Privacy Policy

TubeQuest is operated by Bigmoves PTY LTD. We are the entity responsible for the personal information described in this policy.

• Bigmoves PTY LTD
• Level 1, 241 Adelaide St, Suite #1341, Brisbane City, QLD, Australia, 4000
• hello@tubequest.xyz

This policy explains what we collect, why, who we share it with, how long we keep it, and how you get rid of it. If anything here is unclear, write to us at the address above and we will answer.

Stating it plainly rather than burying it: using TubeQuest means giving us personal information. Here is all of it.

Account information. Your email address, your name if you give one, and — if you sign in with Google — the basic profile information Google returns. Your password, if you use one, is held by our authentication provider and never reaches our servers.

What you tell us you want to learn. The goal you write in your own words during onboarding, your answers to the calibration questions, and your stated experience level. This is free text and we do not restrict what you put in it, so please do not include information you would not want stored.

What you capture and watch. The YouTube videos you add to a quest, the transcripts we fetch for them, how those videos are arranged into modules, how many seconds of each you have watched, and when you marked something complete.

What our AI writes about you. Relevance scores, level ratings, notes, action items and overlap maps generated from your goal and the videos on your quest.

Your check-ins. What you tell us you did, and how that compares with what we measured.

Marketplace activity. Quests you publish, quests you enrol in, and reviews you write.

Billing information. Which plan you are on and its status. Card numbers are handled by our payment processor and are never stored on, or seen by, our systems.

Technical and usage data. Records of the background jobs we run for you, a ledger of what your AI usage cost us, error logs, and product analytics describing which features are used.

• To build and sequence your curriculum, and to analyse videos against your goal and level.
• To measure your progress and hold you accountable to it, which is the point of the product.
• To operate accounts, subscriptions and entitlements.
• To keep the service working — debugging, preventing abuse, and controlling cost.
• To improve the product, using aggregate and de-identified measures wherever that is enough.
• To contact you about your account, your subscription, and changes to this policy.

We do not sell your personal information. We do not use it for third-party advertising, and we do not build advertising profiles.

This is not a background detail of TubeQuest, it is the product. When you capture a video or generate a curriculum, we send data to large language models operated by third parties, routed through OpenRouter.

What is sent: the learning goal you wrote, your stated level, the titles and identifiers of the videos on your quest, and the full text of their transcripts. What comes back is written into your account as notes, scores and modules.

AI output can be wrong. Relevance scores, level ratings, notes and action items are generated by a machine, are not reviewed by a human before you see them, and must not be relied on as professional, medical, financial or legal advice.

We instruct our model providers not to retain or train on the content we send, where the provider supports that instruction. Providers may still hold data briefly for abuse monitoring under their own terms.

Our prompts carry a safety instruction that applies to every generation, without exception: no output may instruct, encourage, plan or glamorise self-harm, suicide, self-injury or disordered eating. Where a stated goal asks for such a thing, the system declines to build the quest rather than producing a softened version of it.

TubeQuest is built on services run by other companies, and each of these receives some of your data in order to do its job. They are data processors acting on our instructions, not independent recipients free to do as they like.

• Clerk — Accounts, sign-in, and subscription state.
• Supabase — The database holding your quests, videos, notes and progress.
• Vercel — Hosting and serving the application.
• Trigger.dev — Running background work such as analysis and curriculum building.
• OpenRouter — Routing prompts and transcripts to the AI models that analyse them.
• Apify — Fetching transcripts for the YouTube videos you capture.
• Google — Optional sign-in with a Google account.
• YouTube — Embedded video playback and thumbnails.
• PostHog — Product analytics, held in the European Union.

Each of these providers has its own privacy policy governing what it does with the data it holds. We do not pass your personal information to anyone outside this list, other than where we are legally required to, or where a business transfer occurs and you are told about it first.

TubeQuest does not accept file uploads. There is no image upload, no document upload, no video upload, and no avatar upload beyond whatever your sign-in provider supplies.

Because of that, we operate no storage bucket at all — there is nothing that could be public or private, and no file of yours sitting behind an access-control setting that might be wrong. Everything we hold about you is a database row, protected by row-level security so that queries made in your session can reach only your own rows.

If we ever add uploads, this section changes before the feature ships, and we will tell you.

TubeQuest uses YouTube API Services to find video information and to embed playback. By using TubeQuest you also agree to the YouTube Terms of Service, and Google's Privacy Policy applies to data Google collects through those services.

We embed the player through YouTube's no-cookie domain, which limits the tracking cookies the embed sets before you press play. Once you play a video, Google may collect data about that playback under its own policy, and we have no control over it.

You can revoke TubeQuest's access to your Google data at any time through your Google account's security settings.

We use cookies that are necessary for the service to work: session cookies set by our authentication provider so you stay signed in, and preference cookies such as your light or dark theme choice. We do not use advertising cookies.

We do not currently run any product analytics. When we do, we will use PostHog on its European Union infrastructure, with autocapture switched off so that we do not passively record every click and page view.

When analytics is running it will receive opaque identifiers, counts and buckets only. Video titles and watch URLs never leave our database into analytics. This is a deliberate design rule in the product, not a configuration preference, and it exists so that what you watch stays between you and your account.

We are an Australian company, and our providers operate globally. Your data is stored and processed on infrastructure that may be located outside Australia, including in the United States and the European Union.

By using TubeQuest you consent to that transfer. We take reasonable steps to ensure our providers handle your information in a way consistent with the Australian Privacy Principles.

We keep your account data for as long as your account exists. Delete the account and the associated records are deleted with it.

Some records outlive the account for a short period because they have to: billing and tax records we are legally required to retain, and security or abuse logs. Transcripts we fetch are cached and shared across accounts in de-identified form, holding no link to who captured the video.

You can delete your account from your account settings at any time. Doing so removes your profile and cascades to your quests, captured videos, analyses, notes, watch history and check-ins.

You can also simply ask. Write to hello@tubequest.xyz and we will delete what we hold about you, including anything you have added to the product, without requiring a reason. We will confirm when it is done.

Under the Australian Privacy Principles you may also ask us for a copy of the personal information we hold, ask us to correct it if it is wrong, and complain if you think we have mishandled it. If you are in the United Kingdom or the European Economic Area you have equivalent rights under the UK GDPR and GDPR, including data portability and the right to object to certain processing.

We answer requests within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner.

TubeQuest is not intended for children under 16, and we do not knowingly collect their personal information. If you believe a child has given us data, write to us and we will delete it.

Access to your data is enforced at the database, not only in the application: row-level security policies mean a query made in your session can return only rows belonging to you. Traffic is encrypted in transit, credentials are held by specialist providers rather than by us, and access to production systems is limited.

No system is perfectly secure. If a breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

When this policy changes we update the effective date at the top. For changes that materially affect how we use your data, we will tell you directly rather than relying on you noticing.

Questions, requests and complaints all go to the same place, and a person reads them.

• hello@tubequest.xyz
• Bigmoves PTY LTD, Level 1, 241 Adelaide St, Suite #1341, Brisbane City, QLD, Australia, 4000