1. Who we are
Plan My Workout ("we", "us") is a web application that helps you discover and plan workout videos from YouTube channels you choose.
2. What data we collect
When you sign in with Google, we receive and store:
- Your name and profile picture (for display purposes)
- Your primary Google account email address (used as your account identifier)
- A Google OAuth token, which we use to create and manage a YouTube playlist in your account on your request
When you use the app, we also store:
- The YouTube channel URLs you add
- Metadata about videos from those channels (title, description, duration, tags) - we do not store video files
- Your weekly workout schedule preferences
- Your generated workout plans
- Timestamps of your account activity
3. How we use your data
We use your data solely to provide the service:
- To identify your account and show your content
- To scan your chosen YouTube channels for workout videos
- To classify videos using AI (Anthropic Claude) and generate a personalised weekly plan
- To publish your plan to a YouTube playlist in your account, if you request it
We do not sell your data. We do not use your data for advertising.
4. YouTube API Services
This app uses the YouTube API Services to read video metadata from channels you select and to create and manage a YouTube playlist in your account.
By using this app, you are also agreeing to the YouTube Terms of Service and the Google Privacy Policy.
You can revoke this app's access to your YouTube account at any time via your Google Account security settings.
5. AI processing
Video metadata (titles, descriptions, tags) is sent to Anthropic's API for classification into workout categories. No personally identifiable information is sent to Anthropic. Anthropic's privacy policy applies to that processing.
6. Data retention and deletion
You can delete your account at any time from the Settings page. This permanently deletes all your data including your channels, videos, plans, schedule, and OAuth credentials. YouTube OAuth tokens are deleted immediately upon account deletion, in accordance with Google API ToS requirements.
7. Data security
OAuth tokens are encrypted at rest using AES-256 (Fernet). Your data is stored on Railway's managed PostgreSQL infrastructure.
8. Third-party services
We use the following third-party services to operate the app:
- Google OAuth - sign-in and YouTube access
- Anthropic Claude - AI video classification
- Railway - backend hosting and database
- Vercel - frontend hosting
9. Children's privacy
This app is not intended for users under 13. We do not knowingly collect data from children.
10. Changes to this policy
We will update this page if the policy changes and revise the effective date. Continued use of the app after changes constitutes acceptance.
11. Contact
Questions? Open an issue on GitHub.