Tubik

Tubik privacy policy

Tubik stores what it needs to play videos and to remember a parent's setup. It has no account of its own, and it does not send usage analytics or build an advertising profile.

This policy describes Tubik (dev.twenty3p.tubik) and this website (tubik.23p.dev). Questions belong in this repository's issues.

On the device

The app stores this on the phone:

  • Subscriptions, playlists, bookmarks, and downloads
  • Watch history and search history, which both start on. Either can be turned off. Turning search history off clears it.
  • Settings, including the Allowlist, Music Removal, and Screen Pin
  • A Parent PIN, if you set one, stored as a salted hash. The PIN itself is not stored, and it is not sent off the device.

Music Removal runs on the device. The audio is not uploaded.

If the app crashes, it can keep a crash log on the device. That log is not uploaded.

While you watch

Playing, searching, and loading subscriptions contacts YouTube from this device. YouTube can see the device's IP address and which videos and channels are requested. Tubik does not ask you to sign in with a Google or YouTube account.

New-video notifications start on. While they are on, the app also checks subscriptions in the background by contacting YouTube.

Two lookups run during playback unless you turn them off:

  • SponsorBlock starts on. The video ID is sent to sponsor.ajay.app to fetch skip segments.
  • Dislike counts start on. The video ID is sent to https://ryd-proxy.kavin.rocks to fetch them.

DeArrow starts off. If you turn it on, the video ID is sent to SponsorBlock's branding service and to https://dearrow-thumb.ajay.app.

Submitting SponsorBlock segments or DeArrow titles starts off. Turning that on also sends a SponsorBlock user ID. Read SponsorBlock's privacy policy and terms of use before contributing.

App updates and website

To check whether a newer release is available, Tubik periodically fetches the static update manifest at https://tubik.23p.dev/updates/latest.json (and downloads signed APK releases from https://releases.tubik.23p.dev when a parent initiates an update).

Automatic background update checks start on and can be turned off at any time in Settings. The app sends no device identifiers, account data, or usage telemetry. This website uses zero tracking scripts, zero cookies, and has Cloudflare Web Analytics disabled.

Sync

Sync starts off. Subscriptions, playlists, and history then stay on the device.

If you sign in, subscriptions and playlists are stored on the server you choose:

  • A LibreTube sync server. The address filled in by default is https://sync.libretube.dev. Data there is pseudonymized and is not end-to-end encrypted. You can point the app at a server you host.
  • A Piped instance you host. The app does not download a public list of Piped instances.

Read that server's privacy policy before signing in. Logout and delete-account in Tubik send that request to the server. What the server keeps is up to its operator.

YouTube

Tubik is not affiliated with, authorized by, or endorsed by YouTube, Google LLC, or their affiliates. Names and content shown in the app belong to their owners.

Changes

Using Tubik means you accept this policy. When it changes, the update is published in the repository's PRIVACY_POLICY.md and reflected here.