add PRIVACY.md

Author: yuliskov

PRIVACY.md

@@ -0,0 +1,28 @@
+# Privacy Policy for SmartTube (F-Droid Build)
+
+**Last Updated:** March 20, 2026
+
+This Privacy Policy applies specifically to the **F-Droid flavor** of SmartTube (Package ID: `app.smarttube.fdroid`). This version is specifically hardened for user privacy and compliance with F-Droid’s inclusion policy.
+
+## 1. Scope of this Policy
+This document covers the **F-Droid build** only. Other versions or "flavors" of the application (e.g., Stable, Beta) may contain additional features such as self-update mechanisms or crash reporting that are removed in this specific F-Droid release.
+
+## 2. Data Collection and Processing
+* **No Backend:** The F-Droid build of SmartTube operates entirely as a client-side application. It does not communicate with any developer-controlled servers.
+* **No Telemetry or Analytics:** This version contains no tracking code, telemetry, or analytics frameworks (e.g., no Firebase, no Crashlytics). We do not monitor how you use the app.
+* **No Update Tracking:** The self-update mechanism is disabled in this flavor. Updates are handled exclusively through the F-Droid client.
+
+## 3. Third-Party Services (YouTube/Google)
+* **Authentication:** Sign-in is handled locally via the official Google OAuth 2.0 flow. Your credentials and tokens stay on your device and are never sent to the developer.
+* **Data Flow:** Video data and account information are fetched directly from YouTube/Google servers to your device.
+
+## 4. Automated Decision-Making and Profiling
+In accordance with **GDPR Article 15**, we confirm for this build:
+* **No Profiling:** We do not track user behavior to build profiles.
+* **No Automated Decisions:** The app does not use algorithms or AI to make decisions about users or to manipulate content ranking. Content is served as-is from the YouTube API.
+
+## 5. Your Rights (GDPR / CCPA)
+Because this specific build flavor does not store or transmit personal data to the developer, we hold no identifiable records (names, emails, IPs) associated with your identity. Therefore, we have no data to provide or delete upon request.
+
+## 6. Contact
+For technical inquiries regarding the privacy architecture of the F-Droid build, please open an issue on the official GitHub repository.