Privacy Policy

DRI YouTube Replies · last updated 8 September 2026

DRI YouTube Replies ("the app") is an internal tool operated by Dr. Idriss Inc. ("we", "us"). It helps Dr. Shereene Idriss reply to comments left on her own YouTube channel. This policy explains what data the app accesses through Google APIs, what it does with that data, where it is kept, and who else sees it.

The app has exactly one user: the owner of the Dr. Shereene Idriss YouTube channel. It is not a public product and no one else can sign in to it.

The Google data we access

The app requests one OAuth scope:

https://www.googleapis.com/auth/youtube.force-ssl

Using that scope, the app accesses:

• Public comments and replies on videos belonging to the authorising channel, including the comment text, the commenter's public display name, the public comment ID, its like count and its timestamp.
• Public video metadata for those videos, such as the title and publication date, so a comment can be shown next to the video it was left on.
• The channel's own identity, to confirm the authorised account is the intended channel before anything is posted.

The app writes exactly one kind of data back to Google: a reply to a comment thread, posted as the authorising channel, and only after a human has approved that specific text.

What we do not access

• We do not upload, edit or delete videos.
• We do not read or change channel settings, monetisation or analytics.
• We do not delete or moderate other people's comments.
• We do not access private user data belonging to commenters beyond the public display name attached to a public comment.
• We do not access any other Google product: no Gmail, no Drive, no Calendar, no Contacts.

How we use it

Comment text is used to draft a candidate reply and to decide whether a comment is worth replying to at all. Existing replies on a thread are read so that the app never answers a comment a human has already answered, and never replies to the same person twice in a day. Approved replies are posted to the comment thread they belong to. That is the entire purpose.

We do not use this data for advertising, for profiling, for building audience lists, or for any purpose unrelated to replying to comments on the channel.

Who we share it with

We do not sell this data and we do not share it with data brokers. It is shared with two categories of service provider, solely so the app can function:

• AI model providers (Anthropic and OpenAI). The text of a comment is sent to these providers' APIs so a candidate reply can be drafted and so the draft can be checked for accuracy. Under both providers' API terms, data submitted through the API is not used to train their models. No commenter's data is sent for any other purpose.
• Infrastructure providers. The app runs on Railway and stores data in a private Neon PostgreSQL database. These providers host the data on our behalf and do not use it for their own purposes.

We may disclose data if legally required to do so.

What we store, and for how long

We store the comment text, the commenter's public display name, the public comment and video IDs, the reply we drafted, whether a human approved it, and whether it was posted. This is kept in a private database that is not publicly accessible, so that the app can avoid replying to the same comment twice and so we have a record of what was published under the channel's name.

Records are retained for as long as the tool is in use and deleted on request. Google OAuth refresh tokens are stored as encrypted environment variables in our hosting provider and are never written to logs or shared.

Security

Access to the database and to the hosting environment is restricted to named administrators. Credentials are held as secrets in the hosting provider rather than in source code. All connections to Google APIs use HTTPS.

Revoking access

The channel owner can revoke this app's access at any time at myaccount.google.com/permissions. Doing so immediately stops the app from reading comments or posting replies. To request deletion of stored data, email the address below.

Contact

Dr. Idriss Inc. — amr@dridriss.com