Privacy Policy

Who we are

VScout is a discovery app that helps viewers find VTuber creators and helps creators present their profiles, schedules, and updates. "We" refers to the VScout team; "the app" refers to the VScout mobile application and its backend services.

Information you provide

• Account data, including your email address, chosen username or handle, and account identifiers.
• Creator profile data, including display name, bio, avatar, banner, languages, tags, country or timezone preferences, stream platform links, and schedule entries you publish.
• Content you post, including timeline posts and images you upload.
• Support messages, feedback, reports, evidence links, and optional feedback screenshots you submit about profiles, content, or app issues.

Information collected automatically

• Device identifiers such as push notification tokens if you enable notifications, so we can deliver live and schedule alerts.
• On-device discovery signals used to personalize creator recommendations.
• Product interaction data, such as profile views and creator link clicks, used to provide creator analytics.
• Crash diagnostics such as device model, OS version, and stack traces through Firebase Crashlytics.
• Standard technical data needed to operate and secure the service, such as timestamps and request metadata.

App Store privacy label summary

VScout's App Store privacy answers are based on the app's actual data flows. We collect the following data categories for app functionality, personalization, analytics, support, purchases, reliability, and safety:

• Name, email address, user ID, creator handle, and account identifiers for sign-in, profiles, verification, moderation, subscriptions, and support. These are linked to your account.
• Coarse location, such as country and timezone preferences you select, for discovery matching, profile context, and schedule features. This is linked to your account when saved.
• Photos or videos and other user content you upload or publish, including profile images, gallery images, timeline images, posts, bios, links, and schedule details. These are linked to your account or creator profile.
• Customer support content, including feedback, reports, evidence links, and feedback screenshots. These are linked to the reporting account so we can respond, moderate, and enforce our terms.
• Device ID style data, including push tokens and third-party app/service identifiers used by Firebase and RevenueCat for notifications, crash handling, and subscription entitlements. These may be linked to your account.
• Purchase history/status, such as Creator Plus entitlement state, store product, renewal/expiration status, and RevenueCat customer information. This is linked to your account. We do not receive full payment card details.
• Product interaction analytics, such as profile views and link clicks, used to provide creator analytics and improve product functionality. These may be linked to a signed-in user when available.
• Crash data used to diagnose and fix app crashes. We do not intentionally attach your name, email, or VScout user ID to crash reports.

We do not use any of these data categories for tracking across other companies' apps or websites. We do not sell personal data, and we do not use third-party advertising SDKs.

YouTube Data API use for creator verification

VScout uses the YouTube Data API only for an optional, user-initiated creator verification flow. This flow is used to confirm that the Google account signed in during verification controls or can access the YouTube channel that the creator has saved on their VScout profile.

When a creator taps the YouTube verification action in VScout, VScout sends the creator to Google's OAuth consent screen and requests the YouTube Data API scope https://www.googleapis.com/auth/youtube.readonly, shown by Google as "View your YouTube account". VScout does not request offline access for this YouTube verification flow.

After the creator grants consent, Google returns an authorization code to VScout's OAuth callback. VScout exchanges that code for a short-lived access token and uses the token only to call the YouTube Data API v3 channels endpoint for the signed-in Google account (channels.list with part=snippet and mine=true).

The YouTube Data API response may include basic channel snippet metadata for the signed-in account. VScout uses only the channel information needed for verification, such as the YouTube channel ID, channel handle or custom URL, channel title/display name, and channel URL. VScout compares that information with the YouTube link saved on the creator's VScout profile.

VScout stores only the VScout account record, the verification result, and related platform identifiers needed to show that a creator profile has been verified, such as the verified platform, platform account ID, handle, display name, and profile URL. VScout does not store YouTube OAuth access tokens or refresh tokens in its database; the access token is used only for that verification request.

VScout does not upload, edit, delete, or manage YouTube videos, comments, playlists, subscriptions, or channel settings. VScout does not sell, rent, or use Google user data for advertising, retargeting, data brokerage, creditworthiness, lending, unrelated databases, training AI or machine learning models, or any purpose unrelated to providing or improving VScout's user-facing features.

VScout does not disclose or transfer Google user data to third parties except to trusted infrastructure and service providers as necessary to operate VScout, secure user accounts, provide account sign-in, process YouTube verification, and maintain user-facing app features described in this Privacy Policy.

VScout's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Google Sign-In data

If you use Google Sign-In to create or access a VScout account, VScout receives the Google identity information needed to authenticate you, such as your Google account identifier, email address, and basic profile information made available during sign-in. We use this data only to authenticate you, create and manage your VScout account, keep your account secure, and support account management features that are visible to you.

Security and Protection of Google User Data

VScout takes reasonable and appropriate measures to protect the confidentiality, integrity, and security of user data, including Google user data received through Google Sign-In and the YouTube Data API.

We protect user data using security measures such as HTTPS/TLS encryption for data transmitted between the app and our services, access controls, authentication, least-privilege access to production systems, secure storage of service credentials, and restricted access to user data only where needed to operate, maintain, or improve VScout's user-facing features.

Google user data is not sold, rented, or transferred to third parties for advertising, retargeting, data brokerage, creditworthiness, lending, or unrelated purposes. Google user data is not used to train AI or machine learning models. Google user data is used only to provide and improve VScout features that are visible to users, such as account sign-in, profile creation, creator discovery, creator verification, and account management.

Where VScout relies on trusted infrastructure or service providers to operate the app, those providers are used only as necessary to provide the service, and access to data is limited to the purposes described in this Privacy Policy.

If a user requests account deletion or deletion of their personal data, VScout will delete or anonymize the relevant personal data unless retention is required for security, fraud prevention, legal compliance, or legitimate operational purposes.

Purchases

If you subscribe to Creator Plus, the purchase is processed by Apple or Google. We use RevenueCat to manage entitlements and receive purchase status tied to your account ID. We do not receive or store full payment card details.

How we use your information

• To provide and secure sign-in, profiles, discovery, schedules, timeline posts, and verification.
• To deliver notifications you opt into.
• To process and apply Creator Plus entitlements.
• To review reports, moderate content, and enforce our terms.
• To diagnose crashes and improve reliability.

We do not sell your personal data, and we do not use it for third-party advertising or cross-app tracking.

Service providers

• Supabase for authentication, database, storage, and Edge Functions.
• Google Firebase for push notifications and crash reporting.
• RevenueCat, Apple, and Google for subscription processing and entitlements.

Your choices and rights

• You can disable push notifications in device settings.
• You can view and edit your profile data in the app.
• You can delete your account from the app. This removes your account and associated profile, posts, follows, and related data from our servers.
• You can block another user so you cannot see each other in VScout.
• You can revoke Google access from your Google Account permissions page.

Data retention

We keep your data while your account is active. When you delete your account, we delete your personal data, except where we must retain limited records to comply with legal obligations or preserve evidence of abuse reports for a reasonable period.

Children

VScout is not directed to children under 13 or the minimum age required in your country. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.

Changes

We may update this policy as the app evolves. Material changes will be reflected by a new effective date at the top of this page.

Contact

Questions about privacy or your data? Email us at sassodo.business@gmail.com.