Privacy Policy

Last updated 8 November 2026

Who we are

yBoost is an exchange between YouTube creators. You earn coins by watching, liking and subscribing to other creators' videos and channels, and you spend coins to get views, likes or subscribers for your own. This policy covers the yBoost Android app (app.yboost) and this website.

yBoost is operated by Satechs LLC, the developer of record on Google Play. Contact: info@yboost.app.

What we collect

• No sign-in to yBoost. You do not need an account with Google, Apple or anyone else to use yBoost. The first time you open the app, it creates an anonymous account for that installation; we do not learn your name or email address. The app shows that account as your yBoost ID (for example #7D76DA94) so you can quote it if you contact us. Your coins and campaigns are kept with that installation, and uninstalling the app or clearing its data removes them. If you signed in with Google or Apple in an earlier version, we keep the email address, display name and profile picture we received then until you delete your account.
• Your activity in the app. Which videos you watched and when; which videos you liked and which channels you subscribed to through yBoost, and when; the campaigns you created; and every coin movement with its reason.
• What the app read on YouTube to confirm a like or subscribe. A short piece of text from the YouTube page — the video or channel name and the word "Liked" or "Subscribed" — stored with that like or subscribe so it can be checked. See YouTube below.
• Purchases. If you buy coins, we store the Google Play product id, purchase token and order id so the purchase can be verified and not credited twice. We never see or store your card details — Google Play handles payment.
• A one-way hash of a device identifier. Your phone's operating system gives the app an identifier for this installation (ANDROID_ID on Android, identifierForVendor on iOS). We never send or store that value. The app hashes it first, and we keep only the hash, so that one device cannot claim the same reward through several accounts. We cannot reverse it, we never combine it with data from any other company, and it is never used for advertising or profiling.
• A notification token for your device. If you allow notifications, Google's Firebase Cloud Messaging gives us a token that lets us send a push to that installation. It is tied to the app on that device, not to you personally, and we use it only to send yBoost notifications. It is deleted when you sign out, turn notifications off, or delete your account.

Crash reports. The app uses Google's Firebase Crashlytics to report crashes and errors: the error and stack trace, plus the phone model, Android version and similar technical details Crashlytics collects. It is not linked to your yBoost account, and we use it only to find and fix bugs.

We do not run advertising SDKs in the app, and we do not collect your contacts, location, photos, or any advertising identifier. The device hash described above is used only to prevent one device claiming a reward repeatedly; it is not used for tracking, profiling or advertising, and it is not shared with anyone.

Why we collect it

• To run your account and show your balance.
• To decide, on our servers, whether a watch earns coins — which requires knowing when you started and finished.
• To confirm that a like or subscribe really happened on YouTube before it earns coins and counts toward the creator's campaign.
• To find and fix crashes.
• To stop the same watch or the same purchase being credited twice, and to stop one device earning the same reward through several accounts.
• To detect and prevent automated abuse of the coin economy.

YouTube

yBoost uses YouTube API Services. By using yBoost you are also agreeing to the YouTube Terms of Service, and Google's own Privacy Policy applies to the data Google handles.

Public video information. We use the YouTube Data API to read public information about a video or channel you paste into a campaign — its title, length, view count, like count, subscriber count and whether it can be embedded — so you can see what you are promoting. This uses an application key held on our servers and does not read anything from your YouTube account.

Watching. Videos play from YouTube inside the app. Watching needs no sign-in. YouTube may set cookies or collect data during playback under its own policy.

Liking and subscribing — signing in to YouTube inside the app. To earn coins by liking videos or subscribing to channels, you sign in to YouTube on Google's own sign-in page, shown inside the app. This is optional; everything else in yBoost works without it.

• We never see your password. You type it on Google's page. yBoost does not receive your password, and does not receive a Google sign-in token or any permission (OAuth scope) on your Google account.
• The sign-in stays on your phone. Like any browser, the app's built-in YouTube page keeps YouTube's sign-in cookies on your device so you stay signed in. They are not sent to us.
• What the app does on YouTube. When you tap Like or Subscribe in yBoost, the app presses YouTube's own Like or Subscribe button for you on that page, on the YouTube account you signed in with. If you turn on Auto, it does this for each video or channel in the queue in turn, with a pause between each, until you turn Auto off, leave the screen, or reach the daily limit. It never comments, uploads, unsubscribes, or changes your account settings.
• What the app reads. To confirm the like or subscribe, the app reads the YouTube page in front of it — the video or channel name, whether it now shows as liked or subscribed, and the channel's picture to display it. It sends only the short confirmation text described under What we collect to our servers. It does not read your YouTube history, playlists, comments, email address or other account data.
• Likes and subscriptions are real and public on YouTube. They are made by your YouTube account, and are visible on YouTube as YouTube normally shows them. You can undo any of them on YouTube at any time.
• Disconnecting. Use the account button on the Like & Sub screen to switch or sign out of YouTube inside the app, or clear the app's data, or uninstall it. You can also remove the sign-in from your Google account's device list.

YouTube's and Google's own terms apply to your YouTube account and to what you do with it. It is your choice whether to like or subscribe, and whether to use Auto.

What other people can see

When you promote a video, other users see the video, its title and channel name, and how many views remain. They do not see your name, email, profile picture or user id. Nothing identifying you is attached to a campaign.

Where it is stored

Data is held in a Supabase Postgres database hosted on Amazon Web Services in Ohio, United States. Access is restricted at the database level: your account can read only its own row, and balances can be changed only by audited server-side routines, never directly by the app.

Who we share it with

We do not sell your data. We share only what is necessary with:

• Google — to verify purchases (Google Play), to deliver notifications (Firebase Cloud Messaging), and to receive crash reports (Firebase Crashlytics).
• Supabase / AWS — our database and server hosting.
• YouTube — videos play from YouTube inside the app, and if you sign in to YouTube there, your likes and subscriptions happen on YouTube. YouTube applies its own privacy policy to both.

We may disclose data if legally required to do so.

How long we keep it

We keep your account data for as long as your account exists. Coin ledger and purchase records are retained while the account exists because they are the record of what you were charged and credited.

Deleting your data

In the app: Profile → Delete my data (called Delete account in versions before 2.1). It asks you to confirm, and then it is immediate.

If you have uninstalled the app: use the account deletion page, or email info@yboost.app from your account address.

Deleting removes your yBoost ID and profile, coin balance, watch, like and subscribe history, campaigns, coin ledger and notification token. It does not undo likes or subscriptions on YouTube itself — those belong to your YouTube account, and you can remove them on YouTube. Campaigns you were running stop immediately. Coins have no cash value and are not refunded.

The device hash. The hash itself may remain in our records after deletion, but everything linking it to you goes with your account: once your watch history is deleted, the hash is a row that says a device exists and nothing about who used it.

One thing is kept. If you bought coins, the Google Play purchase token, product and amount are retained with every link to you removed. We have to: that token's uniqueness is the only thing preventing the same purchase being credited to a second account, and discarding it would create a way to obtain coins for nothing. What remains is a record of a transaction, not a record of a person.

Children

yBoost is not directed to children. It is not for anyone under 13, it is listed on Google Play for a 13+ audience, and we do not knowingly collect data from anyone under 13. If you believe a minor has created an account, email info@yboost.app and we will delete it.

Changes

If this policy changes we will update the date above and, for material changes, tell you in the app.