INNER EMPIRE APP PRIVACY
This page covers the Inner Empire mobile application, published by Streignth LLC. It is in addition to the Streignth privacy policy, which covers streignth.com and purchases.
Last updated: August 14, 2026
Connecting your YouTube account is optional
Inner Empire's Cinema section shows Streignth's YouTube episodes. You can watch every episode, see the comments, and earn everything the app offers without connecting anything.
What Google user data we access
If you connect your YouTube account, Inner Empire requests a single OAuth scope from Google:
https://www.googleapis.com/auth/youtube.force-ssl
This is a broad scope. Google grants it as a single permission that technically allows an application to manage a YouTube account, including uploading and deleting videos, editing video metadata, and managing captions and playlists. Google does not offer a narrower scope for the two actions Inner Empire performs, so this is the smallest scope that makes those actions possible.
Inner Empire uses it for two actions only, and only when you ask:
- Post the comment you typed, to the Streignth episode you are watching, so it appears publicly under your own name and channel.
- Apply your like to that episode when you tap Like.
The Google user data we receive and handle is limited to:
- OAuth access and refresh tokens issued by Google. These stay on your device and are never sent to us. See "Where your YouTube access lives" below.
- The id of the comment you post, which Google returns so the app can confirm it worked. It is shown to you and then discarded.
We do not access Gmail, Drive, Contacts, Calendar, Photos, or any other Google service. We do not access your subscriptions, watch history, or any video or playlist you own.
What we never do
We do not upload, edit or delete your videos. We do not change your channel settings. We do not read, edit or delete any comment other than the one you are writing at that moment. We do not touch captions or playlists. We only ever write to videos published on the Streignth channel.
We do not use your Google user data for advertising, marketing, or profiling. We do not use it to train, develop or improve generalized machine learning or artificial intelligence models. We do not sell it. It is used only for the two actions above, when you ask for them.
What we store
Nothing from your YouTube account is stored on our servers. Not your tokens, not your channel details, not the text or the id of your comment.
The only thing recorded is a tick against that episode in your own Streignth account, noting that you commented or liked it, so the app can show you your progress. That tick contains no Google data.
Where your YouTube access lives
Your YouTube access never leaves your phone.
When you connect, Google issues Inner Empire two things: an access token, which is what actually posts your comment or applies your like, and a refresh token, which lets the app get a new access token when the old one expires after about an hour. Without the refresh token you would have to sign in again every hour, so we hold one.
Both are stored in the secure storage your phone provides for credentials: the Keychain on iPhone, the Keystore on Android. That storage is encrypted at rest by the operating system and tied to your device hardware.
They are never sent to a Streignth server. We do not have a copy. They are never written to a log or an error message, never shown in the app, and no other member and no Streignth employee can read them. The only place either token is ever sent is Google.
We keep them until you disconnect, or until you delete the app. Deleting the app removes the stored copy from your phone. If you reinstall, you connect once more.
Who we share it with
We do not sell, transfer or disclose your Google user data to anyone, with three exceptions:
- Our infrastructure providers, strictly as needed to run the app. They process data on our behalf under contract and may not use it for their own purposes. They are Supabase, which runs our database and file storage, and Expo, which builds and delivers the app.
- When required by law, legal process, subpoena, or a valid government request.
- Where necessary to protect the rights, property or safety of Streignth LLC, our members, or the public.
If Streignth LLC is involved in a merger, acquisition, or sale of assets, we will only transfer Google user data to a receiving party that agrees to honor the commitments in this policy, and we will notify affected members.
We do not transfer your Google user data to anyone for human review, except with your express consent, where necessary for security, or where the law requires it.
How we protect it
- All data moves over TLS 1.2 or higher.
- Your Google OAuth tokens are held only on your own device, in the iPhone Keychain or the Android Keystore, which the operating system encrypts at rest and protects with the device secure hardware. Because we hold no copy of them on any Streignth system, there is no server-side store of your Google credentials to breach.
- Access to production systems is limited to authorized personnel and protected by multi-factor authentication.
- Row-level security is enforced per member, so no member can read another member's data.
- We log and monitor access to sensitive data.
Disconnecting
Disconnecting revokes it at Google, not just here. Tap Disconnect YouTube in the app. Inner Empire asks Google to cancel the connection first, and then erases the tokens from your phone. It erases them from your phone even if the revocation request fails, so disconnecting always removes our access from your device.
Revoking at Google cancels the whole connection at once, not just the short-lived access token, so Streignth stops appearing in your Google account list of connected apps. You can also revoke it yourself at any time at myaccount.google.com/permissions, which takes effect immediately.
Disconnecting does not remove comments you already posted; those are yours, on YouTube, and you can delete them there. Inner Empire has no ability to delete them, even if you asked.
Deleting your data
To request deletion of your Inner Empire account and everything associated with it, email shaneskaar@streignth.com. We process deletion requests within 30 days.
Google's Limited Use commitment
Inner Empire's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
shaneskaar@streignth.com
Streignth LLC, N6057 Bergum Coulee Road, West Salem, WI 54669
