Privacy Policy

1. Information We Collect

We collect information you provide directly, information generated as you use the Service, and limited technical information from your device. Specifically:

• Account data: your name, email address, and a securely hashed password. We never store your password in plain text.

• Authentication data: if you sign in with Google, we receive basic profile information (such as your name, email, and avatar) from Google to create and authenticate your account.

• Learning & usage data: the topics you enter, courses you generate, skill levels and durations you select, and progress data such as which lessons you have watched, your watch time in seconds, and lesson completion status.

• Billing identifiers: when you subscribe, our payment providers assign customer, subscription, and plan identifiers that we store to manage your subscription. We do not collect or store your full payment-card details.

• Analytics data: product-usage and funnel events (for example, when a course generation is requested or completed, a subscription is activated, or a usage limit is reached) that help us understand and improve the Service.

• Technical data: information such as your IP address, device and browser type, and cookie identifiers, collected automatically when you access the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and curate courses — including expanding your topic into a curriculum, searching YouTube, and assembling and tracking your courses.

• Track your learning progress and let you resume where you left off across devices.

• Enforce free-tier limits and manage your subscription, billing, and account status.

• Maintain the security and integrity of the Service, including detecting, preventing, and responding to fraud, abuse, and rate-limit or quota circumvention.

• Communicate with you about your account, security matters, and important changes to the Service. Where required, marketing communications are sent only with an option to opt out.

• Analyze usage and improve the reliability, quality, and features of the Service.

3. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in and to operate the Service. In particular, we set an essential, httpOnly refresh-token cookie that maintains your authenticated session; this cookie is necessary for the Service to function and cannot be disabled while you remain signed in.

When a lesson is played, the embedded YouTube player and other third parties may set their own cookies or similar technologies, which are governed by their respective privacy policies rather than this one.

4. Third-Party Services & Data Sharing

This application uses YouTube API Services. By using Tubeversity you also agree to be bound by the YouTube Terms of Service and acknowledge the Google Privacy Policy.

We share information with a limited set of service providers only as needed to operate the Service. We do not sell your personal data. Our key providers include:

• YouTube Data API and Google — used to search for and embed videos. Your use of embedded YouTube content is also governed by Google’s Privacy Policy and YouTube’s Terms of Service.

• OpenAI — the topic and preferences you enter are sent to our AI provider to generate a course outline. We do not send your name, email, or password for this purpose.

• Paystack — used to process subscription payments securely. It handles your payment-card details directly under its own privacy policy.

• Infrastructure and hosting providers — used to run, store, and secure the Service on our behalf under appropriate confidentiality obligations.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of Tubeversity, our users, or the public. You can review Google's Privacy Policy and YouTube's Terms of Service for details on how they handle your data.

5. Payment Data

All payments are processed by our PCI-compliant payment providers. We never see, collect, or store your full payment-card number, CVC, or similar sensitive card details. We retain only the identifiers necessary to associate a subscription with your account and to manage renewals and cancellations.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you close your account, or on a valid deletion request, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention and financial record-keeping.

7. Your Rights & Choices

Depending on your location, you may have rights under laws such as the EU/UK General Data Protection Regulation (GDPR) and the Nigeria Data Protection Regulation (NDPR). These may include the right to:

• Access the personal information we hold about you and request a copy.

• Correct inaccurate or incomplete information.

• Request deletion of your personal information, subject to legal exceptions.

• Request a portable export of your data in a commonly used format.

• Object to or restrict certain processing, and opt out of non-essential communications.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request, and we will respond within the timeframes required by applicable law.

8. Data Security

We take reasonable technical and organizational measures to protect your information. These include hashing passwords with a modern algorithm, encrypting data in transit, and rate-limiting sensitive endpoints such as authentication. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

9. Children's Privacy

The Service is not directed to children under 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

10. International Data Transfers

We and our service providers may process and store your information in countries other than the one in which you live. Where we transfer personal information across borders, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

12. Contact

Questions or requests about this Privacy Policy or your personal information? Contact us at taiye@soterialearning.com.