Privacy Policy

1. Information pth AI Collects

Information you provide

When using pth AI, you may provide information such as:

• The subject or skill you want to learn
• Your experience level, learning preferences, and goals
• Answers to questions used to create your learning path
• Notes, quiz responses, and progress information
• Your email address or account information, if you create an account

pth AI uses this information to create and manage your personalized learning path.

Google and YouTube information

pth AI uses YouTube API Services to find relevant educational videos.

When you connect your Google or YouTube account, pth AI may receive limited account information and authorization needed to provide the feature you selected. This may include a Google account identifier and an authorization token.

pth AI currently uses this authorization to create a YouTube playlist only when you choose to create one.

pth AI does not collect or store your Google password.

pth AI does not use your YouTube viewing history, subscriptions, likes, comments, or private videos to create personalized paths.

Public YouTube information

pth AI may retrieve publicly available YouTube information, including:

• Video titles
• Video identifiers and links
• Channel names
• Thumbnails
• Video durations
• Video descriptions and other public video details

Technical information

pth AI and its hosting providers may automatically process basic technical information, such as browser type, device type, IP address, error logs, and pages or features used. This information is used to operate, secure, and troubleshoot the service.

Analytics and usage information

pth AI uses PostHog, a third-party analytics service, to understand how the product is used and to improve it. Through PostHog, pth AI automatically collects:

• Pages viewed and product actions taken (for example, starting a path, opening a module, taking a quiz)
• Interaction events such as clicks and navigation within the site
• Device and browser information (browser type, operating system, screen size) and IP address
• A pseudonymous analytics identifier, linked to your account identifier once you sign in
• Session replays — visual recordings of how the interface was used during a visit. Replays are configured to mask all text you type and all on-screen text, so the content of your learning goals, notes, and other inputs is not recorded.

Analytics events are limited to product-usage metadata. pth AI does not send the text of your learning goals, notes, reflections, quiz answers, or email address to the analytics service, and it does not send Google account information, OAuth tokens, or data received from YouTube API Services to the analytics service.

2. How Information Is Used

pth AI uses information to:

• Generate personalized paths
• Recommend and organize educational videos
• Generate quizzes and other learning materials
• Save notes and learning progress
• Create a YouTube playlist when requested
• Analyze how features are used, measure product performance, and diagnose problems (see "Analytics and usage information" above)
• Maintain, secure, and improve the service
• Respond to support or privacy requests

pth AI does not sell personal information or Google user data.

pth AI does not use Google or YouTube user data for advertising.

pth AI does not use Google or YouTube user data for analytics or measurement purposes.

3. How Information Is Shared

pth AI does not sell personal information or Google user data, and does not use Google or YouTube user data for advertising. pth AI shares information only with the categories of recipients described below, and only to the extent needed to operate the service.

Internal parties

pth AI is operated by Thomas Liberman as a sole operator. There are no employees or contractors with access to user information beyond the operator, who accesses information only as needed to operate, secure, and support the service.

External service providers

pth AI relies on the following categories of third-party service providers, each acting as a processor on pth AI's behalf:

• Hosting and application platform (Lovable, Cloudflare): receives technical request data (IP address, headers, request logs) to serve the website and run server functions.
• Database, authentication, and storage (Supabase): stores account information, learning paths, notes, progress, and Google OAuth authorization tokens.
• Artificial intelligence provider (Google Gemini via the Lovable AI Gateway): receives the learning topic and preferences you enter, plus public YouTube metadata (titles, descriptions, channels, durations), solely to generate topic sequences, recommendations, and quizzes. Google OAuth tokens, passwords, and private YouTube account information are never sent to the AI provider.
• YouTube Data API and Google OAuth (Google LLC): receives search queries and video identifiers to return public video metadata, and receives your authorization when you connect a YouTube account so pth AI can create a playlist in your account on your request.
• Product analytics (PostHog, Inc.): receives the usage events, device and browser information, IP address, pseudonymous identifiers, and masked session replays described in Section 1, solely so pth AI can understand and improve how the product is used. PostHog places cookies and uses browser storage on your device (see Section 4). PostHog does not receive the text of your learning goals, notes, or quiz answers, your email address, Google OAuth tokens, or any data obtained from YouTube API Services.

These providers are contractually limited to processing information for the purposes described above and do not receive information for their own independent uses.

Legal and safety

pth AI may disclose information if required by law, valid legal process, or to protect the rights, property, or safety of pth AI, its users, or the public.

Business transfers

If pth AI is involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction, subject to the commitments in this policy.

4. Cookies, Local Storage, and Similar Technologies

pth AI stores, accesses, and collects information directly and indirectly on and from your device, and allows the third-party service providers identified below to do the same, by placing, accessing, or recognizing cookies, browser local storage, session storage, and similar technologies on your device or browser. Specifically:

• Authentication (Supabase): your sign-in session token is stored in browser local storage to keep you signed in between visits.
• Analytics (PostHog, Inc.): PostHog places a first-party cookie and uses browser local storage on your device to assign a pseudonymous identifier, remember it across visits, connect your actions into sessions, and support session replay. This information is collected from your device and transmitted to PostHog as described in Sections 1 and 3.
• Form drafts and sign-in state (pth AI): if you fill in the path form before signing in, your draft (including the topic and goal you typed) is kept temporarily in your browser's session storage on your device so it isn't lost during sign-in; a short-lived sign-in flag is stored the same way. Session storage is cleared automatically when you close the browser tab.
• Interface preferences (pth AI): cookies may be used to remember interface settings you choose within pth AI.
• Hosting and security (Cloudflare): the hosting provider may set cookies and read device information needed for request routing, load balancing, and abuse prevention.

pth AI does not use advertising cookies and does not use cookies or similar technologies to track you across other websites. You can clear or block cookies, local storage, and session storage through your browser settings; doing so may sign you out, reset analytics identifiers, and prevent parts of pth AI from functioning.

5. Google and YouTube Services

pth AI uses YouTube API Services.

pth AI's use of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements.

Google's handling of information is described in the Google Privacy Policy.

YouTube-related features are also subject to the YouTube Terms of Service.

pth AI is an independent application and is not operated, sponsored, or endorsed by Google or YouTube.

6. Data Storage, Retention, and Refresh of YouTube API Data

pth AI may store paths, notes, quiz responses, preferences, and progress for as long as needed to provide the service, or until you request deletion.

YouTube API Data. pth AI stores YouTube video identifiers and related public metadata (such as titles, channel names, durations, and thumbnail URLs) as part of your saved learning paths. Consistent with YouTube's Developer Policies, stored YouTube API Data is refreshed from the YouTube Data API or deleted at least once every 30 days. When a video becomes unavailable or private on YouTube, the corresponding stored metadata is updated or removed on the next refresh. You can also trigger deletion of all YouTube API Data associated with your account at any time by disconnecting YouTube and requesting account deletion (see Section 7).

Google OAuth authorization tokens (access and refresh tokens) are stored only for as long as needed to provide the feature you authorized, and are deleted when you disconnect YouTube or when Google reports that access has been revoked.

Analytics data. Usage analytics and session replays are retained only as long as needed to analyze and improve the service. You can request deletion of analytics data associated with your account using the contact details in Section 7; on sign-out, the analytics identifier on your device is reset so later activity is no longer linked to your account.

7. Disconnecting Google and Deleting Your Data

You can disconnect YouTube at any time from the Connections page in pth AI Settings. When you click Disconnect, pth AI calls Google's OAuth revocation endpoint to revoke its access and then deletes the stored Google OAuth authorization data (refresh token, access token, and connection record) from pth AI's database.

Disconnecting does not delete YouTube playlists that pth AI previously created on your behalf. Those playlists remain in your YouTube account and can be edited or deleted there. To save another playlist after disconnecting, you will be asked to authorize pth AI with Google again.

You may also revoke pth AI's access to your Google account directly through your Google Account permissions page.

You may also request deletion of information stored by pth AI by emailing thomas.j.liberman@gmail.com with the subject line "pth AI Data Deletion Request."

After receiving a valid deletion request or learning that Google access has been revoked, pth AI will delete applicable stored Google and YouTube user data as soon as reasonably possible and within seven calendar days.

Deleting information from pth AI does not automatically delete playlists or other information stored directly in your Google or YouTube account. Those items must be managed through Google or YouTube.

8. Data Security

pth AI takes reasonable steps to protect information from unauthorized access, misuse, or disclosure. However, no website or online service can guarantee complete security.

9. Children's Privacy

pth AI is not intended for children under 13 and does not knowingly collect personal information from children under 13.

10. Changes to This Policy

This Privacy Policy may be updated as pth AI changes. Any updated version will be posted on this page with a revised effective date.

11. Contact

For privacy questions, complaints, or data requests, contact:

Thomas Liberman
pth AI
Email: thomas.j.liberman@gmail.com