Legal

Privacy Policy

What we collect, why we collect it, and how you stay in control — including your YouTube data.

Last Updated: August 2026

1. Who We Are

FoodGPT ("we," "us," "our") provides AI-powered tools for food content creators on YouTube. This policy explains what personal information we collect when you use FoodGPT, why we collect it, and the choices you have.

We handle personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and we apply the same standards of care to users in the US, UK, and Canada.

2. Information We Collect

CategoryExamples
Account informationName, email address, password (stored encrypted/hashed — we never store it in plain text)
Billing informationHandled by our payment processor; we don't store your full card number ourselves
YouTube data (Data API)Channel details, video metadata, and video content you submit — see Section 3.1
YouTube data (Analytics API)Performance and engagement stats (views, watch time, subscriber growth, demographics) plus a monetization status (e.g. "Monetized") used to build your Creator Card — see Section 3.2. We never show revenue or earnings amounts.
Content you createRecipes, blog posts, carousels, and other outputs generated through the Service
Usage dataPages visited, features used, device/browser type, general location (country/city level)
Support communicationsMessages you send us via the contact form or email

3. YouTube API Services Data

FoodGPT uses YouTube API Services and requests three read-onlypermissions from your YouTube account. We only ask for each one when it's needed for the specific tool you use, and we never request write access — FoodGPT cannot post, upload, edit, or delete anything on your YouTube channel.

3.1 YouTube Data API (channel & video content)

Used to power StepGen, Idea Engine, Blogcast, CarouselMaker, and YouTube SEO Optimizer. Once you connect your channel, these tools use your authorised access token to read:

  • Your channel's public details (name, subscriber count, video list)
  • Public video information — such as the title, description, and other available video content — needed to generate recipe steps, blog posts, carousels, and SEO suggestions

3.2 YouTube Analytics API (channel & video performance data)

Used only to power Creator Card, your shareable media kit. This lets us read channel and video performance data — such as views, watch time, subscriber growth, and other audience or engagement statistics — and show it on the Creator Card you generate to share with brands.

We also request a separate, more limited permission called the YouTube Analytics monetary scope (yt-analytics-monetary.readonly). We use this permission only to check whether monetisation data is available for your channel. Based on that check, Creator Card shows a simple monetisation status, such as "Monetized".

No revenue or earnings amounts. We do not display your revenue, estimated earnings, ad earnings, or any other dollar-value financial information — on Creator Card or anywhere else. We also never use this monetisation data for advertising, profiling, credit decisions, or any purpose unrelated to showing your monetisation status on Creator Card.

We never request write access. FoodGPT cannot post, upload, edit, or delete anything on your YouTube channel.

We never collect your Google password.Authentication happens entirely through Google's own sign-in flow.

You can revoke access anytime from your Google Account permissions page, independent of FoodGPT.

FoodGPT's access, use, storage, and sharing of information received from YouTube API Services adheres to the Google API Services User Data Policy, including the Limited Use requirements, and to Google's Privacy Policy. In practice, this means:

  • Data API content (channel and video information) is used only by the specific generation tool you ran it through — StepGen, Idea Engine, Blogcast, CarouselMaker, or YouTube SEO Optimizer
  • Analytics API data and the monetisation status check are used only to build and display your Creator Card
  • We do not use YouTube data for advertising, and we do not sell it to data brokers or third parties
  • We do not use YouTube data, including monetisation status, to determine creditworthiness or for lending purposes
  • Any human access to this data is limited to what's necessary for security, legal compliance, or with your explicit direction (e.g. customer support)

3.3 Retention

Data typeRetention
OAuth tokens (access & refresh)Stored encrypted, retained only while your channel connection is active. Deleted immediately if you disconnect your channel or delete your account, and automatically refreshed/rotated per Google's token lifecycle — we never retain a token past its validity or your active use of the Service.
YouTube Data API content (video metadata/content)Retained only as long as needed to generate and let you access your outputs, or until your account is deleted, whichever is earlier.
YouTube Analytics API metrics & monetisation status (Creator Card)Cached for as long as your Creator Card remains published, refreshed periodically; deleted when you delete the Creator Card or your account. We never store revenue or earnings amounts, because we never retrieve them.

You can request earlier deletion of any of the above at any time — see Section 9.

4. How We Use Information

We use the information above to:

  • Provide and operate the tools you use (StepGen, Creator Card, Idea Engine, Blogcast, CarouselMaker, YouTube SEO Optimizer)
  • Process payments and manage your subscription
  • Respond to support requests and communicate service updates
  • Maintain the security and integrity of the Service
  • Improve and develop new features
  • Comply with legal obligations

We do not use your personal information, including YouTube data, for advertising or interest-based targeting, and we do not sell personal information to third parties.

5. How We Share Information

We share information only with:

  • Service providers, who help us operate FoodGPT — for example, cloud hosting, AI processing providers, and our payment processor — bound by confidentiality and data protection obligations
  • Google/YouTube, to the extent necessary to authenticate your channel connection and retrieve the data described in Section 3
  • Legal authorities, where required by law or to protect the rights, safety, or property of FoodGPT or others
  • A future buyer or successor, in the event of a merger, acquisition, or sale of assets — with notice to you where required by law

6. Overseas Data Transfers

Some of our service providers — including AI processing and cloud hosting infrastructure — are located outside Australia, including in the United States. Our development team also includes contractors based outside Australia. Where personal information is processed overseas, we take reasonable steps to ensure it's handled consistently with the Australian Privacy Principles and this policy.

7. Storage, Security & Retention

We use industry-standard security measures, including encryption in transit and at rest, to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data appropriately.

We retain personal information for as long as your account is active, or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. You can request deletion at any time — see Section 9.

8. Cookies & Analytics

We use essential cookies to keep you logged in and remember your preferences, and basic analytics cookies to understand how the Service is used. We don't use cookies for third-party advertising or cross-site tracking.

9. Your Rights & Choices

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your account and associated data
  • Object to or restrict certain processing
  • Withdraw YouTube access at any time via your Google Account permissions

To exercise any of these rights, contact us at [email protected]. We'll respond within a reasonable timeframe consistent with applicable law.

10. Children's Privacy

FoodGPT is not directed at, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to the Service or legal requirements. We'll update the "Last updated" date above, and material changes will be communicated via the Service or by email where appropriate.

12. Contact Us

Questions about this policy, or want to exercise your privacy rights? Reach us at [email protected] or via the contact form on our homepage.

This Privacy Policy applies to FoodGPT, operated by Supreme Supports Pty Ltd (ABN 14 140 549 408), Sydney, Australia. We're identifying our operating entity here because Australian privacy law — and Google's own API policies — require it; FoodGPT remains the name you'll see everywhere else on the Service.