Privacy Policy
Last Updated: February 1, 2026
1. Introduction
Welcome to Recapfy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service (collectively, the "Service").
Recapfy is operated by Pedro Teixeira, an individual/sole proprietor based in Portugal, European Union. For privacy inquiries, please contact us at privacy@recapfy.ai.
By using Recapfy, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.
2. Information We Collect
We collect several types of information from and about users of our Service:
2.1 Account Information
When you create an account, we collect:
•
Password (encrypted and securely stored)
2.2 Google and YouTube Data
When you connect your YouTube account via Google OAuth, we access and collect:
•
Your YouTube account email
•
List of YouTube channels you subscribe to (channel names, IDs, thumbnails)
•
Video metadata from your subscribed channels (video titles, descriptions, thumbnails, upload dates, duration)
•
OAuth access and refresh tokens (securely stored)
We only request the minimum permissions necessary to provide our Service (youtube.readonly scope). We do not access your YouTube viewing history, liked videos, or any data beyond your public subscriptions and video metadata from those subscribed channels.
2.3 Generated Content
We store content generated through your use of the Service:
•
AI-generated video summaries (retained for 30 days after creation, then automatically deleted)
•
Summary generation history
•
Timestamps of when summaries were created
•
Summary status (pending, completed, failed)
2.4 Subscription and Usage Data
•
Subscription tier (FreePlan, StarterPlan, or ExpertPlan)
•
Number of videos processed (monthly and total)
•
Email notification preferences
2.5 Technical Data
We automatically collect certain technical information:
•
Device type (iOS, Android, or Web)
•
Local storage data (authentication tokens stored securely on your device)
On mobile devices, we use expo-secure-store for encrypted token storage. On web browsers, we use localStorage.
3. How We Use Your Data
We use the information we collect for the following purposes:
3.1 Service Provision
•
Authenticate and manage your account
•
Connect to your YouTube account via Google OAuth
•
Fetch your YouTube subscriptions and video data
•
Generate AI-powered video summaries using third-party AI services, based on video transcripts obtained independently from publicly available sources (not via Google APIs)
•
Track quota usage and enforce subscription limits
•
Send email notifications (if you have opted in)
•
Maintain and improve our Service
3.2 Legal Basis for Processing (GDPR)
Under the GDPR, we process your data based on:
•
Contract Performance: Processing necessary to provide the Service you requested
•
Consent: You explicitly authorize us to access your YouTube data via OAuth
•
Legitimate Interests: Improving our Service, preventing fraud, and ensuring security
4. Third-Party Services and Data Sharing
We share your data with the following third-party services to provide our Service:
4.1 Google OAuth and YouTube Data API v3
Purpose: Access your YouTube subscriptions and video metadata to enable our summarization service.
Data Shared: OAuth authorization codes.
Data Received: YouTube subscriptions, video metadata.
Privacy Policy: Google Privacy Policy
Google API Services User Data Policy Compliance:
Recapfy's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
4.2 AI Services (Summary Generation)
Purpose: Generate AI-powered video summaries.
Data Shared: Video transcripts obtained independently from publicly available sources (not via Google APIs). No data obtained through Google APIs (such as subscription lists, video metadata, or user account information) is transmitted to or processed by our AI service providers.
Data Flow: When a user requests a summary, Recapfy fetches the video transcript from publicly available sources independently of any Google API. Only this independently-sourced transcript is sent to the AI service for summarization.
This processing occurs on our backend server. We do not provide direct user access to AI services.
Current AI Service Providers:
•
xAI (Grok) — used for generating video summaries
4.3 Our Backend API
We operate our own backend server to process and store your data. All data processing complies with EU data protection regulations.
4.4 Future Analytics
We may implement analytics services in the future to improve our Service. We will update this Privacy Policy before implementing any analytics tools.
4.5 Data Segregation
Recapfy maintains strict data segregation between Google API data and third-party AI services. Data obtained through Google APIs (including YouTube subscriptions, video metadata, and account information) is used exclusively for displaying content within the Recapfy app and is never transmitted to any third-party AI service. Our AI service integrations only receive video transcripts that are obtained independently from publicly available sources, completely separate from the Google API data pipeline.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
5. How to Revoke Google OAuth Access
You can revoke Recapfy's access to your YouTube data at any time:
5.1 Via Google Account Settings
1.
Visit https://myaccount.google.com/permissions
2.
Find "Recapfy" in the list of apps with access to your account
5.2 Via Recapfy App
2.
Navigate to your Profile page
3.
Find the YouTube connection section
4.
Click "Disconnect YouTube Account"
After revoking access, Recapfy will no longer be able to access your YouTube data, and you will not be able to generate new video summaries until you reconnect your account.
6. Data Storage and Security
We implement appropriate technical and organizational measures to protect your personal data:
6.1 Storage Locations
•
Mobile (iOS/Android): Authentication tokens stored in expo-secure-store (encrypted)
•
Web: Authentication tokens stored in browser localStorage
•
Backend: User data stored on secure servers
6.2 Security Measures
•
Password encryption using industry-standard algorithms
•
Secure HTTPS connections for all data transmission
•
OAuth token encryption and secure storage
•
Regular security updates and patches
While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights Under GDPR
As a user in the European Union, you have the following rights regarding your personal data:
7.1 Right to Access
You have the right to request a copy of the personal data we hold about you. Contact privacy@recapfy.ai to request your data.
7.2 Right to Rectification
You can update your email address and notification preferences in the Profile section of the app. For other corrections, contact privacy@recapfy.ai.
7.3 Right to Erasure ('Right to be Forgotten')
You can delete your account and all associated data at any time:
2.
Navigate to your Profile page
3.
Scroll to the "Legal" section
4.
Click "Delete My Account"
This will permanently delete your account, all summaries, and revoke OAuth access to your YouTube account.
7.4 Right to Data Portability
You can export all your data in JSON format:
2.
Navigate to your Profile page
3.
Scroll to the "Legal" section
5.
Download or share the generated file
The export includes your account information, YouTube connections, summary history, and quota usage.
7.5 Right to Restrict Processing
You can request that we limit how we use your data. Contact privacy@recapfy.ai to make such a request.
7.6 Right to Object
You can object to certain types of processing. Contact privacy@recapfy.ai to exercise this right.
7.7 Right to Withdraw Consent
You can withdraw your consent to data processing at any time by disconnecting your YouTube account or deleting your Recapfy account.
To exercise any of these rights, please contact us at privacy@recapfy.ai. We will respond to your request within 30 days.
8. Data Retention and Deletion
We retain your personal data as follows:
•
Account data: Retained while your account is active
•
Summary history: Summaries and all associated data are automatically deleted 30 days after creation
•
OAuth tokens: Retained until you disconnect your YouTube account or delete your account
•
Deleted account data: Permanently deleted within 30 days of account deletion
We may retain certain information for longer periods if required by law or for legitimate business purposes (e.g., fraud prevention).
9. International Data Transfers
Your data is processed within the European Union. If we transfer data outside the EU in the future, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
10. Children's Privacy
Our Service is not intended for children under 16 years of age (consistent with GDPR requirements). We do not knowingly collect personal information from children under 16.
If you believe we have collected information from a child under 16, please contact us at privacy@recapfy.ai, and we will promptly delete such information.
11. Cookies and Tracking
On the web version of Recapfy, we use browser localStorage to store authentication tokens. We do not currently use cookies for tracking or analytics purposes.
If we implement cookies or tracking in the future, we will update this Privacy Policy and provide appropriate consent mechanisms.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
•
Updating the "Last Updated" date at the top of this policy
•
Sending an email notification (if you have email notifications enabled)
•
Displaying a prominent notice in the app
Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.
13. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: privacy@recapfy.ai
Data Controller: Pedro Teixeira
Location: Portugal, EU
This Privacy Policy was last updated on February 1, 2026.