Yaikus Studio Privacy Policy

1. Who we are

Yaikus Studio is developed and operated by Gerardo Silva, an individual developer based in Mexico City, Mexico (“we”, “us”). You can contact us at gerardo@yaik.us. This policy covers the Yaikus Studio app (free and premium editions), the website at yaik.us, and the sign-in pages that connect the app to YouTube, TikTok and Instagram.

2. Summary

Yaikus Studio is local-first. Your projects, scripts, videos, settings and credentials are stored on your own Mac. We do not receive, store, sell or share them, and we do not use them for advertising or profiling.

3. Information that stays on your Mac

The app stores the following on your computer, inside its own sandboxed container, and does not send it to us:

• Projects, news items you collect, scripts, rendered videos and captions.
• App settings, your editable rules and the sources (RSS feeds or article links) you add.
• API keys for the AI, voice and stock-footage providers you choose, stored in the macOS Keychain.
• If you use the optional publishing features, the OAuth access and refresh tokens for your YouTube, TikTok or Instagram accounts, stored only in the macOS Keychain.

4. Publishing to YouTube, TikTok and Instagram

Publishing is optional and available in the premium edition. You sign in through each platform's official OAuth flow in your own browser; Yaikus Studio never sees or stores your password. The app requests only the permissions needed to upload the video you choose to publish, and uses them only when you press the publish button.

• YouTube (Google): the youtube.upload permission, used to upload your finished video to your channel. The app does not read your channel, videos, playlists, subscribers or other Google data.
• TikTok: the user.info.basic permission, used to identify the connected account in the app, and the video.upload permission, used to send your finished video to your TikTok account as a draft. We do not post anything on your behalf without your action, and we do not collect your TikTok data on any server.
• Instagram (Meta): the permissions needed to publish a Reel to your professional account, used only for the video you choose to publish.

Google user data and YouTube API Services

If you connect YouTube, Yaikus Studio asks for a single permission, uploading videos to your channel (youtube.upload). It does not read your channel, your videos, your subscribers or any other Google data. The sign-in tokens are stored only in your Mac's Keychain and are used only to upload the videos you choose to publish. Yaikus Studio uses YouTube API Services: by using that feature you agree to the YouTube Terms of Service and the Google Privacy Policy. The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or transfer it to anyone. Google user data is never used to develop or train AI or machine-learning models. You can revoke Yaikus Studio's access at any time in your Google Account permissions.

TikTok data

Data received from TikTok through the TikTok API is used only to connect your account and upload the video you choose, as described above. It is kept on your Mac, is not shared with third parties, and is not used for advertising or to train AI models. Your use of TikTok is governed by the TikTok Terms of Service and the TikTok Privacy Policy. You can remove Yaikus Studio's access in TikTok under Settings and privacy → Security & permissions → Apps and services.

5. Data sent to services you choose

Yaikus Studio works with your own AI, voice and stock-footage providers (for example Claude or OpenAI-compatible APIs, ElevenLabs and Pexels) and, through MCP, with AI agents you run. When you use them, the app sends them the text or queries needed for that task (such as a news item and your rules) directly from your Mac, using your own keys. We are not a party to that exchange. Those providers' own terms and privacy policies apply to the data they receive, so please review them before connecting a service.

6. Our website and sign-in pages

The website is hosted on Vercel, which may process standard technical data when you visit (IP address, browser and device information, requested page and time) to deliver the site and keep it secure. We may use Google Analytics for Firebase to measure aggregate page views; this does not identify you personally, and the app itself contains no analytics or telemetry. The pages at /instagram/callback and /studio/tiktok-callback only receive the authorization response from the platform and immediately forward it to the app running on your own computer (localhost); they do not store it.

How we protect your data

Yaikus Studio is designed so that sensitive data, including the OAuth tokens that let the app upload to your accounts, never leaves your computer except to go to the platform that issued it. We have no server that stores or receives this data. These are the protections in place:

• Secure credential storage: OAuth access and refresh tokens and API keys are stored only in the macOS Keychain, which encrypts them at rest and restricts access to the app that saved them. They are never written to plain-text files, logs or project files.
• Encryption in transit: all communication with Google, YouTube, TikTok, Instagram and your AI, voice and stock-footage providers uses HTTPS (TLS).
• Secure sign-in: authorization uses each platform's official OAuth 2.0 flow in your own browser, with PKCE and a loopback redirect to your own computer. Yaikus Studio never sees or stores your password.
• Minimum access: the permissions requested are limited to uploading the video you choose to publish. The app does not read your channel, videos or other account data.
• Local-only processing: the app runs inside the macOS App Sandbox, is signed with a Developer ID and notarized by Apple, and keeps projects, scripts and rendered videos in its own container on your Mac.
• No access by us or by anyone else: because the data stays on your Mac, we have no ability to read it, and it is not shared with, sold to or used by any third party.
• Revocation and deletion: disconnecting an account in the app revokes its token and removes it from the Keychain. You can also revoke access at any time on each platform, and delete all local data by removing the app's data folder.

7. How we use information

The data described above is used only to provide the features you ask for: collecting news, generating and validating scripts, rendering videos, and, if you choose, uploading a finished video to your account. We do not sell personal data, do not share it for advertising, do not build profiles, and do not make automated decisions that affect you.

8. Sharing and disclosure

We do not receive your content or credentials, so we have nothing to share. Data leaves your Mac only when you direct it to a service you configured (section 5) or to a platform you publish to (section 4). We may disclose limited information about website visits only where required by law or to protect against abuse.

9. Retention

Local data stays on your Mac until you delete it. OAuth tokens remain in your Keychain until you disconnect the account or delete the app. Because we do not store your content, there is nothing for us to retain. Website hosting and analytics data are kept by those providers according to their own retention periods.

10. Your rights and choices

You control your data: you can edit or delete projects in the app, disconnect any account, revoke access on the platform, and delete the app and its data folder at any time (see the data deletion instructions). Depending on where you live (for example under the GDPR in the European Economic Area or the CCPA in California), you may also have the right to access, correct, delete or port personal data, and to object to or restrict its processing. Since we do not hold your app data, most requests can be completed by you directly; for anything else, write to gerardo@yaik.us and we will reply within 30 days. We do not sell personal information and we do not respond differently to “Do Not Track” signals because we do not track you across sites.

11. International transfers

We are located in Mexico. Our website host and the third-party services you connect may process data in other countries, including the United States. When you use those services, the transfer happens between your Mac and the provider under that provider's own safeguards.

12. Children

Yaikus Studio is not directed to children and is not intended for anyone under 13 (or the minimum age required by the platforms you publish to or by the law where you live). We do not knowingly collect personal information from children. If you believe a child has provided information through our website, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the app or the law changes. The date at the top shows when it was last revised, and material changes will be noted on this page. Continued use of the app after a change means you accept the updated policy.

14. Contact

For privacy questions or requests, contact Gerardo Silva at gerardo@yaik.us.