Privacy Policy

Last updated: July 18, 2026

Mixtube (“we”, “the app”) is an online video player for iOS and Android. This policy describes what information the apps may process and why. We do not sell your personal data.

Information we process

• Account data. If you sign in with Sign in with Apple or Google (via our backend), we may store identifiers needed for authentication and profile display (such as a user id, display name, email address when provided, and avatar URL) through our cloud provider (Supabase). Apple may share a private relay email address with us if you choose Hide My Email.
• Library & preferences. Playlists, likes, history, followed channels, language, and night-mode settings may be stored on device and, when you are signed in, synced to your account.
• Google user data (optional). When you choose Google sign-in and grant access, we request the OAuth scope https://www.googleapis.com/auth/youtube.readonly (plus standard OpenID sign-in scopes such as openid, email, and profile). This allows the app to view Google user data you authorize—such as subscriptions, playlists, and liked videos linked to that Google account—so we can display them inside Mixtube. We do not post, upload, delete, or otherwise modify that content on your behalf. Apple-only accounts do not receive these Google OAuth tokens unless you also link Google access where offered.
• Advertising (iOS). We use Google AdMob to show ads (for example app-open, interstitial, and user-initiated rewarded ads). Rewarded ads may unlock an app feature for the current day after Google reports that the reward was earned. AdMob may process device advertising identifiers and related signals to deliver and measure ads. Where required, we show a consent message (Google User Messaging Platform). On iOS, App Tracking Transparency may ask permission before personalized tracking. You can open Ad Privacy Choices in the app Settings when that option is available. See also Google’s Privacy Policy and AdMob help.
• Analytics. We use Firebase Analytics to understand aggregated app usage (for example feature engagement and session metrics) so we can improve the product. This data is processed by Google Firebase under their terms and privacy policy.
• Diagnostics. Crash and performance reports (Firebase Crashlytics) may be collected in release builds to improve stability. You can limit diagnostic sharing through your device OS settings where available.

How we use information

To provide playback, library sync, sign-in, optional Google-linked library browsing you authorize, product analytics, advertising (where enabled), and to fix bugs. We do not sell personal information. Library content and Google user data you authorize for You browsing are not sold; advertising is handled by AdMob under its own policies and your consent choices.

Sharing, transfer, and disclosure of Google user data

Limited Google user data may be shared with or processed by the following parties, solely to operate Mixtube:

• Google APIs. When you grant access, the app sends your OAuth access token from the device to Google’s APIs (including the API associated with the youtube.readonly scope) to retrieve the read-only Google user data described above. Google processes that request under Google’s terms and privacy policies.
• Supabase (our backend). Basic Google account profile information used for authentication (for example user id, display name, email when provided, avatar URL) may be stored in Supabase so we can create and sync your Mixtube account. We do not upload your Google OAuth access token used for that read-only API access to Supabase or other servers; that token is kept on your device only.
• Google Firebase (Analytics & Crashlytics). Aggregated usage and crash diagnostics may be processed by Firebase. These services are not used to sell your subscriptions, playlists, or liked-video contents to third parties.
• Google AdMob (ads). When ads are shown, Google AdMob and its advertising partners may receive device and advertising identifiers and related signals under your consent and platform settings. This is separate from your Google YouTube OAuth library data.
• Apple. If you use Sign in with Apple or install via the App Store, Apple may process account or device data under Apple’s policies. That flow is separate from Google OAuth unless you also connect Google.

We do not sell Google user data. We do not share Google user data with advertisers, data brokers, or unrelated third parties for their independent use. We do not transfer Google user data to other apps or services except as described in this section, or when required by law (for example a valid legal request).

You may revoke Mixtube’s access to your Google account at any time in your Google Account permissions settings, and/or by signing out or deleting your account in the app.

Data protection mechanisms

We apply the following safeguards to personal and Google user data:

• Encryption in transit. Network communication with our backend (Supabase), Google APIs, and Firebase uses HTTPS / TLS.
• Least privilege. Optional Google library access is limited to the read-only youtube.readonly scope. We do not request write or manage scopes for your Google-linked channel content.
• Token handling. Google OAuth access tokens used for those API calls are stored only on the user’s device (local app storage such as iOS UserDefaults for the signed-in session) and are not synced to our servers. Tokens are cleared when you sign out or delete the account where applicable.
• Access control. Account-linked library data in Supabase is scoped to the authenticated user. Service credentials for backend administration are not embedded in the client for unrestricted user-data access.
• Retention and deletion. Local data remains on your device until you clear app data or uninstall. You can delete your Mixtube account in the app (where available) or contact us; we then remove account-linked data from our systems according to our retention windows. Revoking Google access stops further API use with that grant.

Third parties

The app relies on third-party services such as Apple (Sign in with Apple / App Store), Google (sign-in / Google APIs / Firebase Analytics & Crashlytics), and Supabase (backend). Their policies apply to data they process on their platforms. Streamed media and metadata come from upstream online video services and remain subject to those services’ terms. See also the sharing section above for how Google user data is disclosed to these processors.

Data retention & deletion

Local data remains on your device until you clear app data or uninstall. Account-linked library data can be removed by using in-app account deletion (where available) or by contacting us. Backups on our servers are purged according to our operational retention windows after a valid deletion request.

Children

Mixtube is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children.

Contact

Privacy questions: diasjayanthasumith@gmail.com. Support: www.ytlite.cc/support.html.