ytWatchTime Privacy Policy

1. Purpose of the Policy

This policy explains how personal, device, and security-signal data collected during the use of the ytWatchTime application is securely processed, stored, used, and, when necessary, shared in accordance with legal regulations.

2. Data Collected

2.1. Device and System Data

• Device name, brand, model, and hardware identifiers
• Android OS version & build information (PRODUCT, MANUFACTURER, BRAND, DEVICE, MODEL, HARDWARE, FINGERPRINT)
• Hardware ID (HWID), Android ID, MAC address
• OpenGL renderer and graphics runtime information
• App version, build numbers, and execution session logs
• IP address, network provider, and network connection status

2.2. User Account Data

• Email address used for Google Sign-In authentication
• Name, display name, and profile photo provided by Google Account
• YouTube channel name and channel ID associated with the account
• Videos watched, likes completed, subscriptions verified, and completed tasks

2.3. App Usage Data

• Task completion history, earned points/coins transaction logs
• In-app purchases and subscriptions processed via Google Play Billing
• App navigation, behavior logs, and feature interaction metrics
• Notification interaction logs and usage duration
• Firebase Analytics, Crashlytics diagnostics, and Messaging delivery logs

2.4. Security Signals & Device Integrity Data

Collected to detect abuse, prevent multi-account farming, and ensure fair service operation:

• Network Indicators: VPN active status, proxy usage, transport type (Wi-Fi, Cellular, Ethernet, VPN, Bluetooth), network interface summaries
• Tethering Indicators: USB tethering status, Bluetooth tethering, PC connection likelihood
• Root & Emulation Signals: Rooted device binaries (su, Magisk), emulator execution score, build tags/props summary
• System & Debug Signals: ADB enabled flag, ADB over TCP, app debuggable status
• Accessibility Risk Analysis: Detection of suspicious accessibility services (e.g., auto-clicker, macro, or automation tools)
• Graphics & Runtime: GL renderer string and GPU fingerprinting
• Summaries & Hashes: Build integrity summary, hardware signature, hashed Android ID

2.5. Optional Data (with user permission)

• Push Notification permission for campaign status alerts and reward notifications

3. Purposes of Data Use

• Improving application performance, responsiveness, and user experience
• Operating the voluntary task system and calculating reward distribution fairly
• Detecting, preventing, and mitigating fraudulent activity (multi-account farming, automated bots, emulator misuse, VPN location spoofing)
• Authenticating users securely via Google Sign-In
• Displaying relevant community channels and content
• Promoting user channels and videos strictly within YouTube's Community Guidelines
• Error tracking, crash diagnostics, and application security maintenance
• Processing billing transactions and point store purchases

4. Third-Party Services

ytWatchTime integrates the following trusted external services:

• Google Firebase: Auth, Crashlytics, Messaging, and Realtime/Firestore Analytics
• Google Sign-In & Credential Manager: Secure user authentication
• AdMob & Ad Services: Ad delivery and frequency management
• Google Play Billing: In-app purchases and point store transactions

No personal data is sold or shared with external parties for commercial marketing outside the core service operational scope.

5. Anti-Fraud, Multi-Account, and Misuse Policy

• Multi-Account Limit: Users creating more than 3 accounts from the same device or network IP, or engaging in automated phone farming, may be permanently banned.
• Emulators & Modified APKs: Running the application on emulators, virtual devices, or modified/tampered APKs is strictly prohibited.
• VPN & Proxy Restriction: Using VPN or proxy networks to manipulate location or bypass limits is restricted.
• Bots & Auto-Clickers: Automatic clicking, macro scripts, or background task bots will result in immediate account termination.
• Coin & Task Abuse: Abusing the points or campaign system will lead to account suspension and forfeiture of earned points.
• Automated Decisions: Security integrity signals may automatically trigger temporary or permanent account/device suspensions. Users may request human review (see Section 10).

6. Data Storage and Security

All user data is transmitted over encrypted HTTPS/TLS channels and stored on secure server infrastructure. Firebase logs are restricted strictly to system diagnosis and performance optimizations. Regular security audits are conducted to prevent unauthorized access.

7. WebView, Cookies & Embedded Content

The application uses an embedded Android WebView to render third-party content (e.g., YouTube) for task verification. Within WebView:

• Cookies: First-party and third-party cookies are supported to enable video playback and session state.
• JavaScript: JavaScript is enabled for page rendering and minimal verification scripts (e.g., checking voluntary like/subscribe state). Passwords, payment details, or personal messages are NEVER read or captured.
• Third-Party Content: Interacting with third-party sites inside WebView is subject to those respective sites' privacy policies and terms of service.

8. International Data Transfers

Data may be processed on secure cloud infrastructure located outside your home jurisdiction (e.g., Google Firebase servers). All transfers strictly comply with international data protection standards and Standard Contractual Clauses.

9. Legal Sharing and Disclosures

User information will only be shared with law enforcement or legal authorities if required by valid court order, legal statute, or to investigate severe security violations and fraud.

10. User Rights & Appeal Process

Under GDPR, CCPA, and global data privacy standards, you have the right to:

• Access a copy of your personal data
• Request data correction or complete account deletion
• Withdraw consent for optional permissions
• Request human review of automated fraud suspensions

Appeal Process: If your account or device is flagged or suspended by security checks, you may request human review by emailing amrtonofficial@gmail.com with the subject "Appeal – Security Decision" along with relevant account details.

11. Policy Updates

We reserve the right to update this Privacy Policy at any time. Updated versions become effective immediately upon being published inside the app.

12. Children's Privacy

ytWatchTime is not intended for children under the age of 13. We do not knowingly collect personal information from minors under 13.

13. Data Retention

User account and security log data are retained as long as the service remains operational, or as required by law for fraud prevention and legal compliance.

14. Legal Bases for Processing (GDPR)

Processing is based on contractual necessity (operating tasks and points), legitimate interests (security and fraud detection), consent (push notifications), and legal compliance.

15. California Privacy Rights (CCPA/CPRA)

California residents may exercise access, deletion, and opt-out rights by contacting us via email. We do not sell user personal information.