Privacy Policy
1. Scope
This Privacy Policy explains how Twyt handles data in the Twyt mobile app and the StreamIntel backend. Twyt helps users follow Twitch creators and view public Twitch and linked YouTube activity in one personal feed.
Twyt is independent from Twitch, YouTube, Google, Supabase, Sentry, and Invidious. Those third-party services handle data under their own privacy policies when Twyt uses their services or loads their content.
2. Data Twyt collects or stores
Account and sign-in data
When you create an account or sign in, Supabase Auth stores account data such as:
- Email address
- Hashed password for email/password accounts
- Google account identifier, email address, and display name when you use Google Sign-In
- Authentication tokens and session metadata needed to keep you signed in
Twyt does not see your plaintext password.
App data linked to your account
Twyt stores the data needed to provide your account and feed:
- Creators you follow
- YouTube channels you link to followed creators
- Personal notes for followed creators
- Saved items and bookmarks
- Seen feed items and catch-up state that is synced to the backend
- Feed order, last-visit timestamp, and feed preferences
- Onboarding preferences, including preferred languages, Twitch categories, and tutorial completion state
Local device data
Some preferences are stored locally on your device, including:
- App language choice
- Theme choice, accent color, and launcher icon choice
- Support Pack unlock flag
- Supporter-only creator categories, category names, colors, collapsed state, and creator assignments
- Local seen-state, catch-up progress, cached saved-item keys, and other app state used to keep the interface responsive
Local data may remain on your device until you delete the app, clear app data, or overwrite the setting in the app. Signing out may not remove every local preference.
Searches and public creator metadata
When you search for creators or load your feed, Twyt sends the relevant search terms, creator identifiers, channel identifiers, video identifiers, or clip identifiers to the StreamIntel backend. The backend may request and cache public metadata from Twitch and YouTube, such as:
- Creator/channel names, handles, profile images, and thumbnails
- Twitch live status, VODs, clips, schedules, games/categories, and stream statistics
- YouTube video titles, thumbnails, upload timestamps, durations, view counts, channel metadata, and a small number of top public comments
Twyt does not host or store full video or livestream content. Media playback is loaded from the relevant platform or content delivery network.
Support Pack purchase data
Twyt offers an optional one-time Support Pack unlock through Google Play Billing. Google Play processes the payment. Twyt does not receive or store your full payment card, bank account, or other payment method details.
The app receives purchase status information from Google Play Billing so it can unlock or restore the Support Pack. The current app stores the Support Pack entitlement locally on your device and does not store purchase receipts or entitlements in the StreamIntel backend.
Google may retain transaction and payment records according to Google Play's policies and applicable law.
Crash and error diagnostics
In release builds, if SENTRY_DSN is configured, Twyt uses Sentry to collect diagnostic information such as device and operating system details, app version, stack traces, performance/error context, and crash reports. This helps identify and fix bugs. Twyt does not intentionally send creator notes, passwords, or payment method details to Sentry.
Debug and local builds do not initialize Sentry unless changed by a developer.
Data Twyt does not collect
Twyt does not collect your contacts, microphone input, camera input, precise location, SMS/call data, health data, private YouTube channel or account content, private Twitch account data, or content you post on YouTube or Twitch.
3. How Twyt uses data
| Purpose | Data used | Legal basis under GDPR |
|---|---|---|
| Create, authenticate, and secure your account | Account and sign-in data | Contract |
| Provide your personal creator feed | Follows, linked YouTube channels, feed preferences, seen-state, saved items, and notes | Contract |
| Search creators and show public Twitch/YouTube metadata | Search terms, creator/channel/video/clip identifiers, and cached public metadata | Contract |
| Provide optional Support Pack features | Purchase status from Google Play Billing and local Support Pack settings | Contract |
| Improve reliability and investigate errors | Crash and error diagnostics, if Sentry is enabled | Legitimate interest |
| Prevent misuse and protect the service | Authentication, rate-limit, server logs, and operational security data | Legitimate interest |
| Respond to deletion, privacy, legal, or support requests | Account, app, and contact data relevant to the request | Legal obligation or legitimate interest |
Twyt does not sell personal data, use personal data for third-party advertising, or build advertising profiles.
4. Third-party services and sharing
Twyt shares data with service providers only as needed to run the app, provide features you use, process purchases, keep the service secure, or comply with law.
| Service | Purpose | Data involved | Policy |
|---|---|---|---|
| Supabase | Authentication, database hosting, and account deletion | Account data, authentication data, and app data stored in the backend | supabase.com/privacy |
| Google Sign-In | Optional sign-in provider | Google account identifier, email address, display name, and authentication flow data | policies.google.com/privacy |
| Google Play Billing | Optional Support Pack purchase and restore flow | Product ID, purchase status, transaction data handled by Google Play, and payment information processed by Google | policies.google.com/privacy |
| YouTube Data API Services | Public YouTube channel, video, and comment metadata | Search terms, channel IDs, video IDs, public metadata, and API request data | policies.google.com/privacy |
| Twitch Helix API, Twitch GraphQL, Twitch player, and Twitch/CDN hosts | Public Twitch creator, stream, VOD, clip, schedule, category, and playback metadata | Twitch creator IDs, logins, clip/video IDs, public metadata, and playback request data | twitch.tv privacy notice |
| Sentry | Crash and error diagnostics when configured | Diagnostic data, stack traces, device/app context, and error metadata | sentry.io/privacy |
Twyt uses YouTube API Services. Use of YouTube features is also subject to the YouTube Terms of Service and the YouTube API Services Terms.
When you open embedded YouTube or Twitch media, or open a link in your browser, the relevant third-party platform may receive network, device, cookie, identifier, and usage data according to its own policies.
5. Security
Twyt uses reasonable technical and organizational measures to protect user data:
- Release builds require an HTTPS backend URL.
- Password handling and authentication are delegated to Supabase Auth.
- Backend API routes require authenticated Supabase JWTs for user-specific actions.
- User-scoped database tables use row-level security policies.
- Backend-only tables are not exposed to normal client access through public database policies.
- Account deletion purges user-scoped backend cache entries before and after Supabase account deletion.
- The Android app currently declares only the INTERNET permission.
No online service can guarantee absolute security.
6. Retention and deletion
Twyt keeps account and app data for as long as your account is active or as long as needed to provide the app, comply with law, resolve disputes, or protect the service.
You can delete your account in the app:
Settings -> Account -> Delete account
Account deletion permanently deletes your Supabase account and user-scoped app data from the backend through database cascades, and Twyt also deletes user-scoped cache entries. Public creator metadata, public feed metadata, and backend caches that are not specific to your account may remain because they describe public Twitch or YouTube content rather than your account.
Local device data can also be removed by uninstalling the app or clearing app data. Google Play purchase records are managed by Google Play. Sentry crash reports, if enabled, are retained according to the configured Sentry project retention settings unless deletion is required and technically possible.
Outside the app, you can request account deletion or data deletion by emailing sendow.apps@gmail.com from the email address associated with your account.
7. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing of, or export your personal data. You may also have the right to lodge a complaint with your local data protection authority.
To exercise these rights, contact sendow.apps@gmail.com.
You can also:
- Delete your account in Settings.
- Unfollow creators and remove linked YouTube channels in the app.
- Remove saved items and personal notes in the app.
- Change app language, theme, accent color, Support Pack options, and local creator categories in the app.
- Manage Google Sign-In access from your Google account settings.
Twyt does not currently request access to your private YouTube account or your private Twitch account.
8. International processing
Twyt and its service providers may process data in countries other than your country of residence. Where required, Twyt relies on appropriate legal bases and service-provider safeguards for international transfers.
9. Children's privacy
Twyt is not directed at children under 13, or under 16 in the European Union. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will delete it promptly.
10. Changes
We may update this Privacy Policy when the app, backend, service providers, legal requirements, or data practices change. When we do, we will update the effective date above and provide notice for material changes where appropriate.
11. Contact
For privacy questions or data requests:
Email: sendow.apps@gmail.com