Privacy Policy
Last updated: August 30, 2026
1. Overview
Tubelight processes your data to provide AI document Q&A, structured learning, image generation, and social publishing to your connected Instagram and YouTube accounts. This policy explains what we collect and how it's used.
2. Information we collect
Account information (your Google profile name, email, and photo), content you upload (PDFs, prompts, chat messages), and usage data (sessions, quiz attempts, credit transactions). If you connect an Instagram or YouTube account, we also store the connection details described in Section 9.
3. How we use it
To operate the service — retrieving context for answers, building your courses, generating images, tracking mastery, managing your credit balance, and publishing content you choose to share to your connected Instagram or YouTube account. We do not sell your data, and we never publish without your explicit action.
4. AI processing
Your uploaded documents and prompts are sent to our AI providers (Google Gemini for language and embeddings; Stability or OpenAI for image generation) strictly to fulfill your requests.
5. Payments
Credit purchases are processed by Razorpay. We receive only the transaction result — card details are handled entirely by Razorpay and never touch our servers. Refunds and cancellations are covered in our cancellation and refund policy.
6. Storage
Your documents, images, and session data are stored in Google Cloud Storage and Firestore, scoped per user. Access is authenticated and ownership-checked on every request.
7. Retention
We retain your data while your account is active so your history keeps working. You can delete content in-app, disconnect connected social accounts to remove their tokens, or use the "Delete my data" option in Account → Delete my data to permanently delete your account and all associated data, including the revocation of any connected Instagram or YouTube grants.
8. Third-party services
We use Firebase (authentication), Google Cloud (storage and compute), Razorpay (payments), Meta (Instagram publishing), and Google (YouTube publishing). Each has its own privacy policy governing their handling of data.
9. Instagram and YouTube connection
When you connect an Instagram or YouTube account, we retrieve the account's basic profile (Instagram username, account ID, and profile photo; YouTube channel name and ID) so we can display which account is connected. We retain this solely to identify and publish to the account you chose. We only publish when you explicitly choose to share content within the app and confirm the post — we never publish autonomously.
10. Tokens and how we store them
To publish on your behalf, we receive access tokens from Instagram and YouTube during the connection step and store them on our servers (in Google Cloud/Firestore). We use tokens only to publish content you initiate and to load your basic account details. You can disconnect and revoke access at any time from Account → Instagram / YouTube, which removes your tokens from our servers and stops our access to your connected account. Deleting your account (Account → Delete my data) also revokes these grants at the platform and removes the tokens.
11. Your rights
You can access, export, correct, or delete your data, and you can disconnect or revoke connected social accounts at any time. To delete your account and all data yourself, use Account → Delete my data in the app. You may also contact us at mayank@tubelightapps.com to exercise any of these rights, and we'll respond within 30 days.
12. Law Enforcement and Public Authorities
We do not disclose personal information to government or public authorities unless required to do so by applicable law, such as in response to a valid subpoena, court order, or warrant. When faced with such requests, we review their legal validity, evaluate options to challenge unlawful or over-broad requests, apply data minimization to disclose only the strictly necessary information, and maintain internal documentation of all such requests and responses.
13. Changes
We'll post any changes to this policy on this page. Material changes will be called out in the changelog.