blint accesses only what it needs to work.

Information accessed

• Your Google account sign-in session, for YouTube access.
• Your YouTube subscriptions, liked videos, and channel/video metadata available through the YouTube Data API.
• Playback state and locally stored preferences — watched videos, playback position, and accessibility or UI settings.
• Permission to change your YouTube subscriptions, used only when you choose to subscribe or unsubscribe from within the app.

How it is used

• Signing you in with Google.
• Loading your YouTube subscriptions and videos.
• Tracking watched state and playback position on your device.
• Supporting narration, accessibility, and playback controls.
• Subscribing you to a channel, or unsubscribing you from one, when you ask the app to do so. blint never changes your subscriptions on its own.

Storage and sharing

• Preferences and playback state are stored locally on your device.
• Your Google sign-in is held in the iOS Keychain on your device. blint has no account system, and nothing is sent to us except feedback you choose to send (see below).
• No personal data is sold, and the app contains no advertising SDK.
• Data is shared only with Google/YouTube as required to provide the service.
• Feedback is the one thing you can send to us. If you use Settings → Send feedback, your message, the type you chose, your email address (only if you enter one, so we can reply), and the app version, iOS version, device type, language, and whether VoiceOver is on are sent over HTTPS to a small relay that emails them to the developer. Nothing from your YouTube account is included. The relay runs on Cloudflare, which also delivers the email, and processes it only for that purpose; we keep the email only as long as needed to respond.

How your data is protected

• Your Google sign-in token is stored encrypted in the iOS Keychain, protected by your device passcode or biometrics. It is marked "this device only", so it is never included in iCloud Keychain or in encrypted device backups.
• All communication with Google and YouTube uses HTTPS with TLS encryption. blint makes no unencrypted network requests.
• Watched videos and playback positions are held in the app's own storage on your device, protected by iOS file-level encryption while the device is locked.
• blint has no database and no account on our side to breach. Your viewing data stays on your device and with Google; the only exception is feedback you choose to send, described above.
• The app contains no analytics, advertising or tracking SDKs, so nothing about your viewing is transmitted to anyone.
• Diagnostic logs stay on your device and deliberately record no video titles, no account details and no tokens.

Retaining and deleting your data

• Your sign-in token is kept only while you stay signed in. Signing out deletes it from the Keychain and revokes blint's access to your Google account.
• Watched state and preferences are kept on your device until you delete them or remove the app.
• Deleting the app removes everything blint has stored, permanently. Because there are no servers, there is nothing left elsewhere to delete.

Your choices

• Sign out at any time to end the app's access to your YouTube account.
• Revoke access from your Google account permissions page.
• Delete the app to remove all locally stored data.
• Questions: alanabas@gmail.com.