Privacy Policy

Last updated 17 August 2026 · Applies to VideoVault for iPhone and iPad, version 1.3.0.

VideoVault has no accounts, no servers, and no analytics. There is no mechanism by which we could collect your data, because there is nowhere for it to go.

What we collect

Nothing. We do not operate a server, an account system, or an analytics service, and the app contains no third-party tracking or advertising SDKs. We receive no information about you, your device, your library, or what your child watches — not in aggregate, not anonymously, not at all.

What stays on your device

Everything the app knows lives in local storage on the device where you set it up, and is included in your normal iOS device backups:

• Your imported sources, approved and rejected videos, playlists, and tags.
• Your child's activity inside the app — favorites, watch history, play counts, and the Up Next queue.
• Your YouTube API key and your parent PIN, which are stored in the iOS Keychain rather than ordinary app storage.

Deleting the app removes all of it. We cannot recover any of it for you, because we never had it.

Where data does travel: YouTube

VideoVault is a curation layer over YouTube, so using it means talking to Google's services from your device:

• The YouTube Data API. When you import, search, or check a source for new uploads, the app calls googleapis.com using your own API key to fetch titles, durations, thumbnails, and category information. Your key is sent only to Google, never to us.
• Playback. Videos play through YouTube's official embedded player inside the app. As with any embedded YouTube player, Google receives the requests that playback requires — including your device's IP address — and may set cookies inside that player. This traffic is governed by Google's Privacy Policy and the YouTube Terms of Service, not by us.
• Thumbnails are loaded from YouTube's image servers (ytimg.com).

VideoVault blocks navigation out of the embedded player, so a tap inside a video cannot escape into the full YouTube app or website. What it cannot do is change how Google's own player behaves once it's running.

Tips

If you leave a tip, Apple processes the purchase through the App Store. We receive Apple's standard sales reports, which do not identify you. We never see your payment details.

Sharing a library between devices

Exporting a library produces a file that you control and share yourself — by AirDrop, Files, or however you like. Exports never include your API key, and your child's favorites and watch history are left out unless you explicitly choose to include them.

Children

VideoVault is designed to be used by children under a parent's curation. It collects no personal information from anyone, children included, and it shows no advertising of its own. It has no accounts, no comments, no messaging, and no uploads.

One limit worth knowing about: because playback uses YouTube's own embedded player, that player's controls belong to Google, not to us. Its share button can open the standard iOS share sheet with a link to the video being watched, which means a child could copy or send that link. We block the player from navigating anywhere else, but we can't remove Google's controls from inside it.

This website

Changes

If this policy changes, the updated version will be posted on this page with a new date above. Substantive changes will also be noted in the app's release notes.

Contact

Questions about privacy are welcome in the VideoVault Discord, or as an issue on GitHub.