Privacy Policy

TubeRank is a tool for tracking the prediction accuracy of public finance YouTubers. This page describes exactly what data we collect from you, why we collect it, where it lives, and what you can do about it.

What we collect

Apple Sign-In identity

When you sign in with Apple we receive an opaque, app-scoped identifier (the sub claim) that uniquely identifies you to TubeRank. We also receive your email address and name only if you explicitly choose to share them (Apple defaults to share-on-first-sign-in, hide-on-subsequent). We never see your Apple ID password.

Sign-in abuse protection

When you sign in, we store the connection's IP address with an attempt counter to limit repeated authentication requests. These rate-limit records are kept for abuse prevention, are not used to locate you or for advertising, and do not have automatic deletion configured. Service error logs can also include an account identifier or IP address with technical error details so we can investigate failed requests.

Push notification token

If you grant notification permission, we register a push token associated with your device and account so we can deliver creator-update notifications. The native app introduced in version 1.1.0 uses an Apple Push Notification service (APNs) token and direct APNs delivery. Older version 1.0 builds use the Expo push service to register tokens and deliver notifications through APNs. These tokens can change and are used for notification delivery, not advertising or tracking across apps.

Your follows and notes

Choices you make in the app — which creators you follow, whether you want notifications for each, and any bookmarks or private notes you attach to a prediction — are stored against your account so the app remembers them between sessions and devices. Notes are visible to you and to agents you explicitly authorize with personal read access. Your ticker watchlist is different: it is kept only on this device, never sent to our servers, and does not sync between devices. It stays on the device until you remove the tickers or a different Apple ID signs in on that device — deleting the app does not necessarily clear it.

Your portfolio

Portfolio holdings, share quantities, purchase costs and your own fair-value estimates are saved locally in your browser or the native app. They do not require an account and do not sync between the app, website or devices. Company names or tickers you search for, and the tickers you request prices for, are sent to our search and quote endpoints, which retrieve instrument information and prices from Yahoo Finance. The symbols in your portfolio are also sent to TubeRank to match published creator research in the holdings digest, holding research and Journal. These requests do not create a server-side portfolio. Quantities, costs and estimates are not uploaded to our servers or the quote provider. Local app data may be included in your device backups. Remove holdings in Portfolio to delete them; clearing website data removes the browser portfolio. Signing out or deleting an account does not delete these separate local holdings.

Email alerts (no account needed)

If you ask to be emailed when a ticker's calls resolve, we store your email address, the ticker, the page you signed up on, and the campaign tags carried by the link that brought you there (such as utm_source, or the website you came from). We do not store your IP address with the signup; to limit abuse we count signups per connection using a one-way hash that is not linked to your email. We use the address only to send those updates. We never sell it or share it for marketing, and every alert email carries a one-click unsubscribe link. To be removed at any time, email support@tuberank.app.

Morning Brief preferences

Morning Brief is optional and off by default. If you enable it, we save your chosen delivery time and time zone against your account. We use your followed creators and saved calls to prepare a private recap of new predictions and verified outcomes. The recap does not include the contents of your private notes. We keep brief records and notification delivery records, including a hash of each device token, to avoid repeating the same update. You can turn Morning Brief off in Settings. Deleting your account deletes these preferences, recaps and delivery records.

Agent access keys

Agent access is optional. When you create a key, we store its name, selected permissions, creation and expiry dates, last-used date, revocation status, and a cryptographic hash of the key against your account. The complete key is returned once and is not stored on our server. Depending on the permissions you choose, an agent holding the key can read your personal TubeRank data, manage creator follows, edit saved calls and notes, or change your Morning Brief preferences. Public research does not require a key. Keys expire within 90 days; you can revoke them in Settings → Agent access. Revocation stops access, while key metadata remains until your account is deleted.

Crash reports and diagnostics

The native app introduced in version 1.1.0 does not include the Sentry crash-reporting SDK. Older version 1.0 builds include that SDK and, when reporting is enabled, can send crash reports and performance diagnostics — device model, OS version, app version, and the stack trace of the failure — to Sentry. Those older app reports are configured not to attach your account identifier or send personal information. They can include a random per-install identifier that is separate from your Apple ID and TubeRank account.

Our website and API also use Sentry when service monitoring is enabled to record errors and sampled performance traces. These service diagnostics help us investigate failed requests and keep the service working. They are not used for advertising or tracking across apps. Updating to the native app does not remove this monitoring from our website and API.

Website analytics

The website uses Vercel Web Analytics to count page views. It sets no cookies and does not follow you across other sites. For each page view it receives the page address, the site that linked you there, and your browser, operating system, device type and approximate country — the country is derived from your IP address, which is not stored. We strip every part of the address except campaign tags (such as utm_source) before it is sent. We use these counts only to see which pages and links people find useful.

When you arrive through a tagged link, the website remembers that link's campaign tags in your browser's local storage for up to 30 days. They are sent to us only if you sign up for an email alert or create an account on the website, and are stored with that signup so we can tell which links bring people in.

If you have an account, we record the last time the app or a signed-in browser checked your session, and which days you used TubeRank, so we can count returning readers. Deleting your account deletes this record.

What we do not collect

• No advertising identifiers (IDFA, IDFV)
• No advertising or cross-site tracking, and no analytics that share data with advertisers
• No location data beyond the approximate country in aggregate website analytics
• No browsing history outside the app
• No payment information (TubeRank is currently free)

Where it's stored

Account data is stored in a managed Postgres database (Neon) hosted in the United States. The mobile app caches some of your own data locally on your device for offline reading. Signing in on the website uses a secure, HttpOnly session cookie that expires after 30 days. The website keeps your theme preference and ticker watchlist in your browser's local storage. Our internal review tool stores its access token in the reviewer's own browser (local storage, mirrored to a first-party cookie).

Who we share it with

We do not sell or rent your data. We do use a small number of service providers that act as data processors on our behalf:

• Apple — Sign in with Apple, push delivery via APNs
• Expo — push token registration and notification delivery for older version 1.0 builds (Expo's privacy policy)
• Vercel — application hosting, edge delivery and cookieless website analytics (Vercel's privacy policy)
• Neon — managed Postgres (Neon's privacy policy)
• Sentry — website and API error reports and performance traces when monitoring is enabled, plus app crash reports and diagnostics from older version 1.0 builds when reporting is enabled (Sentry's privacy policy)

How long we keep it

Account data is kept for as long as your account is active. When you delete your account from the app, every row tied to your user ID — follows, notes and bookmarks, push tokens, agent keys, Morning Brief preferences and recaps, activity days, and the account record itself — is removed immediately. Deletion requested by email is completed within 30 days. Email alert signups are kept until you unsubscribe or ask us to delete them. Aggregate non-identifying data (e.g. counts of users following a given channel) may persist.

Your rights

• Access — email support@tuberank.appand we'll send you a JSON export of every row we hold for your account.
• Deletion — in the app, open Settings and tap Delete account; your account and everything tied to it is removed immediately. You can also email the same address and we'll confirm and complete it within 30 days.
• Correction— email us and we'll fix any incorrect data we hold for you.

Children

TubeRank is not directed at users under 13, and we do not knowingly collect data from anyone under 13. If you are a parent or guardian and discover that your child has signed in, please email us and we'll delete the account.

Changes to this policy

Material changes to this policy are reflected in the Last updated date above. Continuing to use TubeRank after a change means you accept the updated policy.

Contact

Questions about this policy? Email support@tuberank.app. See also our Terms of Service and Support page.