storage. Session tokens are stored in encrypted, signed cookies. We apply reasonable technical measures to protect your data, but no system is completely secure.

8. Your Rights (GDPR)

If you are located in the European Economic Area, you have the right to access, correct, or delete your personal data, as well as the right to restrict or object to its processing. To exercise these rights, use our contact form. You also have the right to lodge a complaint with your local data protection authority.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the app or by email.

10. Contact

For questions about this privacy policy, use our contact form.