Privacy Policy
Last updated: 13 October 2026
Questions about this page? Email support@unwatch.in.
This policy explains what Unwatch (run by Deepak Sharma, India) collects, why, and your choices. We follow India's Digital Personal Data Protection Act, 2023, and give the same rights to users everywhere.
What we collect
- Account: your email address, a scrambled (hashed) version of your password — never the password itself — and, if you sign in with Google or GitHub, the account ID and verified email they share with us.
- What you do in the app: the YouTube links you add, the lessons made for you, your questions and the tutor's answers, notes, quiz scores, flashcard progress and course progress.
- Usage and security: how many minutes and AI requests you've used, sign-in sessions, and basic technical logs (like IP address) to keep the service secure and prevent abuse.
- Payments: handled by Dodo Payments. We receive your subscription status and customer ID — never your card or bank details.
Why we use it
- To provide the service: create lessons, answer your questions, keep your progress.
- To run your account and plan: sign-in, email codes, limits, billing status.
- Own Key plan: your Gemini API key, encrypted (AES-256-GCM) with a key only our server holds. It's used only to send your own account's requests to Google, never shown back in full (we display its first and last 4 characters), never written to logs, and deleted when you remove it in the app.
- To keep Unwatch secure and working, and to understand costs.
We don't sell your data, and we don't use advertising or third-party tracking cookies.
Who processes it for us
- Google (Gemini API and YouTube Data API): video links, lesson text and your questions are sent to Google's AI to generate lessons and answers. We use Google's paid API, under which Google doesn't use this data to train its models. On the Own Key plan your requests go through your own key, so Google's terms for your key apply (on Google's free tier, Google may use the data to improve its products).
- Caption providers (Supadata, TranscriptAPI): for “Transcript only” lessons we send them the YouTube video link to get its existing captions. Nothing about you is sent.
- Dodo Payments: checkout, subscriptions, invoices and tax.
- Our email provider (Resend): sends sign-up codes and account emails.
- Our hosting provider (Hetzner, with servers in Helsinki, Finland): stores the app and its data.
- Google / GitHub sign-in, only if you choose them.
Some of these providers may process data outside India, with appropriate safeguards.
Cookies and local storage
We use one essential cookie to keep you signed in (and a short-lived one during sign-up), plus your browser's local storage to remember small preferences like light/dark mode. No ad or tracking cookies.
How long we keep it
We keep your account data while your account is open. When you delete your account we delete your personal data within 30 days, except what we must keep by law (for example, billing records held by Dodo Payments).
Your rights
You can ask to see, correct, export or delete your data, or withdraw consent, by emailing support@unwatch.in. You can change your email or delete your account yourself in the app (Account). We'll reply within 30 days. If you're unhappy with our answer you can complain to the Data Protection Board of India (or your local authority).
Security
Passwords are hashed, sign-in codes expire after 10 minutes, connections are encrypted (HTTPS), and access to data is restricted. No system is perfectly secure, but we'll tell you promptly if a breach affects your data.
Children
Unwatch is for people aged 18 or over and isn't meant for children (anyone under 18). If you believe a child has given us data, contact us and we'll delete it.
Changes
We'll post changes here and update the date above; important changes will also be emailed to you.