Nichevo
Nichevo — Privacy Policy
Data Controller
Nichevo (the Android app and the nichevo.fatihgo.com web version) is developed by Fatih Kunak. Contact: fatih.kunak@gmail.com.
Summary
Nichevo’s server only holds your account. Your YouTube and AI keys stay on your device; your device calls those services directly and nothing passes through the developer’s server.
Personal Data Processed
For your account, the server stores:
- Email address and name; optionally a channel name and channel identifier.
- A password hash (scrypt; your password is never stored in plain text). If you signed in with Google there is no password; a Google account ID (sub) is stored instead.
- Language and notification preferences and plan information.
- A digest of your session refresh tokens, the connected device’s browser/app information (user-agent, up to 200 characters) and creation/expiry times. Tokens expire after 60 days.
Stored on your device (never sent to the server): your YouTube and AI API keys, provider settings, your weekly content calendar, usage counters and a 24-hour cache of computed market data. Keys are in secure storage on Android and in browser storage on the web.
No location, contacts, gallery, camera or microphone data is collected.
Sign in with Google
If you choose “Continue with Google”, Google authenticates you and gives the Nichevo server only your name, email address and account ID (scopes: openid, email, profile). Google never gives Nichevo your password. If a password-based Nichevo account already exists with the same email, the accounts are deliberately not merged for security; you are asked to sign in with your password first.
Data Leaving the Device
- YouTube Data API: During niche scans, the dashboard and analysis, your search terms, video/channel identifiers and your own API key go straight to Google’s YouTube service. Google’s privacy policy applies.
- AI provider (optional): In the assistant, idea and plan features, the text you write is sent to the provider you chose with your key over HTTPS. The provider may be outside Türkiye; its privacy policy applies. If you choose Ollama or LM Studio, requests go to a computer on your own network.
- Account server: Sign-in, registration and profile actions go to nichevo-api.fatihgo.com. This traffic passes through Cloudflare (Cloudflare’s privacy policy applies). The server runs on the developer’s own computer, not at a cloud provider.
Purposes and Legal Basis
- Purpose: to create your account, manage your session and sync your profile between the browser and your phone.
- Legal basis: necessity for performing the agreement and the legitimate interest in account security (KVKK art. 5/2-c and 5/2-f). With Google sign-in you share identity details at your own choice.
- International transfer (KVKK art. 9): Google (sign-in and YouTube), Cloudflare (traffic) and the AI provider you pick may be outside Türkiye.
Security
- All communication uses HTTPS. Passwords are hashed with scrypt; refresh tokens are stored only as digests and rotate on every use. If a stolen token is reused, that whole session family is closed.
- Failed sign-in attempts are slowed by rate limiting.
- Because the account server runs on a personal computer, it may be briefly unreachable during maintenance or an outage.
Retention and Deletion
Your account data stays on the server until you delete it.
Deleting your account:
- Open Nichevo → the profile icon at the top right → Profile and Settings.
- In the Delete account section enter your password (confirm only, if it is a Google account) and tap Delete account permanently.
Your account, profile and all session tokens are removed from the server immediately and permanently. Keys and the calendar on your device are not removed separately: uninstall the app or clear the browser data to delete them. To have an account you cannot access deleted, write to fatih.kunak@gmail.com.
Your Rights (KVKK art. 11)
To obtain information, request correction or deletion, restrict processing, request transferred data, object to processing and seek compensation for damage. You can view and edit your profile and delete your account in the app; write to us for other requests.
Children
Nichevo is not directed at children under 13 and does not knowingly collect their personal data.
Changes
If this policy changes, this page is updated.
Contact
fatih.kunak@gmail.com