Legal
Privacy Policy
Effective date: May 1, 2026
Last updated: August 22, 2026
ReateIt respects your privacy. This Privacy Policy explains what information we collect, how we use it, and how users can contact us.
Information We Collect
We may collect account information such as your name, email address, profile details, city/location text entered by you, profile photo, and content you create or share in the app.
Camera and Photos
ReateIt may request camera access so you can take a profile photo. ReateIt may also request access to photos or media so you can select a profile photo from your device. Camera and photo access is used only for user-selected profile image features.
How We Use Information
We use information to create and manage user accounts, show profiles, support collaboration features, enable sign-in, provide messaging and notifications, and improve the app experience.
Third-Party Services
ReateIt uses third-party services including Firebase for authentication, database, and notifications, Google Sign-In for account access, and Cloudinary for profile image upload and hosting. These services may process information according to their own privacy policies.
ReateIt also uses the Instagram API with Instagram Login from Meta and Google OAuth with YouTube API Services for optional connected-account verification. Google Sign-In used to access a ReateIt account is separate from the optional YouTube authorization described below.
Connected Social Accounts and OAuth
Connecting Instagram or YouTube is optional. A connection begins only when you actively select the relevant connection option and grant authorization through the provider’s official OAuth screen. You may decline authorization and continue using unrelated ReateIt features.
Instagram and Meta
ReateIt uses the Instagram API with Instagram Login and requests the instagram_business_basic permission. Instagram OAuth is available only for eligible Instagram professional accounts, including Business and Creator accounts.
With your authorization, ReateIt may access the following information for the authorized Instagram professional account:
- Instagram-scoped account ID
- Username or handle
- Display name
- Account type
- Profile-picture URL
- Follower count
- Media count
ReateIt uses this information only to verify that you control the connected Instagram account and to display the connected Instagram identity on your ReateIt profile. A verified connected Instagram profile may be visible to other ReateIt users as part of your public creator profile.
This permission is not used to publish Instagram content, read or send messages, manage comments, access your password, or modify your Instagram account. ReateIt never receives or stores your Instagram password.
You can decline authorization or ask ReateIt to disconnect Instagram without deleting your ReateIt account. To remove Instagram information stored by ReateIt, email reateit@gmail.com. You can separately revoke ReateIt’s authorization through your Meta or Instagram account settings. Revoking access at Meta stops future API access but may not notify ReateIt to remove an already saved profile link, so please also use the in-app removal option if available or contact us. For more information, see Meta’s Privacy Policy.
Google and YouTube
ReateIt uses Google OAuth and YouTube API Services and requests the read-only scope https://www.googleapis.com/auth/youtube.readonly.
With your authorization, ReateIt may access the following information for the authorized YouTube channel:
- YouTube channel ID
- Channel handle or custom URL
- Channel title
- Channel description
- Channel profile image
- Subscriber count, where available
- Video count
- Channel view count
ReateIt uses this information only to identify and verify your YouTube channel and display the connected channel on your ReateIt profile. A verified connected YouTube channel may be visible to other ReateIt users as part of your public creator profile.
The read-only permission is not used to upload, edit, or delete videos; manage comments or playlists; access viewing history; or obtain your Google or YouTube password. ReateIt never receives or stores your Google password.
The application code needed to verify whether Google OAuth access or refresh tokens are stored, or are used only temporarily during the server-side authorization exchange, was not available for this policy update. ReateIt therefore does not claim here that OAuth tokens are temporary-only. You can revoke access through Google Security Settings. See also Google’s Privacy Policy and the YouTube Terms of Service.
ReateIt’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Storage, security and sharing
ReateIt stores social links as profile information to maintain and display them on your ReateIt profile, and ReateIt uses Firebase for its application database. The available website code does not establish which of the provider identity and profile fields described above, or which OAuth access or refresh tokens, are persisted by the mobile application or backend. Those details must be verified against the application implementation before this policy can make a more specific storage claim.
ReateIt does not sell OAuth credentials or Google, YouTube, Instagram, or Meta provider data. This data is not used for targeted advertising, credit decisions, surveillance, or unrelated purposes. It is shared only with service providers necessary to operate ReateIt, when required by law, or when you explicitly authorize the sharing.
ReateIt uses reasonable technical and organizational safeguards for connected-account information in transit and at rest. No method of transmission or storage is completely secure.
Disconnecting, revocation and deletion
You may disconnect Instagram or YouTube without deleting your ReateIt account. If your version of ReateIt provides a removal control for the connected social link, use that control from your profile. Because an in-app disconnect path is not documented in this website repository, you can always request removal of the stored provider information by emailing reateit@gmail.com.
You can delete your ReateIt account in the app by opening Profile, selecting Delete Account, typing DELETE, and confirming. You can also email reateit@gmail.com. Complete instructions are available on ReateIt’s account-deletion page.
ReateIt’s account-deletion process removes or anonymizes profile social links and related account data, subject to legal, safety, security, fraud-prevention, backup, and technical retention limitations described in ReateIt’s deletion materials. The available implementation does not establish the behavior of a provider-only in-app disconnect, so contact reateit@gmail.com to ensure a removal request is processed. Revoking authorization directly through Meta or Google stops future authorized API access.
The available implementation does not show that ReateIt can detect an external Google authorization revocation and automatically delete associated stored YouTube channel data. ReateIt therefore does not promise automatic deletion within seven calendar days after external revocation. After revoking access in Google Security Settings, contact reateit@gmail.com to request deletion of stored YouTube information.
User choices
Social-account connection is optional. Where ReateIt supports it, you may use an unverified, manually entered social link instead. Refusing or revoking Instagram or YouTube access prevents automatic verification but does not remove unrelated ReateIt functionality. For privacy, disconnection, or deletion questions, contact reateit@gmail.com.
Data Sharing
We do not sell user personal information. We may share information with service providers only as needed to operate the app, comply with law, or protect the safety and security of users and the service.
Data Retention and Deletion
We retain user information while an account is active or as needed to provide the app. Users may contact us to request deletion of their account or personal information.
Security
We use reasonable technical and organizational measures to protect user information. However, no method of transmission or storage is completely secure.
Children's Privacy
ReateIt is not intended for children under 13. We do not knowingly collect personal information from children under 13.
Contact
For privacy questions or deletion requests, contact us at reateit@gmail.com.