The Short Version

DeGist exists to help you keep up with creators you follow. We collect only what we need to provide this service. We do not sell your data, show you ads, or track you across the web. You can export or delete your data anytime.

What We Collect

Account Information

When you create an account, we collect your email address. If you sign up with Google, we receive only your email and name from that service.

Creator List and Preferences

We store which creators you follow, your topic preferences, reading history (which posts you've marked as read), saved posts, and display preferences.

Content Sources

DeGist fetches publicly available content from YouTube, Substack, Reddit, and RSS feeds. For YouTube, we use publicly available video metadata and transcripts. We do not require or store any YouTube account credentials.

What We Don't Collect

We don't track you across other websites
We don't collect location data
We don't use third-party advertising trackers
We don't sell or share your data with data brokers
We don't use your reading habits to show you ads (we don't show ads at all)

How We Use Your Data

To fetch content from creators you follow
To generate summaries using AI (Claude by Anthropic)
To display your personalised digest
To send you email digests (if you opt in)
To process payments (via Stripe)

Third-Party Services

We use the following services to operate DeGist:

Supabase — Database and authentication
Stripe — Payment processing
Anthropic — AI summary generation
Vercel — Hosting
Resend — Email delivery

Each of these services has their own privacy policy. We've chosen providers with strong privacy practices and who do not sell data.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Some anonymised, aggregated data may be retained for analytics purposes.

Posts and summaries are retained in our global cache (without personal identifiers) to avoid re-processing the same content for other users. This does not include any of your personal reading history or preferences.

Your Rights (GDPR & CCPA)

If you are located in the European Economic Area (EEA) or United Kingdom, your data processing is governed by the GDPR. If you are in California, you have rights under the CCPA. You have the right to:

Access — Export all your data from Settings → Privacy
Rectification — Update your profile and preferences anytime
Erasure — Delete your account and all data from Settings → Privacy
Portability — Export your data in JSON format
Object — Object to processing for legitimate interests
Withdraw consent — Withdraw any previously given consents

Our lawful basis for processing your data is contractual necessity (to provide the service you signed up for). We do not process your data on the basis of legitimate interests or consent beyond what is necessary to operate DeGist.

For GDPR/CCPA requests, email support@contact.degist.app. We respond to all requests within 30 days. You also have the right to lodge a complaint with your national data protection authority.

AI Transparency (EU AI Act)

In accordance with EU AI Act Article 50, all AI-generated content within DeGist is clearly labelled as "AI-generated summary" at the point of display. Extractive summaries (algorithmically extracted key points from transcripts) are labelled separately as "Key points from transcript".

AI summaries are generated using Claude (by Anthropic). Summaries are intended as informational aids only and may not perfectly represent the original content. We encourage you to read or watch the original source material for complete information.

DeGist does not use AI to make automated decisions that significantly affect users. All personalisation (creator lists, topics) is based on your explicit choices, not algorithmic inference.

Security

We take security seriously:

All data is encrypted in transit (TLS) and at rest
Passwords are hashed securely
Row-level security (RLS) ensures you can only access your own data

Cookies

We use only essential cookies for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

Children's Privacy

DeGist is not intended for children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we'll delete it.

Changes to This Policy

We may update this policy. If we make significant changes, we'll notify you via email or in-app notification. The "Last updated" date at the top always reflects the current version.

Contact

Questions about privacy? Email support@contact.degist.app or visit our Contact page.

Privacy Policy