Privacy Policy

Last updated: September 16, 2026

CreatorGlimpse ("we", "us") builds an iOS app that shows creators their own channel analytics alongside short, relevant lessons. This page explains what data we collect, why, and how it's handled. We only collect what the app needs to function — nothing more.

What we collect

• Account identity. When you sign in with Apple, we receive a unique, anonymized identifier and — only if you choose to share it — your name and email. We never see your Apple password.
• Connected channel data. When you connect a YouTube, TikTok, or Instagram account, we request read-only access (via each platform's official OAuth flow) to your public channel metadata and performance analytics — subscriber/follower counts, view counts, and video- or post-level stats for content you already published. We never request permission to post, comment, or modify anything on your behalf.
• Comment text, for sentiment only. For a connected YouTube or Instagram account, we read the text of recent public comments on your own content solely to classify overall sentiment (positive/neutral/negative) using an AI model. We store the resulting counts plus one short example comment (to show what a "positive" or "negative" comment looked like) — not a full archive of comment text — and we never do this for accounts other than your own.
• App usage. Which lessons you've completed and your subscription tier, so the app can show your progress and the features your plan includes.

Information stored on your device

The app stores a small amount of information directly on your device — not in a browser cookie, since CreatorGlimpse is a native app, but the same category of local, on-device storage (iOS's Keychain, or your browser's local storage on web). This includes your session token (so you stay signed in), and per-device display preferences like which connected channels are featured on your Dashboard and the order of tiles on your Analytics screen. This is used solely to run the app for you — never for advertising, tracking, or fingerprinting — and we don't allow any third party to place or read anything on your device through the app.

What we don't collect

We don't use third-party advertising or analytics trackers. We don't access your device contacts, photos, location, or any data outside of what's listed above. We don't buy, sell, or rent your data to anyone, for any reason.

How we use your data

Solely to operate the app: showing your dashboard, computing trend comparisons for your niche, tracking lesson progress, and enforcing which features your subscription tier includes. Connected-platform access tokens are stored encrypted and used only to fetch the analytics described above on your behalf.

Where your data lives

Data is stored on Cloudflare's infrastructure (D1 database) and processed by our backend (Cloudflare Workers). Comment sentiment classification and AI-assisted features (like video idea generation) run on Cloudflare Workers AI — your data isn't sent to a separate third-party AI vendor. We do not operate our own physical servers.

How we protect your data

• Encryption in transit. All traffic between the app, our backend, and any third-party platform (Google, TikTok, Apple) is encrypted using TLS/HTTPS. We never transmit account credentials, access tokens, or channel data over an unencrypted connection.
• Encryption at rest. OAuth access and refresh tokens for connected accounts (including Google/YouTube) are encrypted before being written to our database. Cloudflare D1 additionally encrypts all stored data at rest at the infrastructure level.
• Access control. Only the backend service itself can read decrypted tokens at request time to make an API call on your behalf; we do not expose them to the app's frontend, to analytics tools, or to any employee dashboard. There is no general-purpose admin panel with standing access to user tokens or Google user data.
• Minimal retention. We keep connected-platform data only as long as your account is connected and active. Disconnecting a platform or deleting your account (see "Your controls" below) removes the associated tokens and cached data, including anything obtained via YouTube API Services.
• Infrastructure security. Our backend runs on Cloudflare Workers and D1, which are covered by Cloudflare's own security program (including SOC 2 Type II and ISO 27001 certifications) — see Cloudflare's compliance resources. We do not operate our own physical servers.

Data sharing and disclosure

We do not sell, rent, trade, or share your data — including any data obtained via Google's YouTube API Services ("Google user data") — with advertisers, data brokers, or any other third party for their own purposes. We disclose Google user data only in these limited cases:

• Service providers acting on our behalf. Cloudflare (D1 database storage, Workers compute, and Workers AI for on-device-equivalent sentiment classification) processes data solely to operate CreatorGlimpse for you, under Cloudflare's own confidentiality and data protection terms. Cloudflare does not use this data for its own purposes.
• Legal requirements. If required to by law, subpoena, or a valid legal process, or to protect the rights, property, or safety of CreatorGlimpse, our users, or the public.
• With your direction. If you explicitly direct us to share specific data (for example, a media kit you choose to export and send to a brand).

We never share Google user data for advertising or credit-related purposes, and no one outside CreatorGlimpse and the service providers listed above ever receives it.

YouTube API Services

CreatorGlimpse uses YouTube API Services to power the features described above — Trend Radar's trending-video and creator discovery, and your own connected channel's analytics. By connecting a YouTube channel or using Trend Radar, you are also agreeing to be bound by the YouTube Terms of Service.

Because we use YouTube API Services, Google's own Privacy Policy also applies to how Google handles data in connection with that API — see Google's Privacy Policy. You can review or revoke CreatorGlimpse's access to your Google/YouTube account at any time from Google security settings, independent of the app.

Your controls

• Disconnect any connected channel at any time from your Profile screen.
• Request full account deletion by contacting us at the email below — we'll remove your account and associated data, including any data retrieved via YouTube API Services, within 30 days.
• Revoke CreatorGlimpse's access to your YouTube or TikTok account directly from that platform's own security settings at any time, independent of the app.

Waitlist

If you submit your email on this website's waitlist form, we store it solely to notify you when the app becomes available. We don't use it for anything else, and you can ask us to remove it at any time using the contact below.

Children's privacy

CreatorGlimpse is not directed at children under 13, and we do not knowingly collect data from them.

Changes to this policy

If this policy changes materially, we'll update the "Last updated" date above and, for significant changes, notify you in the app.

Contact

Questions about this policy or your data: [email protected]