TubyoUpdated October 10, 2026 · English
Privacy policy
This policy describes Tubyo for iPhone, iPad and Android, including pre-release test builds, and this support website. It does not imply that every version is publicly available. Contact the Tubyo developer at tubyoapp@gmail.com for privacy questions or requests.
Publisher and data contact
Amine Elalame, individual entrepreneur trading as ELMcode, 8 Bis rue Abel, 75012 Paris, France. SIREN 109053231; SIRET 10905323100014. Email: tubyoapp@gmail.com.
Data on your device
Tubyo does not require a Tubyo account. Saved content, creators, playback progress, imported files and preferences are managed locally. On iPhone and iPad, the parental code is protected using the system Keychain. On Android, parental PIN and recovery-code verifiers are salted password-derived hashes in app-private storage; the original codes are not stored. Parental credentials are excluded from Android backup and device transfer. When you choose biometrics, the operating system authenticates you; Tubyo does not receive or store fingerprint or facial templates. Website cookies and sign-ins are stored by the embedded browser. Device backups may retain app data according to your platform and device settings. Imported media files are excluded from Android cloud backup.
Websites and video services
Opening a website, playing media or loading a thumbnail connects your device to that provider. Providers can receive your IP address, browser information and any information you give them, and may use cookies under their own policies. Tubyo is not an anonymizing network. Saved links are not downloaded copies of website videos.
To display saved video titles and creator information on Android, Tubyo may request public metadata from the relevant provider, including YouTube's public metadata endpoint for saved YouTube and YouTube Music links. These requests disclose the requested content identifier and ordinary connection information, such as your IP address, to that provider; Tubyo does not attach embedded-browser login cookies to these public metadata requests.
Advertising and consent
Normal mode uses Google Mobile Ads and Google’s consent tools for Tubyo advertisements. Tubyo requests non-personalized advertising. This does not mean no data processing: Google may process IP addresses, device or app identifiers, ad interactions, performance information and diagnostics for ad delivery, measurement, security and fraud prevention. Required consent choices are presented before eligible ad requests. Available privacy options can be revisited in the app’s settings.
Child mode does not request or display Tubyo ads. Websites opened in child mode remain separate services with their own privacy practices. Built-in filtering does not guarantee that every third-party request or advertisement is removed.
Google Privacy Policy · Google Mobile Ads data disclosure for iOS · Google Mobile Ads data disclosure for Android
Optional usage measurement
Versions that include Google Analytics for Firebase offer an optional “Help improve Tubyo” switch, off by default, in the welcome guide and Settings. If you accept, Google processes a pseudonymous installation identifier, app and device technical information, sessions, general app screens and selected feature interactions. Google may derive an approximate country or region from connection information; Analytics does not log or store IP addresses. The purpose is to understand app adoption and improve Tubyo. This is separate from the Activity dashboard: your detailed viewing statistics remain on your device.
Tubyo does not send visited URLs, searches, video titles, creator identities, notes, imported media or file names to Analytics. It may send a broad platform category such as YouTube, Twitch or local file. Analytics advertising identifiers and advertising personalization are disabled. No Tubyo account or cross-app user ID is assigned. Optional usage measurement is disabled throughout Kids mode and private browsing. An adult’s action to enter Kids mode may be measured before collection is paused; the child’s pages, content and viewing time are not sent.
You can change your choice at any time. Switching off stops collection and resets the app’s local Analytics identifier; it does not erase previously uploaded reports. Analytics event and user data are retained for two months, with retention not extended on new activity; aggregated reports may remain longer. Google processes data on our behalf and may transfer it internationally under its applicable safeguards. Contact support for requests concerning data handled by Tubyo; because no Tubyo account is used, identifying a particular installation may be limited.
Google Privacy Policy · Google Analytics data collection and safeguards
Purchases and casting
Apple processes subscriptions and payments on iPhone and iPad. Tubyo uses verified StoreKit purchase status to enable ad removal. Google Play processes Android subscriptions and payments, and Tubyo queries Google Play Billing purchase status to determine ad-removal access. Tubyo does not receive your card or banking details. Subscription availability depends on the store and build. If you use casting, local-network discovery and the selected media information are used to connect to your receiver; the receiver and its provider may process connection information under their policies.
On Android, ongoing playback may display media titles, artist information and playback controls in a media notification, on the lock screen or in Picture in Picture. Their visibility is controlled by your device settings.
Support and this website
If you email support, your address and the information you provide are processed to handle your request. Do not send sensitive information that is unnecessary for support. This website uses no advertising or analytics scripts. GitHub Pages hosts it and records visitor IP addresses for security. Email is handled through Gmail. Their privacy policies apply to their services.
Retention and your choices
Manage or delete saved items, history and browser data using the app controls. Deleting the app removes its ordinary local container, while backups and iOS Keychain data can be managed separately through your device and account settings. Android also provides an app-storage clearing control. Deleting app data or uninstalling Tubyo does not cancel a subscription: manage it in the relevant Apple or Google Play account. Support correspondence is retained only as needed to resolve requests and meet applicable obligations. Providers set their own retention periods.
Depending on your location, you may have rights to access, correct, delete or restrict processing of personal data, object to processing, withdraw consent or complain to a data-protection authority. Contact support for data handled by Tubyo; contact the relevant provider for website, advertising or payment data they control. Withdrawing consent does not affect earlier lawful processing.
Changes
We will update this page when data practices change and revise the date above. Material changes requiring consent will be presented through the applicable app or provider flow.