Privacy policy

The short version

• We collect what we need to run your account and find opportunities for your product. We don’t sell it.
• We have no ads and no advertising trackers. We count page visits with Cloudflare Web Analytics, which sets no cookies and does not follow you to other sites.
• We read public posts and comments from YouTube, Threads, Hacker News, Bluesky and Stack Exchange. We keep YouTube text for at most 30 days, and remove a Bluesky post’s text when its author deletes it.
• You can export or delete your account at any time from Settings.

1. Information we collect

Your account

• Google sign-in: your email address and name, which Google shares when you choose “Sign in with Google”. We ask only for basic profile access (openid, email, profile) — nothing from your Gmail, Drive, YouTube or other Google data.
• Email sign-in links: your email address, and the IP address a link was requested from (to limit abuse; deleted after 30 days). Links expire after 15 minutes and work once.
• Your plan, when you joined and when you last signed in.

Your product and your work in the app

• Your website address and the public pages we read from it, and the product profile built from them: description, audiences, problems, search terms, limitations, and every edit you make (earlier versions are kept so you can see what changed).
• What you do with opportunities: approvals, dismissals, drafts, the replies you mark as posted, and outcomes you record. For replies you mark as posted, we may re-read the public page later to check the reply is still visible and whether anyone answered.
• A record of each scan and what it cost, including the search terms used.

Preview scans

Reading your website needs no account: we keep the website address you enter, what we understood about it, and your IP address. We use the IP address to limit how often scans can be run and to stop abuse, and delete it after 30 days. The public scan form may use Cloudflare Turnstile to tell people from bots; Cloudflare processes that check under its own privacy policy.

The preview search needs a free account. We record which account asked for a preview of which website, and when, to limit how many free previews one account can run; the result we show you is kept with it.

Payments

When paid plans open, payments are processed by Stripe. We keep your plan, your subscription's status and renewal date, and Stripe's customer and subscription identifiers; your card details stay with Stripe, and we never see or store them.

Messages you send us

If you email us, we keep the message and your address to answer it.

Public content from other people

To find opportunities, DiscoverMyApp reads public posts and comments: YouTube comments and video titles through the YouTube API Services, Hacker News through its public search API, Bluesky posts through its public API, Threads posts through Meta’s Threads API, and Stack Exchange questions through the Stack Exchange API. This can include the author’s public name or handle and what they wrote. We use it only to judge whether a conversation is a good match for a customer’s product and to help that customer write a reply by hand. We do not build profiles of people, contact anyone, or post anything on anyone’s behalf. See “How long we keep it” for the limits on this content, and “Your rights” to ask us to remove something you wrote.

Creators and podcasts

DiscoverMyApp suggests YouTube channels and podcasts a customer could ask to feature their app: channels whose viewers asked for what the app does, channels that reviewed a similar app, and podcasts on the app’s topic. For each we keep only the channel’s or podcast’s public ID, why it was suggested (for example, how many of its viewers asked), and the customer’s own notes and draft message. Its name, audience size and description are read from YouTube or Apple each time the page is shown, and not stored. If the customer asks for a contact address, we read the business email the creator published in their channel description or podcast feed and show it to the customer at that moment; we never store it. The customer decides whether to write, and sends any message themselves from their own email — DiscoverMyApp never contacts creators. We rely on legitimate interests for this, and only use contact details creators have made public for business enquiries.

2. How we use information

• To provide the service: sign you in, run scans, rank opportunities and draft replies.
• To keep it secure and fair: rate limits, abuse prevention, and fixing problems.
• To bill you, once paid plans open, and to honour refunds.
• To answer you and to send messages about your account (not marketing, unless you ask for it).
• To improve how well the service judges and drafts, using your own feedback (what you approved, posted or dismissed). We do not use your data or other people’s posts to train or fine-tune AI models.

Legal bases (EEA, UK and Switzerland). We process account and product information to perform our contract with you; security, abuse prevention and the reading of public posts rely on our legitimate interests in running a safe service and in helping customers answer people who publicly asked for help; we keep billing records to meet legal obligations; and we rely on consent where the law requires it.

3. AI processing

Your product profile and the public posts found for it are sent to Google’s Gemini models to classify, score and draft. We use Google’s paid service, under which Google does not use prompts or responses to improve its products. Drafts are suggestions: nothing is posted unless you post it yourself.

4. YouTube API Services

DiscoverMyApp uses YouTube API Services to find public YouTube videos and read their public comments. By using DiscoverMyApp you agree to be bound by the YouTube Terms of Service. Google’s handling of data is described in the Google Privacy Policy.

• What we collect from YouTube: public comment text, the commenter’s public display name, the video’s title and link, and public counts such as likes and replies.
• How we use it: to decide whether a comment is an opportunity for a customer’s product, to show it to that customer, and to help them draft a reply they post themselves.
• Who we share it with: the customer whose scan found it, and Google’s Gemini models for analysis. It is never included in exports and never sold.
• How long we keep it: no more than 30 days. After that we refresh it from YouTube (so a deleted comment disappears) or delete the text, keeping only our own analysis and the link.
• Your YouTube account: DiscoverMyApp does not ask for access to your YouTube account and does not post comments. If that changes, we will ask for your permission first and update this policy.
• Your own channel: if you add it in Settings, we read its public age, subscriber and video counts to set how many replies naming your app you can post a day. We keep only the channel you entered and that daily number, re-checked weekly.

5. Google sign-in

DiscoverMyApp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use your Google email and name only to create and identify your account. You can revoke DiscoverMyApp’s access at any time on Google’s security settings page; that stops Google sign-in but does not delete your account — do that in Settings or by emailing us.

6. Who we share information with

We share information only with the service providers that run DiscoverMyApp for us, for that purpose:

• Railway — application hosting (United States).
• Neon — database (United States).
• Cloudflare — network, security, bot checks, cookieless page-visit analytics and email forwarding.
• Google — sign-in, Gemini AI models, and the YouTube API Services.
• Apple — App Store and podcast search, with search terms derived from your product profile.
• Meta (Threads search), Algolia (Hacker News search), Bluesky and Stack Exchange — we send search terms derived from your product profile, not your personal details.
• An email delivery provider, for sign-in links, once email sign-in is enabled.
• Stripe — payments, once paid plans open.

We may also disclose information if the law requires it, to protect people’s safety or our rights, or as part of a sale or transfer of the business (you would be told first). We do not sell personal information, and we do not share it for cross-context behavioural advertising.

7. How long we keep it

• Your account and product data: while your account is open. Deleting your account removes them.
• Sessions: 30 days from your last activity. Sign-in links: 15 minutes.
• IP addresses from sign-in requests and preview scans: 30 days.
• YouTube text: at most 30 days, as described above.
• Bluesky posts: checked daily; if the author deleted a post, we delete its text.
• Threads posts: 30 days, then the text, name and profile link are deleted.
• Suggested creators and podcasts: 30 days from when they were last suggested, then deleted — or, if the customer already contacted them, reduced to the public ID and the customer’s own status.
• Billing records: as long as tax and accounting law requires.
• Records of what scans cost are kept after an account is deleted, with the search terms and any link to you removed.

8. Cookies

We use only cookies the service needs to work — no advertising or analytics cookies:

• dma_session — keeps you signed in (30 days).
• dma_product — remembers which of your projects you last opened (1 year).
• g_state, g_verifier, g_next — protect Google sign-in while it happens (10 minutes).

9. Your rights

Wherever you live, you can:

• see and export your data (Settings → Download my data), and correct your product profile in My App;
• delete your account and its data (Settings → Delete account), or ask us to;
• ask what personal information we hold about you and how we use it;
• ask us to remove a post or comment you wrote from DiscoverMyApp, whichever platform it was on (YouTube, Threads, Bluesky, Hacker News, Stack Exchange) — contact us with the link and we delete it within 30 days, usually sooner.
• if you are a creator or podcaster, ask us to stop suggesting your channel or show — contact us with its link and we remove it and stop suggesting it.

EEA, UK and Switzerland. You also have the rights to restrict or object to processing (including processing based on legitimate interests), to data portability, to withdraw consent, and to complain to your local data protection authority.

California and other U.S. states with privacy laws. You have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing — we do not sell or share personal information, so there is nothing to opt out of. We do not use sensitive personal information to infer characteristics about you. We will not treat you differently for using these rights. The categories we collect are identifiers (name, email, IP address), commercial information (plan and billing), internet activity within the service, and the content you enter.

To use any right, email [email protected]. We answer within 30 days (45 where U.S. state law allows), and may need to confirm it is you before acting. An authorised agent may make a request for you with your written permission.

10. Where data is processed

DiscoverMyApp is run from the United States, and your information is stored and processed there and wherever our providers operate. Where the law requires it, transfers rely on the safeguards in our providers’ data processing terms, such as the European Commission’s standard contractual clauses.

11. Security

Traffic is encrypted in transit. Session and sign-in tokens are stored only as one-way hashes, so a database leak would not let anyone sign in as you. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

12. Children

DiscoverMyApp is a business tool for adults and is not directed at children. You must be 18 or older to use it. If you believe a child has given us information, contact us and we will delete it.

13. Changes

If we change this policy, we will update the date above; for significant changes we will tell account holders by email or in the app before they take effect.

14. Contact

DiscoverMyApp — [email protected]. See also the terms of service and the contact page.