Skim LogoSkim

Privacy Policy

Last updated: March 9, 2026

1. Introduction

Welcome to Skim ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

By using Skim, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

2. Google API Services User Data Policy

Limited Use Disclosure

Skim's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google or connect your YouTube account, Skim requests access to the following OAuth scopes:

  • auth/userinfo.email — to identify your account using your Google email address.
  • auth/youtube.readonly — to read your YouTube subscriptions and build your personalized feed. This is read-only; Skim never modifies your YouTube account.

Specifically, Skim:

  • Only requests the minimum scopes necessary to provide its core features (personalized feed and video summaries).
  • Does not sell, rent, or trade your Google user data to any third party.
  • Does not use your Google user data for serving ads, including retargeting, personalized, or interest-based advertising.
  • Does not use your Google user data to determine creditworthiness or for lending purposes.
  • Only transfers data to third-party services (such as AI providers) when strictly necessary to provide user-facing features (e.g., generating video summaries), and only with your consent.
  • Does not allow humans to read your Google user data unless you provide explicit consent, or it is necessary for security, legal compliance, or in aggregated/anonymized form.

3. Information We Collect

3.1 Information you provide

  • Account data: email address and profile information when you sign in with Google or Apple.
  • Preferences: selected topics, channels, language, and theme settings.
  • Feedback: messages and screenshots you submit through the app's feedback feature.

3.2 Information from Google/YouTube APIs

  • YouTube subscriptions: the list of channels you are subscribed to, used to build your personalized feed.
  • Email address: your Google email, used for account identification.

3.3 Information collected automatically

  • Usage data: interactions with videos (saved, dismissed, viewed), search queries, and summary requests.
  • Error reports: crash logs and performance data via Sentry, used to improve app stability.

3.4 Anonymous accounts

You can use Skim without signing in via an anonymous account. Anonymous accounts store preferences and interactions locally and on our servers, but are not linked to any personal identity. Anonymous accounts inactive for more than 24 hours are automatically deleted.

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Build and deliver your personalized video feed based on your YouTube subscriptions and selected topics.
  • Generate AI-powered summaries of videos you are interested in.
  • Track time saved and usage statistics displayed in your settings.
  • Communicate with you about updates, security alerts, and support messages.
  • Detect, prevent, and address technical issues and abuse.

5. Third-Party Service Providers

We share data with the following categories of third-party providers, only to the extent necessary to operate the Service:

  • Authentication: Google OAuth and Apple Sign In (via Supabase Auth) for account creation and login.
  • Database and infrastructure: Supabase (PostgreSQL) for data storage, Cloudflare Workers for API processing.
  • AI summarization: LLM providers (Groq, Cerebras, SambaNova, Mistral, Google Gemini) receive video transcripts to generate summaries. These providers process data per their own privacy policies and do not retain your personal information.
  • Error tracking: Sentry receives crash reports and performance data to help us fix bugs.
  • Email: Resend for transactional email (feedback notifications).

We do not sell or share your personal data with advertisers, data brokers, or information resellers.

6. Data Storage and Security

Your data is stored on Supabase-hosted infrastructure (PostgreSQL databases with Row Level Security enabled). All data is transmitted over HTTPS/TLS encryption. API requests are authenticated using secure tokens.

We implement appropriate technical and organizational measures to protect your data, including:

  • Row Level Security (RLS) ensuring users can only access their own data.
  • Encrypted connections for all data in transit.
  • Service-role keys restricted to backend-only operations.
  • No storage of Google OAuth tokens on our servers beyond the authenticated session.

7. Data Retention and Deletion

We retain your personal data for as long as your account is active. You can request deletion of your account and all associated data at any time by contacting us at [email protected].

  • Account deletion: upon request, we delete your profile, preferences, saved videos, interactions, and feedback within 30 days.
  • Anonymous accounts: automatically deleted after 24 hours of inactivity.
  • Google data: if you revoke Skim's access to your Google account, we stop accessing your YouTube data immediately. You can revoke access at any time via Google Security Settings. You can also request deletion of any previously collected Google data. See also Google's Privacy Policy.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you.
  • Rectification: request correction of inaccurate data.
  • Deletion: request deletion of your data.
  • Portability: request your data in a structured, machine-readable format.
  • Objection: object to processing of your data in certain circumstances.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

Skim is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected data from a child under 13, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].