Privacy Policy
Draft, version 2026-11. This text is a plain-English working draft and has not yet been reviewed by a lawyer.
1. Who we are
Welcome to the Kingdom is the controller of the personal data described here, under UK GDPR and the Data Protection Act 2018.
2. What we collect
- Your email address, display name and a securely hashed password.
- Your settings and the choices you make in the app.
- Analytics data from social accounts you connect, limited to what each platform's official interface provides with your permission: for example follower counts, post statistics and, where the platform shares it, engagement information.
3. What we do not collect
We do not collect your social media passwords, private messages, or anything unrelated to the analytics you ask for.
4. How we use it
Only to show you your own analytics, send account emails (such as email confirmation and password reset), keep the service secure and fix problems. We do not sell your data or use it for advertising.
5. Platform data
Access keys issued by social platforms are stored encrypted on our server and never sent to your browser. Data from TikTok, Instagram, Facebook, YouTube and other platforms is used only to provide your analytics and is handled under those platforms' rules.
5a. YouTube data
If you connect YouTube, Welcome to the Kingdom uses YouTube API Services and, by connecting, you also agree to be bound by the YouTube Terms of Service. Google's own handling of your data is described in the Google Privacy Policy.
- What we read: with two read-only permissions (youtube.readonly and yt-analytics.readonly), your channel name and picture, subscriber count, video titles, thumbnails and publish dates, and your channel's own statistics such as views, likes, comments, watch time and subscriber changes.
- What we do with it: show it to you, only, as charts and reports. We never post, edit or delete anything on your channel.
- Limited Use: our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, use it for advertising, or let people read it except where you switch on a sharing feature (see section 6) or the law requires it.
- Stopping it: disconnect YouTube in Settings at any time. This deletes the stored access key immediately, and if you choose "delete my data" it also deletes your imported YouTube data. You can also revoke access at myaccount.google.com/permissions.
6. Who sees it
Only you, with one exception you control. Our hosting and email providers process data on our behalf to run the service. Administrators do not see your individual analytics. If you choose to join the Kingdom leaderboard, other members can see the limited profile details you switch on there (such as your display name, your rank and, in the weekly Supporter of the Week feature, summary figures for your top posts). You can switch this off at any time. Joining is optional and nothing is shared until you opt in.
7. How long we keep it
While your account is open. When you delete your account, your data and connections are deleted. Short-lived security logs may be kept briefly.
8. Your rights
You can download a copy of your data, correct it, disconnect any platform, or delete your account in Settings. You can also complain to the Information Commissioner's Office (ico.org.uk).
9. Contact
Questions: use the contact address shown in the app's Settings.