Tuyo YouTube Publisher Privacy Notice
Last updated: October 9, 2026
1. Introduction
TUYO Learning operates a YouTube content management tool used by authorized channel managers. This Privacy Notice explains how the application accesses, uses, stores, protects, retains, and deletes Google user data.
The application is intended for authorized adult channel managers. Although TUYO Learning publishes educational content for children, children are not intended to use the OAuth management tool.
2. Google User Data We Access
The application requests the following Google OAuth permissions:
- youtube.readonly: To identify and verify the authorized YouTube channel and retrieve channel information, including its channel ID, title, and handle.
- youtube.upload: To upload videos to the authorized YouTube channel when expressly approved by the channel manager.
- youtube.force-ssl: To perform authorized YouTube content-management operations, including explicitly approved changes to video privacy settings.
The application verifies that the connected account belongs to the authorized TUYO Learning YouTube channel.
The H02C application does not currently request or use YouTube Analytics or YouTube Analytics Monetary scopes.
3. How We Use Google User Data
Google user data is used exclusively to:
- Authenticate and verify the authorized YouTube channel.
- Perform channel-management operations authorized by the channel manager.
- Upload approved videos with private visibility by default.
- Support explicitly authorized video-management operations.
The application does not automatically publish videos publicly.
Google user data is not sold, used for advertising, or shared with advertisers.
4. Data Storage and Security
OAuth credentials are stored locally in the H02C .credentials/ directory. The directory is owned by the authorized macOS account (akidesekeri:staff) and uses filesystem mode 0700; the TUYO OAuth token file uses owner-only filesystem mode 0600.
Credentials are excluded from source-code version control and are not intentionally printed in application logs.
Access is restricted through local operating-system permissions. The current implementation does not claim separately verified encryption at rest.
Credential rotation and revocation are handled manually by an authorized operator.
5. Data Retention
OAuth credentials are retained while the authorized YouTube connection is required for channel-management operations.
The current implementation does not enforce a fixed automatic deletion period. Credentials remain stored until removed by an authorized operator or through an applicable credential-management process.
Access tokens may expire. Expiration does not necessarily delete locally stored credentials.
6. Data Deletion and Revocation
Users can revoke the application's Google Account access at:
https://myaccount.google.com/permissions
Users may also request deletion of locally stored OAuth credentials through the application's authorized operator.
Local credential deletion is currently performed manually. The application does not provide an automated deletion endpoint.
Revoking Google access prevents further authorized API access using the revoked grant, but does not automatically remove previously stored local credential files.
7. Data Sharing and Limited Use
Google user data is used only for the functionality described in this notice.
The application does not sell Google user data or share it with third parties for advertising purposes.
The application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
8. Children's Privacy
TUYO Learning produces educational YouTube content intended for children.
The YouTube OAuth management application is operated by authorized adult channel managers and is not intended to collect Google Account information from children.
The application does not provide children with an OAuth login or channel-management interface.
9. Changes to This Privacy Notice
This Privacy Notice may be updated when application functionality, data-handling practices, or applicable requirements change.
Updates will be published at the existing TUYO Learning Privacy Notice URL.
10. Contact and Privacy Requests
For privacy inquiries, Google data access questions, revocation assistance, or requests concerning locally stored credentials, contact TUYO Learning at [email protected].