Privacy Policy

• Account: the email address you sign in with, any name you provide, and your chosen public display name.
• Subscription: Stripe stores your payment details; we never see your card number. We store the Stripe customer and subscription identifiers so we know whether your account is active.
• Preferences: your chosen topics, time of day, language, voice speed, reading/listening mode, preferred anchor, and which of our emails you want.
• Generated briefs: the list of articles in each of your briefs and an optional "why this matters to you" one-line note per article.
• Reading history and dwell time: which articles you open and roughly how long you spend on each one, with the topic. This is stored against your account and is what powers the For You feed, your reading streak, and the end-of-year Wrapped.
• Things you deliberately save or follow: saved articles, followed stories, markets watchlist, saved weather locations, notification history.
• Community: your comments and replies, the comments you upvote, and any reports you file. Display names are never derived from your email address.
• Games: your scores, streaks, badges and leaderboard entries.
• Analytics: first-party page-view events — page path, referrer, and a random session identifier stored in your browser's localStorage. When you are signed in, these events are also linked to your account. No cookies for this, and no cross-site tracking.
• Weather location: if you allow it, your browser's location is used only to fetch a local forecast and is kept in your browser, not on our servers. Otherwise we estimate a city from your IP address, cached for 24 hours. You can set any location by hand on the weather page.
• Technical: per-IP request counts to enforce rate limits, and a coarse IP + user-agent fingerprint used only to count free-tier article previews.
• Location: only if you grant it on the weather page, and only to show local weather.

• Transactional: sign-in links, password resets, receipts, billing and cancellation notices. These are part of the service and you can't opt out of them while you have an account.
• Daily newsletter: one plain-text email each morning with the day's headlines.
• Breaking-news alerts: an email when a major story breaks, alongside an in-app notification.

The last two are optional. Every one of them carries a one-click unsubscribe link that works without signing in, and you can switch either stream on or off from your account page. We honour opt-outs immediately.

• Providing the service — generating, narrating and serving your brief; running your account; publishing your comments. Basis: performance of a contract (Art. 6(1)(b)).
• Taking payment and issuing refunds through Stripe. Basis: performance of a contract, and legal obligation (Art. 6(1)(c)) for tax and accounting records.
• Transactional email. Basis: performance of a contract.
• Newsletter and breaking-news alerts. Basis: consent (Art. 6(1)(a)) where consent is required, otherwise our legitimate interest in keeping our own readers informed — withdrawable at any time with one click, with no effect on anything else.
• Personalisation from reading history. Basis: legitimate interests (Art. 6(1)(f)) in making the product useful, balanced against your interests; you can object and switch it off.
• Rate limiting, abuse prevention and security. Basis: legitimate interests in keeping the service available and safe.
• Comment moderation. Basis: legitimate interests in keeping the discussion lawful and usable, and legal obligation where content must be removed.

• Stripe — payment processing.
• SMTP provider (Postmark / Resend) — email delivery.
• Anthropic — to generate the personalised one-line notes on briefs, and the broadcast summaries served by the browser-extension API. Article text passes through Anthropic but is not retained by them for training (per their commercial agreement).
• Hetzner — server hosting and object storage (EU data centres).
• Google — optional "Sign in with Google" authentication.
• Skimlinks — affiliate conversion of outbound shopping links, if and when it is switched on. See the disclosure page.

We also disclose data where the law requires it (valid legal process), and we would transfer it to a buyer if the business were sold — we would tell you before that happened. We do not sell personal information and we do not share it for cross-context behavioural advertising.

• Account, preferences, saved items, follows: while your account exists.
• Reading history, streaks, game scores: while your account exists; the raw dwell-time rows are what feed For You and Wrapped.
• Generated briefs: while your account exists.
• Analytics events: retained in identifiable form for no more than 24 months.
• Rate-limit counters and free-preview fingerprints: a rolling 30-day window, then discarded.
• Comments: retained while published; on account deletion they are anonymised rather than removed, so threads don't develop holes.
• Email opt-out records: kept indefinitely — we have to remember that you unsubscribed in order not to email you again.
• Payment and tax records: retained by Stripe and by us for as long as tax and accounting law requires (typically 6–7 years).
• On account deletion: your row and everything cascading from it (sessions, credentials, saved articles, reading history, streaks, scores, notifications, watchlists, votes) are removed immediately; anything remaining in backups ages out within 30 days.

• Choose which emails you get on your account page, or with the one-click unsubscribe link in any email — no sign-in needed.
• Update or delete preferences from your account page. Muting topics stops them being used to personalise.
• Cancel your subscription from the Stripe Customer Portal linked on your account page. Access continues until the end of the current period.
• Delete your account yourself from the account page (Danger zone → Delete account), or by emailing hello@apprise.news. Self-serve deletion is immediate: any active subscription is cancelled, your account and personal data are removed, and your comments are anonymised. Stripe records are retained per their compliance obligations.
• Export your data on request to the same address.
• Object to personalisation by emailing us; we will stop using your reading history to rank content.

• Access the personal data we hold about you, and get a copy.
• Rectification — have inaccurate data corrected and incomplete data completed.
• Erasure ("right to be forgotten"), subject to records we must keep by law.
• Restriction of processing while a dispute about accuracy or legitimate interests is resolved.
• Data portability — receive the data you gave us in a structured, machine-readable format, and have it sent to another controller where technically feasible.
• Object to processing based on legitimate interests, including profiling. If you object to personalisation we will stop.
• Withdraw consent at any time where we rely on it (for example the newsletter), without affecting processing already carried out.
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We don't make any.

Email hello@apprise.news to exercise any of these. We answer within one month and will not charge you, unless a request is manifestly unfounded or excessive. We may need to verify your identity first — usually by asking you to reply from the address on the account.

Complaints. You can complain to your local supervisory authority. In the UK that is the Information Commissioner's Office (ico.org.uk); in the EU it is the data-protection authority of the country where you live, work, or where you think the problem happened. We would rather you told us first, but you do not have to.

Transfers. The service is operated from the United States with hosting in EU data centres. Where personal data is transferred out of the UK/EEA we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum), together with the supplementary measures our processors have in place.

Notice at collection. We collect the categories of personal information listed under "What we collect" above — in CCPA terms: identifiers (email, account id, IP address), customer records (name, payment identifiers held at Stripe), commercial information (your subscription), internet activity (pages viewed, articles read, dwell time, referrer), geolocation (only if you grant it), and audio/visual-adjacent content you create (comments). We collect it for the business purposes described under "Why we use this data", keep it for the periods under "How long we keep it", and we do not collect sensitive personal information for the purpose of inferring characteristics about you.

You have the right to:

• Know what personal information we have collected, the sources, the purposes, and who we disclosed it to.
• Delete the personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information, and of profiling for targeted advertising — see below.
• Limit the use of sensitive personal information. We do not use any for the purposes that trigger this right.
• Non-discrimination. We will never deny you service, charge you a different price, or give you a lower quality of service because you exercised a privacy right. There are no financial-incentive programmes attached to your data.

Exercise any of them by emailing hello@apprise.news, or by deleting your account yourself from the account page. We will verify your request by asking you to reply from the address on the account. You may use an authorised agent; we will ask for written proof of their authority.