This policy describes how DigestDesk collects, uses, stores, and deletes personal data, including data accessed through Apple, Google, and YouTube integrations.
1. Controller and contact
DigestDesk is operated by an individual developer. If you have privacy questions or deletion requests, contact the operator at nextbigtoy@gmail.com.
2. Data we collect
We collect account and product usage data required to operate DigestDesk. This may include account identifiers, feed subscriptions created inside the product, and content metadata needed to show a user's reading workflow.
If a user chooses to connect Google, and if the integration is enabled for that environment, DigestDesk may request read-only access to the user's YouTube subscription list through the YouTube Data API scope https://www.googleapis.com/auth/youtube.readonly.
3. How Google and YouTube data is used
DigestDesk uses Google and YouTube data only after explicit user authorization. The user's YouTube subscription list is used only to help that same user review and import channels into DigestDesk. If the Google import feature is disabled in a given environment, DigestDesk will not request this access from users in that environment.
DigestDesk does not sell YouTube data, does not expose one user's YouTube subscription list to other users, and does not use YouTube authorization to publish content, manage videos, or act on behalf of a user beyond the approved read-only import flow.
4. Legal basis and purpose
We process data to provide the core DigestDesk service requested by the user, maintain account security, improve reliability, and comply with legal obligations. Google and YouTube data is processed only for the user-facing feature that requires that access.
5. Storage and retention
DigestDesk stores only the minimum data needed to operate the service. Where Google or YouTube authorized data is stored, it is retained only as long as necessary for the specific user-authorized feature and subject to applicable Google and YouTube API terms.
Users may disconnect Google access or request deletion of related authorized data. After a valid deletion request, DigestDesk will delete the relevant stored authorized data within a commercially reasonable period and in line with applicable API policy requirements.
6. Sharing
We do not sell personal data. We may use infrastructure or service providers acting on our behalf to host the application, authenticate users, or store operational data, subject to confidentiality and security obligations.
7. User choices
Users may choose whether to connect Google. Users may also revoke DigestDesk access from their Google account permissions page and may request deletion of stored data associated with the integration.
8. Security
We apply reasonable administrative and technical safeguards designed to protect personal data against unauthorized access, loss, misuse, or disclosure.
9. External terms
DigestDesk's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Where YouTube data is involved, users should also review the YouTube Terms of Service.
10. Updates
We may update this Privacy Policy from time to time. The latest version will be posted on this page with the effective date shown below.
Effective date: March 27, 2026