Privacy Policy

Submate is operated by Small Big Brands LLC ("we", "us"). This Privacy Policy explains what information we collect when you use the Submate mobile app and related services (together, the "Service"), why we collect it, and what we do with it. We try to keep this short and honest. If anything's unclear, email us at any address ending in @submate.app — they all reach the same inbox.

1. What we collect

Account information

When you sign in with Google, we receive your email address, your name, and a Google-issued user identifier. We use these to create your account so your saved flashcards sync across devices. We do not receive your Google password or any other account details.

Content you save

When you star a subtitle in the app, we record the YouTube video ID, the source-language and translated text, the timestamps of that line, and the corresponding audio clip extracted from the public YouTube video. This is what becomes your flashcard for spaced-repetition review.

Usage data

We log the actions you take inside the app — videos watched, flashcards reviewed, daily activity minutes — so we can show you your streak and so we can fix bugs and improve the app.

Feedback you submit

If you send feedback through the app, we receive your message, your email address (if you provide one), and any photos or videos you attach.

Technical data

Standard server logs (IP address, timestamps, request paths, app version) for operational and security purposes. These rotate every 14 days.

2. What we don't collect

• We do not collect your contacts, location, microphone audio, or any data outside what the app explicitly does.
• We do not show ads. We have no advertising SDKs.
• We do not sell, rent, or share your personal data with third parties for marketing.
• We do not use third-party analytics SDKs that build profiles across other apps.

3. Third parties we use

Submate relies on a few external services to function. Each receives the minimum data needed to do its job:

• Google: for account sign-in (Google OAuth). Receives your sign-in flow only.
• OpenAI: for word definitions, subtitle translation, and reading the 12-digit pairing code from camera photos. Receives only the specific text or image you're asking about; OpenAI's API policy does not retain inputs for model training.
• YouTube: we fetch publicly available video metadata and captions on your behalf. No YouTube account credentials are involved.
• Apple / Google Play: if you upgrade to a paid tier, your payment is processed by Apple or Google's in-app purchase system. We never see your card details.

4. Where your data lives

Your account information, saved flashcards, audio clips, and feedback are stored on a server we operate. Server backups are encrypted and retained for 30 days. We're a small team and we don't move your data off this server.

5. How long we keep it

• Account + flashcards: as long as your account exists. Delete your account in Settings to erase them.
• Server logs: 14 days.
• Feedback messages: indefinitely, so we can refer back. Email us if you'd like a specific message removed.

6. Your rights

You can:

• Access: see all your saved flashcards in the app.
• Delete: remove your account and all associated data via Settings → Delete account, or by emailing us.
• Export: request a JSON export of your data by emailing any address at @submate.app. We'll send it within 14 days.
• Object / restrict: if you're in the EU, UK, or California, you have additional rights under GDPR / CCPA. Contact us and we'll comply.

7. Children

Submate is not directed at children under 13 (or 16 in the EU). We don't knowingly collect personal data from children. If you believe a child has signed up, contact us and we'll delete the account.

8. Security

We protect your data with industry-standard precautions: HTTPS for all network traffic, server access restricted to authenticated keys, and encrypted database backups. No system is perfectly secure, and we can't guarantee absolute security. If we ever discover a breach affecting your data, we'll notify you within 72 hours.

9. Changes to this policy

If we materially change this policy, we'll update the date at the top and notify users via the app. Continued use after a change means you accept the updated terms.

10. Contact

Questions, concerns, or requests: email any address ending in @submate.app — every address on the domain forwards to the same human-monitored inbox. (We don't publish a single address here because it would be scraped instantly. Pick anything you like: privacy, support, cam, etc.)