Privacy Policy

1. What this document covers

Mitti GO is an app for parents (Android, iOS, Android TV). The parent chooses YouTube channels and playlists, and the child watches only those in a simple kids' interface. This policy explains how data is handled in the Mitti GO app and on the mitti-go.uz website.

By using the app you agree to this policy and to the Terms of Use. The policy follows the Law of the Republic of Uzbekistan “On Personal Data” and the rules of Google Play, the App Store and the YouTube API Services.

2. In short

• We collect nothing about your child: the child has no profile — no name, photo or age.
• What the child watched, their progress, searches and screen time stay on the device and are never sent anywhere.
• The PIN never leaves the device: it is kept in secure storage as a strong hash.
• A Google account is optional. It is needed only for PIN recovery, Pro and linked devices.
• The app has no ads of its own, no third-party analytics and no advertising IDs. We don't sell data.

3. What stays on the device only

This data is created and kept on your phone, tablet or TV. Our server never receives it:

• allowed channels and playlists, hidden playlists, Favorites and settings (language, theme, Shorts, autoplay);
• watch history, video progress and “Keep watching”, the child's searches;
• screen time: how long the child watched today, the limit and bedtime;
• the PIN and the wrong-attempt counter — in the device's secure storage (Android Keystore, iOS Keychain); the PIN is stored only as a PBKDF2 hash.

Uninstalling the app deletes this data. The PIN and security data are not restored from a device backup.

4. What our server receives

The Mitti GO server fetches public YouTube data, checks your plan and, if you want, connects an account. It receives:

• An anonymous install ID — a random key the server uses to limit how often requests are made. It is not linked to your account and contains no device data.
• YouTube requests — IDs of public channels, playlists and videos, and the search text when a parent looks for a channel. These requests are not linked to an account.
• Your Google account (if you connect it) — your Google ID, e-mail address and name. Sign-in tokens are stored only as hashes.
• Plan and promo codes — your Pro status and its end date, promo-code and trial activations. So that a code or the trial can't be used twice, a hash of your Google ID and a random device key are kept.
• Linked devices (if you use them) — the family settings that have to reach the child's device (allowed channels and playlists, hidden playlists, Favorites, Shorts and playback settings, each device's screen time), the device list (name, model, platform, last sync time), a hash of the child device's token and a one-time linking code, valid for 10 minutes and stored as a hash.

The server never receives watch history, progress, the child's searches, screen-time usage, the PIN or anything the child types.

5. YouTube and Google services

Mitti GO uses the YouTube API Services. Videos play in YouTube's official player (youtube-nocookie.com), unchanged: YouTube itself shows its logo, captions and ads in the player.

The YouTube player and Google may store cookies and similar data on the device and process playback information under their own rules — see the Google Privacy Policy. By using Mitti GO you also agree to the YouTube Terms of Service.

Sign-in with Google is handled by Google. You can remove Mitti GO's access to your account on the Google account “Third-party apps” page. Mitti GO gets no access to your YouTube channel, subscriptions or history.

The child can't open links from the player to other sites: the parent's PIN is needed first.

6. Payments

Pro is purchased through Google Play (and the App Store once the app is there). The store takes the payment. Mitti GO receives only the purchase and subscription period; we never see or store card details.

Promo codes can be bought from Mitti GO under an agreement. For such a purchase we process what the agreement and accounting and tax records require: the buyer's name and details, a contact person and payment information. These records are kept as long as the law of the Republic of Uzbekistan requires.

7. Children

Mitti GO is an app for parents. An adult installs and sets it up; the child only watches what the parent allowed. The child creates no account and enters no personal data. Search in the kids' area runs on the device and is not sent over the network.

Purchases, sign-in, external links and the parent area are protected by the PIN. If you believe we received a child's data by mistake, write to us and we will delete it.

8. Why we process data

• to make the app work: show allowed videos and refresh channels;
• to recover the PIN and link Pro to an account;
• to pass settings to linked child devices;
• to protect the service from abuse: rate limits and one-time use of codes;
• to meet legal duties: records of payments under agreements and taxes.

9. Who receives data

We don't sell or rent data. Data goes only to those the service can't run without:

• Google — Sign-in with Google, the YouTube API Services, Google Play;
• Apple — the App Store, once the app is there;
• the hosting provider whose servers run Mitti GO;
• public authorities — only when the law requires it.

10. How long data is kept

• your account — until you delete it;
• sign-in tokens — no longer than 60 days after last use;
• public YouTube data — deleted if not refreshed for 30 days;
• a device unused for 60 days frees its place in the plan;
• promo-code records — until the code's validity ends;
• agreement and payment records — as long as the law of the Republic of Uzbekistan requires.

11. Your rights and deleting data

You can ask what data we hold about you, correct or delete it, and withdraw your consent. Write to us — the contacts are below.

How to delete data:

• your account: in the app, Profile → Account → Delete account — the account, tokens and the data linked to it are deleted from the server and linked devices are disconnected;
• data on the device: uninstall the app;
• a subscription is cancelled in the store: Google Play → Subscriptions. Deleting the account doesn't cancel a store subscription.

12. Security

The app talks to the server over HTTPS. Tokens and codes are stored on the server only as hashes, and the PIN never leaves the device. Parent screens are kept out of the app-switcher snapshots. If we learn of a breach that affects you, we will tell you.

13. Changes

We update this policy when the app changes. The date at the top shows when the current version took effect. We'll tell you about significant changes in the app or on the website.

14. Contacts

The service owner's details are available on request — write to us through any of the channels below.

• Telegram: @mitti_go
• Instagram: @mitti_go
• Web: mitti-go.uz

We answer data requests within 30 days.