Privacy Policy

1. Introduction

YTDemia ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Authentication provider information (Google, if used)

Usage Data

We automatically collect:

• Course progress and completion data
• Notes you create (stored locally or synced to cloud)
• AI summary requests and usage counts

Technical Data

• Browser type and version
• Device information
• IP address (anonymized)

3. How We Use Your Information

We use your data to:

• Provide and maintain the Service
• Track your learning progress across devices
• Generate AI-powered summaries
• Enforce usage limits (e.g., 3 AI summaries/day for free users)
• Improve our Service based on usage patterns
• Communicate important updates

4. Data Storage

Local Storage

By default, your courses, notes, and progress are stored locally in your browser using IndexedDB. This data remains on your device and is not transmitted to our servers unless you create an account.

Cloud Storage

When you create an account, data may be synced to our cloud infrastructure powered by Supabase. Supabase provides enterprise-grade security and is SOC 2 Type II compliant.

5. Third-Party Services

We use the following third-party services:

• Supabase: Authentication and cloud data storage
• Google Gemini: AI-powered video summaries
• YouTube: Video embeds and metadata

These services have their own privacy policies. Video content is not stored by us; we only save references (YouTube video IDs).

6. Data Retention

We retain your data for as long as your account is active. Local data persists until you clear your browser storage. You can request data deletion at any time.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt out of non-essential data collection

8. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to track the activity on our Service and store certain information.

• Essential Cookies: Necessary for the website to function (e.g., authentication).
• Analytics Cookies: We use Microsoft Clarity to understand how you use and interact with our website to improve it. Microsoft Clarity captures user interactions such as mouse clicks, scrolls, and window resizes.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

9. GDPR (General Data Protection Regulation)

If you are from the European Economic Area (EEA), you have the right to:

• Access, update, or delete the information we have on you.
• Object to the processing of your Personal Data.
• Request transfer of your Personal Data.

10. CCPA (California Consumer Privacy Act)

If you are a California resident, you have the right to learn what data we collect about you, ask to delete your data and not to sell (share) it. We do not sell your personal data.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

10. Security

We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Secure authentication via Supabase
• Regular security audits

11. Changes to This Policy

We may update this policy periodically. We will notify you of significant changes by posting a notice on the Service.

12. Contact

For privacy-related questions, please contact us through our website or at the email associated with itzmrz.