YouAbsorb Privacy Policy

1. What Data We Collect

1.1 Account & Authentication Data

When you sign up with Google Sign‑in, we collect and store:

• Email address – Used to identify your account and communicate important updates (e.g., subscription status).
• User ID (UID) – A unique identifier assigned by Firebase to manage your data.
• Display name & profile photo – Only from Google Sign‑in (we do not modify or share them).

1.2 Cloud Data (Firestore)

With your account, the following data is securely stored in Firebase Firestore and synchronized across your devices:

• Vocabulary items – Words you save, definitions, example sentences, notes, mastery level (0–100%), and review history.
• Video history – YouTube videos you’ve analyzed, titles, thumbnails, timestamps, and associated transcript fragments.
• Flashcard sessions – Practice results, accuracy, cards reviewed, and session duration.
• Chat messages – Your conversations with the AI assistant (stored only to display your chat history).
• Usage statistics – Number of chats, analyses, words added, and flashcard sessions (used to enforce free tier limits).
• Subscription tier – Your current plan (free, monthly, yearly) and expiration dates (managed via Lemon Squeezy).

1.3 Local Data (Browser Storage)

Some data remains cached locally for performance and offline access:

• Temporary copy of recent vocabulary and video metadata.
• Extension preferences (e.g., theme, daily goal).

1.4 Data Accessed Temporarily

When you actively use YouAbsorb on YouTube, we temporarily access:

• YouTube video metadata (ID, title, channel, duration) – to organize your history.
• YouTube captions – to generate transcripts and extract vocabulary (captions are not stored permanently).
• Your questions to the AI – sent to our server‑side OpenAI integration; we do not store your conversations beyond what you see in your chat history.

2. How We Use Your Data

We use your data solely to provide and improve the extension’s core features:

• Authentication – To verify your identity and keep your data private.
• Vocabulary & flashcards – To track your learning progress and sync across devices.
• Video history – To help you revisit videos where you saved words.
• Chat history – To display your past conversations with the AI assistant.
• Usage limits & subscriptions – To enforce free tier limits and manage premium features via Lemon Squeezy.

3. Third‑Party Services

3.1 Firebase (Google)

We use Firebase for authentication, cloud database (Firestore), and hosting of the dashboard. Firebase processes data in accordance with Firebase Privacy & Security and Google Privacy Policy.

3.2 Lemon Squeezy (Payments)

If you purchase a subscription, you will be redirected to Lemon Squeezy’s secure checkout. They collect billing information (name, email, payment method) to process payments and manage subscriptions. We do not receive or store your full payment card details – only your tier, subscription status, and expiration date. See Lemon Squeezy’s privacy policy.

3.3 OpenAI (AI Features)

Chat and AI analysis features are powered by OpenAI. When you use them, your questions and video context are sent to OpenAI via our secure Cloud Functions. We do not store your conversations beyond the chat history displayed to you. OpenAI processes data according to OpenAI’s Privacy Policy.

3.4 YouTube & Google APIs

We access YouTube’s API to fetch video metadata and captions, compliant with YouTube Terms of Service.

4. Data Storage, Security, and Retention

• Cloud storage: Your data is stored in Firebase Firestore, hosted in Google Cloud data centers with encryption at rest and in transit.
• Access control: Only you (authenticated via your Firebase account) can access your data. Our backend Cloud Functions have limited, purpose‑bound access.
• Retention: Your data remains stored until you delete your account. When you uninstall the extension, your cloud data is not automatically deleted – you must request deletion via the dashboard or by contacting support.

5. Your Rights and Control

You have full control over your data, in accordance with GDPR, CCPA, and other applicable laws:

• View & edit: All your vocabulary, history, and settings are accessible in the dashboard.
• Delete data: You can delete individual words or videos from the dashboard. You may also request complete deletion of your account and all associated data by emailing YouAbsorb Support.
• Export data: (Coming soon) – request a copy of your data in a portable format.

6. Children’s Privacy

YouAbsorb is not intended for children under 13. We do not knowingly collect personal information from children. If we learn that a child under 13 has provided us with data, we will delete it. Please contact us if you believe this has occurred.

7. Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify users via the extension dashboard or email of significant changes. The “Last updated” date at the top will be revised accordingly.

8. Permissions Justification

YouAbsorb requests the following Chrome permissions, each strictly necessary for its functionality:

Permission	Why Needed
tabs	Detects YouTube navigation and reopens videos from your history.
storage	Saves your vocabulary, video history, and settings locally (also syncs with cloud).
identity	Allows you to sign in to your YouAbsorb account via Google.
*://*.youtube.com/*	Displays the overlay on YouTube and reads video captions.
https://www.googleapis.com/*	Fetches public video metadata (titles, thumbnails) for your history.
https://us-central1-youabsorb-b0215.cloudfunctions.net/*	Communicates with our Cloud Functions (usage stats, AI, webhooks).

9. Contact Us

If you have any questions about this privacy policy, your data, or wish to exercise your rights, please contact us at:

YouAbsorb Support