Privacy Policy
Effective May 2026
We take your privacy seriously. This policy explains what we collect, why, and what you can do about it.
What we collect
We collect the minimum needed to make the service work. When you sign in with Google, we get your name, email address, and profile picture. When you use Summarise, we store the YouTube URLs you paste, the prompts you choose or write, and the generated output — so you can revisit your history. We also keep basic usage metadata (request timestamps, token counts, which provider was used) for quota enforcement and service improvement.
What we don't collect
We don't collect any personal information beyond what's listed above. We don't track your browsing across other sites. We don't sell your data. We don't train generative models on your content. We don't require a credit card to start.
API keys
If you bring your own API key (BYOK), we encrypt it using AES-256 at rest in our database. It's used only to route your summarise requests through the provider you selected (Anthropic, OpenAI, OpenRouter, or Gemini). We never expose your key to the client side, and we never share it with anyone. You can delete your key at any time from your settings page.
How we use your data
Your data is used solely to provide the Summarise service: authenticating you, processing your requests, showing your history, and enforcing the free-tier quota. We may use anonymized, aggregated data (e.g., 'users ran 10K summaries this month') for internal analytics, but nothing personally identifiable leaves our systems.
Third-party services
When you use the platform free tier, requests are sent to OpenRouter using our house key. When you bring your own key, requests go directly through your chosen provider (Anthropic, OpenAI, OpenRouter, or Gemini). Each provider has its own privacy policy and data handling practices. We encourage you to review them. YouTube transcripts are fetched via the youtube-transcript-api; only the video ID is sent — no personal information.
Data retention & deletion
We keep your request history until you delete it. You can delete individual entries from your history page, clear your entire history, or remove your API keys from settings. If you want to delete your account entirely, see our Data Deletion page for instructions.
Cookies
We use a session cookie (httpOnly, secure) to keep you logged in. No tracking cookies, no third-party cookies, no fingerprinting. The session cookie expires when you log out or after a period of inactivity.
Your rights
You can access, update, or delete your personal data at any time. You can export your history by copying from the app. You can disconnect your Google account at any time — your data will remain until you request deletion. If you're in the EU or a similar jurisdiction, you have the right to data portability and the right to be forgotten; just email us.
Children's privacy
Summarise is not intended for users under 13. We don't knowingly collect data from children. If we learn that a child under 13 has created an account, we'll delete it promptly.
Changes to this policy
If we update this policy, we'll post the new version here and update the effective date. Material changes will be communicated via email or in-app notice.
Contact
Privacy questions? hello@summarise.io.