Privacy policy

Last updated 16 October 2026

Who we are

Chartful is run by Kassim Douglas, a sole trader based in England (“we” or “us”). We’re responsible for your personal data under UK data protection law. If you have any questions, email hello@chartful.app.

What we collect

Your account

Your email address and how you sign in. If you use “Continue with Google”, Google also shares your name and profile picture with us (Google’s basic “openid”, “email” and “profile” permissions). We use your email to sign you in and send the emails you ask for, and your first name to say hello. We don’t use your picture. Signing in with Google doesn’t give us access to YouTube or Search Console: you link those separately.

If you answer our four questions about what Plus should cost, we keep your answers with your account and only use them to set the price.

If you send us feedback from the app, it’s emailed to us (through Resend, below) with your name, your email address so we can reply, the screen you were on, your type of device and screen size, and which platforms you’ve linked. We don’t keep it in Chartful’s database, only a count of how many you’ve sent that day, so the button can’t be misused.

The accounts you link

When you link an account, you say yes on that platform’s own page, and it gives us a secure access key. We never see your password, and the key only lets us read your stats. We can’t post, upload, comment, message or change anything. Here’s what we read and keep:

• TikTok: your account ID, display name, username and profile photo, your follower, following, like and video counts, and your latest public videos with their titles, links, post dates and lengths, and their view, like, comment and share counts. The TikTok section below explains each permission.
• YouTube (through your Google account, with Google’s read-only “youtube.readonly” and “yt-analytics.readonly” permissions, which Google shows as “View your YouTube account” and “View YouTube Analytics reports for your YouTube content”):
  • your channel’s ID, name and handle, and its subscriber, video and total view counts;
  • your videos (up to your newest 100, checked against YouTube every day): each video’s ID, title, link, publish date and length, and, for your latest 10 and your top videos each week, its view, like and comment counts, and from YouTube Analytics how long people watched it on average, how much of it they watched and how often it was shared, and, for your 2 newest videos over 3 minutes long, how many viewers were still watching 30 seconds in and how that compares with other YouTube videos of a similar length;
  • YouTube Analytics for your channel, day by day: views, watch time, average view duration, likes, comments, shares, and subscribers gained and lost;
  • for your top videos each week: views, watch time, average view duration, how much of each video people watched, likes and shares;
  • where your views came from each week (such as YouTube search or suggested videos), and up to 10 words people searched on YouTube to find you;
  • who’s watching, over the last 4 weeks: the share of your viewers in each age group and gender (YouTube’s own percentages for signed-in viewers), and how many of your views came from each of your top 10 countries, from each kind of device (such as phones, computers or TVs), and from people who are or aren’t subscribed to you. These are totals for your whole channel, so they never identify anyone, and we never work out anyone’s age, gender or location ourselves.
• Instagram (coming soon, not available yet): when it arrives, for professional accounts only, your profile, posts and reels, and their insights, such as views, reach, likes, comments, saves, shares and watch time.
• Your website (through your Google account, with Google’s read-only “webmasters.readonly” permission, which Google shows as “View Search Console data for your verified sites”): the addresses of up to 5 sites you’ve verified in Google Search Console and, for each one, day by day, how often it appeared in Google search, how many clicks it got and its average position, plus your top 10 searches and top 5 pages each week, and, over the last 4 weeks, how many of the people finding your site on Google were in each of your top 10 countries, and on each kind of device (a phone, a computer or a tablet).

For YouTube and websites, we also keep the ID number Google gives the Google account you link with, so we know which of your links share one Google account.

Your settings

Whether you’d like the weekly email, and the day your summary arrives.

Post alerts, if you turn them on

For each device where you turn on post alerts, the address your browser gives us for sending notifications to it, with the keys that keep them private. For each new post we spot, and each post that takes off (three times your usual views), its title, link and the time it went live.

Payments

When Plus launches, our payment provider Stripe will take your payment. We’ll never see your full card number. We’ll keep a record of your plan and what you’ve paid.

Messages

Anything you send us, such as an email to hello@chartful.app.

Technical data

Basic security records, such as your IP address, browser type and when you visited. We keep these for a short time to protect Chartful and fix problems.

How we use it

• To build your weekly summary, charts and tips.
• To save a snapshot of your stats each day, so we can show you what changed.
• To send the emails you’ve asked for, like your weekly summary.
• If you turn on post alerts, to check your latest TikTok and YouTube posts every couple of hours, and send a notification to your device when a new one goes live or one takes off.
• When Plus launches, to run your subscription and keep payment records.
• To keep Chartful secure, fix problems and make it better. We never pool your stats with other people’s, or use them to compare you with other creators.

We never sell your data, use it for advertising or to train AI, or pass it to data brokers. No one else can show ads or other content inside Chartful.

Our legal reasons

UK law says we need a reason to use your data. Ours are:

• Providing Chartful is part of our agreement with you (a contract).
• Keeping Chartful secure and improving it is in our legitimate interests, and we balance that against your rights.
• Optional news emails are only sent if you say yes (your consent), and you can say no at any time.
• Payment records must be kept by tax law (a legal obligation).

Who helps us

A few trusted companies help us run Chartful. They can only use your data to provide their service to us.

When your data leaves the UK, we rely on the protections UK law requires, such as the UK–US data bridge or approved contract terms.

Google and YouTube

Chartful uses YouTube API Services. By linking YouTube, you also agree to the YouTube Terms of Service, and the Google Privacy Policy covers how Google handles your data.

Chartful’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your Google data

• Your YouTube and Search Console data is used only to show you your own weekly summary, in the app and in your weekly email.
• We only read. We can’t upload, edit, delete or comment on anything on your channel or in Search Console.
• It’s shown only to you. We never sell it, use it for ads or to train AI, or share it with anyone except the companies above that help us run Chartful: Supabase stores it, Cloudflare processes it, and Resend sends your weekly email, which includes some of it.
• We never combine your YouTube data with other people’s.
• If you turn on post alerts, we also check your latest YouTube uploads every couple of hours, to tell you when a new public video is out. The alert, which can include the video’s title, is encrypted so that only your device can read it.
• Nobody at Chartful looks at it unless you ask us to help with a problem, we need to for security, or the law says we must.
• Your Google access keys are encrypted before we save them, and only our server uses them, to collect your numbers once a day.

You can remove Chartful’s access to your Google account at any time on the Google security settings page. If you do, we can’t read your numbers any more, and we delete your YouTube and website data within 7 days, unless you link them again.

TikTok

When you link TikTok, you approve read-only access on TikTok’s own page. We ask for four permissions, and use each one only to build your weekly summary:

• user.info.basic: your TikTok account ID, display name and profile photo, so we know which account is linked and can show it in the app. Your photo loads straight from TikTok.
• user.info.profile: your TikTok username, shown next to your linked account.
• user.info.stats: your follower, following, like and video counts, saved once a day to show how they changed during the week.
• video.list: your public videos with their titles, links, post dates, lengths and view, like, comment and share counts, saved once a day to find your top video and best day. If you turn on post alerts, we also check your latest few videos every couple of hours, to tell you when a new one is out.

Your TikTok data is only shown to you, in the app and in your weekly email. We never post, comment, follow, message or change anything on TikTok. We never sell your TikTok data, use it for ads or share it beyond the companies above. Your TikTok access key is encrypted before we save it.

You can remove Chartful’s access in the TikTok app at any time: go to Profile, then the menu (☰), Settings and privacy, Security and permissions and Apps and services permissions, choose Chartful and press Remove access. The names can differ a little between versions of the app. If you do, we delete your TikTok data within 30 days, unless you link it again. TikTok’s Privacy Policy covers how TikTok handles your data.

How long we keep it

• While an account is linked, we keep its stats so you can look back at your history. We check our access every day. Your YouTube channel name and video details are refreshed every day too, and when a video is gone from YouTube, we delete it from Chartful.
• If you unlink an account, we delete its access key and its stats straight away (always within 7 days), and cancel Chartful’s access with that platform. With Google, cancelling one link can cut off your other YouTube and website links too. So while any of those is still linked, we may keep Google’s permission until you unlink the last one. You can remove it yourself at any time on the Google security settings page.
• If you remove Chartful in your Google or TikTok settings, or our access stops working, we can’t read new numbers, and the account shows “Needs reconnecting” in the app. If you don’t reconnect it, we delete its YouTube or website data within 7 days, and TikTok data within 30 days.
• Weekly emails: we don’t keep a copy, only a note that it was sent. Resend, which delivers them, keeps its delivery logs for a short time, as its own policy sets out.
• Post alerts: our note of each post we’ve told you about is deleted after 7 days. A device’s notification address is deleted when you turn alerts off, sign out on that device or delete your account, or as soon as the device stops accepting them.
• If you delete your account, we delete everything within 7 days.
• Payment records are kept for 6 years, because tax law requires it.

Cookies and storage on your device

We don’t use advertising or tracking cookies. Here’s everything Chartful keeps on your device:

• Your sign-in, kept in your browser’s storage so you stay signed in until you sign out.
• A security cookie while you link an account. It makes sure the account is linked to you and nobody else, and it’s deleted after 10 minutes.
• That you ticked “I agree”, kept for a moment while you sign in.
• The tips you’ve ticked, for your last 6 weeks.
• If you turn on post alerts, a small background helper (a “service worker”) that shows them. It shows the alerts and keeps nothing else.

If you use “Continue with Google”, Google’s sign-in button loads from Google, and Google may use its own cookies, as the Google Privacy Policy explains. Cloudflare, which runs our website, may set a short-lived security cookie to tell people from bots. No one else stores or reads anything on your device through Chartful.

Your rights

You can ask us to:

• send you a copy of your data
• correct anything that’s wrong
• delete your data
• give you your data in a file you can take elsewhere
• stop or limit how we use it

Just email hello@chartful.app. We’ll reply within one month, and usually much sooner. You can do a lot of this yourself in the app, and our Delete my data page explains how to remove everything.

If you’re unhappy with how we’ve used your data, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. We’d appreciate the chance to put things right first.

Age

Chartful is for people aged 18 and over.

Changes to this policy

If we make an important change, we’ll tell you by email or in the app before it takes effect. The date at the top shows when this page last changed.

Contact

Questions or worries about your privacy? Email hello@chartful.app.