Privacy Policy

Startube (hereinafter referred to as "we", "us" or "the App") respects your privacy and processes your Personal Data in accordance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the Dutch Uitvoeringswet AVG, and other applicable data protection laws.

We act as the Data Controller (Art. 4(7) GDPR) for the Personal Data processed via the App.

How and when do we collect Personal Data?

You have downloaded and installed the Startube App via the Apple App Store or the Google Play Store. By this download and installation, the respective app stores automatically collect and may share with us certain information (including device ID, IP address, operating system version and installation data) for verification, crash reporting and basic analytics purposes. This processing is carried out in accordance with the privacy policies of Apple and Google and is based on our legitimate interest (Art. 6(1)(f) GDPR) in providing a functional service.

In addition, the App itself processes the following categories of Personal Data:

• Camera access — To enable QR code scanning, the App requires access to your device's camera. The camera is used solely to read QR codes and does not capture, store or share any images or video. It is closed immediately after scanning. Based on your explicit consent (Art. 6(1)(a) GDPR), withdrawable at any time via App settings.
• YouTube URLs and YouTube Data API — When you play a YouTube URL, we use the official YouTube Data API v3 (Google LLC) to load and stream the video. No personal YouTube account data is requested or stored unless you voluntarily log in with a Google account. We only receive publicly available metadata (title, thumbnail, duration). Based on Art. 6(1)(b) GDPR.
• Automatically collected data — Device type, OS version, app version, IP address (temporary), and anonymous usage statistics via tools such as Firebase Analytics.
• Data you voluntarily provide — Only if you create an optional account: email address, username and preferences. Based on consent or performance of agreement (Art. 6(1)(a) or (b) GDPR).

Purposes and lawful bases (Art. 6 GDPR)

• Enabling the QR code scanning function (consent)
• Delivering YouTube video playback via the official API (performance of contract/service)
• Improving, maintaining and securing the App (legitimate interest)
• Generating anonymised statistical insights (legitimate interest, Art. 6(1)(f) GDPR)

Sharing with third parties (Art. 28 GDPR)

• App Stores (Apple Inc. / Google LLC) — Data collected during download is handled by the stores themselves.
• YouTube Data API (Google LLC) — Scanned or entered URLs and metadata are temporarily transmitted to Google for video playback. Google acts as a separate Data Controller; please refer to Google's Privacy Policy.
• Analytics processors — Sub-processors such as Firebase are bound by Data Processing Agreements (Art. 28 GDPR).
• We do not sell Personal Data. Sharing with other third parties only occurs when required by law (Art. 6(1)(c) GDPR) or with your explicit consent. International transfers to the United States (Google) are safeguarded by Standard Contractual Clauses (SCCs) and, where applicable, the EU-U.S. Data Privacy Framework.

Data retention (Art. 5(1)(e) GDPR)

• Camera data — Deleted immediately after scanning (maximum a few seconds).
• YouTube URLs and metadata — Retained only temporarily in volatile memory during playback.
• Download / store data and analytics — Retained in anonymised form for a maximum of 26 months.
• Account data — Retained for the duration of the account or until you request deletion.

Your rights as Data Subject (Art. 15–22 GDPR)

You have the following rights at any time:

You may exercise these rights via the App settings or by emailing privacy@startube.app. We will respond within one month (Art. 12(3) GDPR). You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

Security (Art. 32 GDPR)

We implement appropriate technical and organisational measures — including encryption, access controls, data minimisation and regular security audits — to ensure a level of security appropriate to the risk.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most recent version is always available in the App under "Privacy". Material changes will be notified via the App.

Contact

By downloading the Startube App via the Apple App Store or Google Play Store and using it, you acknowledge that you have read and agree to this Privacy Policy.