Privacy Policy

Introduction

This privacy policy explains what data is collected when you visit our website or use our app, and how we handle it. Our goal is to collect as little personal data as possible – and that shows: this policy is short, and we've done our best to keep it easy to understand. If you still have questions, feel free to reach out to us at any time using the contact details in our legal notice.

Who is responsible?

The party responsible for processing all data collected on Tubsy is:

fat elephant - Isabella Di Ponio-Voit
Blocksbergstr. 38a
66955 Pirmasens, Germany

For any question about this Privacy Policy or the data we hold about you, contact us at the email address above or via our contact form.

What data do we collect?

When you just browse the website

When you visit our website, the usual technical data is collected automatically by our web server: your IP address, the URL you accessed, and possibly the referring website. Your browser also transmits information about itself, such as the browser type and preferred language settings. This data is stored in server log files solely for the purpose of diagnosing errors or investigating potential attacks. Log files are automatically deleted after a few days.

Cookies

To recognize you when you return to our website, your browser stores a cookie. We do not store any personal data in it – only your preferred language and an anonymous session ID that allows our servers to associate returning visits with your session.

When you create an account

To register, you can either provide your email address and a password of your choice, or sign in via Google, Apple, or Amazon. When using one of these sign-in options, the respective provider transfers certain profile data to us; we only store your email address and a note indicating which service you used to authenticate. Your password is stored in strongly encrypted form – no one, including us, can read it.

Child profiles and content approvals

Tubsy allows parents to approve YouTube content – channels, playlists, and videos – for their children. If you have more than one child, you can create a separate profile for each to manage approvals independently. Profile details such as name and profile picture are optional; you may enter any information you like. This data is used solely to assign your approvals to the correct profiles.

Our App (Android, Android TV & iOS)

About the app

Tubsy is available as an app for Android smartphones, Android TV devices, and iPhones and iPads. The app complements the website and offers the same core features: parents can manage approved YouTube content, and children can watch approved content directly on their device. A Tubsy account is required to use the app. The same principles apply as for the website: we only collect data that is necessary to operate the service.

Permissions

The app only requires access to the internet. This permission is necessary for the app to communicate with our servers and load YouTube content. No other permissions – such as camera, microphone, or location – are required.

Local data storage

The app stores certain data locally on your device to provide a smooth experience. This includes your login token (so you don't have to log in every time you open the app), as well as settings and a temporary content cache. This data is stored in the private app area of your device, which is not accessible to other apps. You can delete it at any time by clearing the app data in your device's system settings or by uninstalling the app.

Communication with our servers

The app communicates with our own servers to load and sync your approvals and profile settings. Our servers also retrieve content from YouTube via Google's YouTube Data API. All connections are encrypted via HTTPS. For more information about external services, see the "Third-party service providers" section below.

How do we protect your data?

Protecting your data is important to us. That's why: • your data is stored exclusively on servers located within the EU, • the website and app use HTTPS – meaning your data is encrypted in transit, • sensitive data such as your password is stored in encrypted form, • all systems we use – web server, database, and other components – are kept up to date with the latest security standards.

Your right to access

You have the right to request and review all data we hold about you at any time. Simply contact us using the details provided in the legal notice.

Deleting your data

You can delete your account at any time in the settings of the website or the app. This will permanently remove all associated data from our servers. Restoration is not possible after deletion. Any data stored locally on your device by the app will be automatically deleted when you uninstall it.

Third-party service providers

To operate Tubsy, we use and share data with the following external services. We only share what is technically necessary to provide the Service — we never sell your data.

YouTube Data API

We use the YouTube Data API, operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to retrieve and keep up to date the channel, playlist, and video information for the content you approve. Technical request data such as your IP address is transmitted to Google in the process. Google's use of this data is governed by the Google Privacy Policy.

Social sign-in

When you sign in via Google, Apple, or Amazon, the respective provider transmits your email address and, where applicable, your name to us for authentication purposes.

In-app purchases

When you purchase a subscription, payment is processed through the respective store (Apple App Store, Google Play, Amazon Appstore). The store operator handles your payment data independently. Privacy policies: Apple Privacy Policy · Google Privacy Policy · Amazon Privacy Notice

Data transfers to the USA

Google, Apple, and Amazon are based in the United States. Data transfers are carried out on the basis of the EU-U.S. Data Privacy Framework (European Commission decision of 10 July 2023).