VRTub Privacy Policy

Effective date: 2026-10-16

This Privacy Policy explains how the VRTub app ("VRTub", "the app"), developed by Lib5 ("we", "us"), handles information. VRTub is a video player for Apple Vision Pro (visionOS).

Summary. VRTub has no user accounts of its own. We do not collect, receive, store, sell or share your personal data. The app only downloads its settings from vrtub.com, without any personal data. Everything the app needs — including sign-in tokens — stays on your device. VRTub contains no ads, analytics or tracking.

1. Google user data (YouTube)

YouTube sign-in is optional. If you sign in with Google, VRTub requests a single OAuth scope:

https://www.googleapis.com/auth/youtube.readonly

1.1 Data accessed

Using that scope, VRTub accesses only:

your YouTube channel name and avatar image (shown in the app so you know which account is signed in);
your YouTube subscriptions;
your playlists, including your Liked videos playlist;
YouTube's public video data — such as titles, thumbnails, channel names and durations — used to display your feeds, search results and trending videos.

VRTub does not access your email address, contacts, or any other Google account data. Access is read-only: VRTub cannot post, comment, like, subscribe, unsubscribe, upload, or change anything in your YouTube or Google account.

1.2 How the data is used

Google user data is used solely to show you your own YouTube feeds inside the app and to play the videos you choose. Specifically, Google user data is:

not used for advertising, including targeted, personalized or interest-based ads;
not sold, rented or otherwise transferred to third parties;
not used to develop, improve or train generalized artificial intelligence or machine learning models;
not used to determine creditworthiness or for lending purposes;
not read by any human. The data never leaves your device except in requests sent directly to Google, so neither we nor anyone else can read it.

1.3 Storage and security

The OAuth tokens issued by Google (refresh token and access token) and your channel name and avatar are stored only on your device, in the Apple Keychain.
No Google user data is ever sent to us or to any party other than Google.
Feed data (subscriptions, playlists, search results, trending videos, thumbnails) is fetched from Google over encrypted HTTPS connections and kept in a cache on your device so it is not fetched again too often. The cache stays on the device and is deleted when you sign out.

1.4 Sharing

We do not share Google user data with anyone. For YouTube, the app communicates only with Google's own services (Google sign-in and the YouTube Data API) to retrieve your data and to stream videos.

1.5 Revoking access and deleting data

Sign Out in the app: open the Accounts tab and choose Sign Out. This deletes the tokens and your channel name and avatar from the device and revokes VRTub's access grant at Google.
Revoke at Google: you can remove VRTub's access at any time at https://myaccount.google.com/permissions.
Delete the app: deleting VRTub removes its files and caches from your device. Because Apple may keep Keychain items after an app is deleted, we recommend signing out in the app first, or revoking access at Google as described above, which invalidates any stored token.

Since we hold no copy of your data, there is nothing for us to delete on our side. If you have questions, contact us using the details below.

1.6 Limited Use disclosure

VRTub's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

1.7 YouTube API Services

VRTub uses YouTube API Services. By using the YouTube features of VRTub you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy. You can revoke VRTub's access to your data via the Google security settings page.

2. Other app data (non-Google)

Network shares (SMB / NAS): server addresses, user names and passwords you enter are stored only on your device, in the Apple Keychain, and are used only to connect directly to your server.
Local files: files you open are read on your device and are not uploaded anywhere.
Generated subtitles: speech recognition and translation are performed on the device using Apple's frameworks. No audio or transcript leaves your device for subtitle generation.
Moments: snapshots you save are stored on your device.
App settings from vrtub.com: the app regularly downloads a small settings file from vrtub.com (for example, how many YouTube searches the app allows per day). The request contains no account, viewing or device information, and vrtub.com keeps no log of these requests.

None of this information is ever sent to us. When you connect to a third-party service (such as your NAS or YouTube), that service's own privacy policy applies to the data it receives.

3. Analytics, advertising and tracking

VRTub contains no analytics, advertising, tracking or crash-reporting SDKs of its own and does not track you across apps or websites. This website likewise uses no cookies, analytics or trackers.

4. Children

VRTub is not directed to children under 13, and we do not knowingly collect personal information from children.

5. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If a change materially affects how Google user data is used, we will make it clear in the app before it takes effect.

6. Contact

Lib5
Email: cgrotal@gmail.com
Website: https://vrtub.com/