Last updated: 11 September 2026
 

1. Who we are

News Agency is a trading name of Reality Co XYZ Ltd, a company registered in England and Wales with company number 17162614, whose registered office is at 66 Paul Street, London EC2A 4NA.
 

Reality Co XYZ Ltd is the data controller for the personal data described in this policy. We are registered with the Information Commissioner’s Office as a data controller.
 

This policy covers the News Agency mobile application (the “App”), our websites at news-agency.org and app.news-agency.org, and our email briefings. The Service is offered to users in the United Kingdom.
 

You can contact us about privacy at support@news-agency.org.
 

2. Summary

• You can read headlines and the lead story without an account. We collect very little from you if you do that.

• If you create an account, we collect an email address and, where your sign-in provider gives us one, a name.

• We never see your payment card details. Subscriptions are bought through the Apple App Store or Google Play, and they handle payment.

• Everyone receives the same briefing. We do not profile you to decide what you read.

• No personal data is sent to the AI systems that produce our briefings. Those systems process news articles.

• Stories you save in the App stay on your device and are never sent to us.

• We record a sample of app sessions to diagnose faults. Section 7 explains this and how to object.

• You can ask us for a copy of your data, or ask us to delete your account, at any time.

3. Who this policy applies to

Guests. You can open the App and read the headlines and lead story without creating an account. We still collect the analytics and diagnostic data in section 4, but we hold no account record for you.
 

Account holders. An account is needed to start a trial or hold a subscription.
 

Email briefing subscribers. Some people receive the briefing by email. This is a separate opt-in, and section 8 explains it.
 

4. What we collect

Account data. Your email address, and your first and last name where your sign-in provider supplies them. You can sign in with Apple, with Google, or with a one-time code sent to your email address. We never receive your Apple or Google credentials.
 

If you use Sign in with Apple and choose Hide My Email, we receive a private relay address rather than your own. Apple supplies your name only on first sign-in, so we keep it when we receive it.
 

We also hold an internal user identifier from our authentication provider, and a referral code if you took part in a referral.
 

Subscription data. Whether you hold a trial or a paid subscription, when it started and ends, whether it renewed or lapsed, and which store it was bought through. We do not receive your card number, billing address or any other payment details.
 

Usage data. App lifecycle events and the names of screens you open, together with device and app properties. We do not record which individual stories you open. Our analytics identifies you by an internal user identifier, not by your email address or name.
 

Device and diagnostic data. Device model, operating system and app version, language and region, IP address, and crash reports, error traces and performance timings when something goes wrong.
 

Session recordings. We record a small sample of app sessions, and sessions in which an error occurs, to diagnose faults. See section 7.
 

Correspondence. Anything you send us by email. If you contact support from inside the App, the message may include technical diagnostics such as your app version and whether you are signed in.
 

Email briefing data. If you receive the briefing by email, your email address, name where we hold one, and standard delivery information such as whether an email was opened or a link clicked.
 

5. What we do not collect

• We do not receive or store payment card details.

• We do not send any personal data to the AI systems that generate our briefings. Those systems process news articles from published sources, not information about you.

• Stories you save in the App are stored on your device only. They are never transmitted to us, and they are not recoverable by us if you lose the device or delete the App.

• We do not record which stories you read.

• We do not use advertising or attribution networks, we do not track you across other companies’ apps or websites, and we do not sell personal data. We do not collect an advertising identifier and the App does not show the iOS tracking permission prompt.

• We do not collect your precise location or your contacts.

6. Why we use your data, and our legal basis

Provide the App to guests, including the free headlines and lead story

• Data used: Usage data, device data

• Legal basis: Legitimate interests: providing the service you have asked for

Create and operate your account, authenticate you, and provide the briefings you have subscribed to

• Data used: Account data, subscription data

• Legal basis: Performance of a contract with you

Send service messages about your account, billing or service interruptions

• Data used: Account data

• Legal basis: Performance of a contract with you

Understand how the App is used and improve it

• Data used: Usage data, device data

• Legal basis: Legitimate interests: running and improving our service

Diagnose faults, including through session recordings

• Data used: Diagnostic data, session recordings

• Legal basis: Legitimate interests: keeping the service working

Maintain the security of our systems

• Data used: Device data, account data

• Legal basis: Legitimate interests: security

Respond to your enquiries

• Data used: Correspondence, account data

• Legal basis: Legitimate interests: supporting our users

Send the email briefing and other marketing email

• Data used: Email briefing data

• Legal basis: Consent

Operate referrals

• Data used: Referral code, account data

• Legal basis: Performance of a contract with you

Keep financial and tax records

• Data used: Subscription data

• Legal basis: Legal obligation

Where we rely on legitimate interests, we have weighed those interests against your rights and concluded that our processing is not overridden by them. You can object at any time. See section 13. You can withdraw consent at any time without affecting processing already carried out.

7. Analytics, diagnostics and session recording

We use PostHog, hosted in the European Union, for product analytics. Automatic capture of taps and screen content is switched off. We collect app lifecycle events and screen names, tied to an internal user identifier for signed-in users. Your email address and name are not sent to PostHog.
 

We use Sentry, hosted in Germany, for crash reporting, error tracking and performance monitoring. In the App, Sentry is configured not to send personal information by default. On our web systems, Sentry receives request data including IP addresses.
 

Sentry records a sample of sessions, approximately one in ten in the App and every session in which an error occurs, so that we can see what happened before a fault. These recordings capture interactions with the interface.

They are used only for diagnosis, are retained for no more than 90 days, and are deleted on the same cycle as other diagnostic data.
 

We also receive build and performance metrics from Expo, which provides our app build and update infrastructure.

If you would prefer not to be included in session recording or analytics, email support@news-agency.org and we will exclude your account.
 

8. Email briefings and marketing

New accounts start opted out of email. You can opt in from the profile screen in the App, and opt out again in the same place or by using the unsubscribe link in any email. We use Klaviyo to send these emails.
 

Some people subscribed to our email briefing before the App existed. The briefing is moving to the App. If you are on that list, we will continue sending during a transition period and will tell you how to move across. That period will run for six to eight weeks. After it ends, we will close the list and delete the records of anyone who has not created an App account or opted in through it.
 

Opting out of the briefing does not stop service messages about your account or subscription, which we need to send you.
 

9. Who we share data with

We do not sell your personal data. We use the following providers, each under written terms that permit them to process your data only on our instructions:

Clerk

• What they do: Authentication: Apple, Google and email one-time codes

• Where: Clerk cloud

Neon

• What they do: Our database

• Where: London, United Kingdom

Vercel

• What they do: Hosts our API and web systems

• Where: Vercel cloud

RevenueCat

• What they do: Manages subscription entitlements

• Where: United States

PostHog

• What they do: Product analytics

• Where: European Union

Sentry

• What they do: Crash reporting and session recording

• Where: Germany

Expo

• What they do: App builds, updates and performance metrics

• Where: United States

Klaviyo

• What they do: Email delivery

• Where: United States

Stripe

• What they do: Legacy web subscriptions only

• Where: United States

Inngest

• What they do: Scheduling for our publishing pipeline

• Where: United States

Apple and Google. When you sign in with your Apple or Google account, or buy a subscription through their stores, they process your data as independent controllers under their own privacy policies, not as our providers. We receive limited information back from them, as described in section 4. We do not control their handling of your data.

Professional advisers and authorities. Our accountants, lawyers and insurers where needed, and law enforcement or regulators where we are required to disclose.

A buyer or successor, if our business is sold or reorganised. We would tell you if that happened and your data continued to be processed.

The AI providers that generate our briefings receive news article text only. They do not receive any information about you.

10. Where your data is held

Our database is hosted in London. Our analytics and error tracking are hosted in the European Union.

Some of our providers are based in, or use infrastructure in, other countries, including the United States. Where personal data leaves the UK to a country without UK adequacy regulations, we rely on the UK International Data

Transfer Agreement, or the UK Addendum to the European Commission’s standard contractual clauses, together with any additional safeguards required.

You can ask us for details of the safeguards applying to a particular transfer.

11. How long we keep data

Account data: for as long as you have an account. When you delete your account, we remove your email address, name and billing identifiers from our records within 30 days, and remove you from our email provider. A record without identifying information is retained so that our systems remain consistent; it cannot be used to identify you.

Backups are overwritten within 35 days.

Subscription and transaction records: six years from the end of the relevant financial year, because tax law requires it. These are held separately and are not used for any other purpose.

Usage and analytics data: up to 24 months, after which it is deleted or aggregated so that it no longer identifies you.

Crash, error and performance data: up to 12 months.

Session recordings: up to 90 days.

Correspondence: up to 24 months after a matter is closed.

Email briefing data: until you unsubscribe, or until the transition described in section 8 is complete.

12. Deleting your account

You can delete your account at https://app.news-agency.org/delete-account, or by emailing support@news-agency.org.

Deleting your News Agency account does not cancel your subscription. Subscriptions bought through the Apple App Store or Google Play must be cancelled in your Apple or Google account settings. If you delete your account without cancelling, you may continue to be charged.

Stories saved on your device are not affected by account deletion. They remain on the device until you remove them or delete the App.

13. Your rights

Under UK data protection law you have the right to:

• access a copy of the personal data we hold about you;

• rectify data that is inaccurate or incomplete;

• erase your data in certain circumstances;

• restrict how we use your data while a concern is investigated;

• object to processing based on our legitimate interests, including analytics and session recording, and to direct marketing at any time;

• portability: receive certain data in a machine-readable format, or have it sent to another provider;

• withdraw consent where we rely on it, without affecting processing already carried out.

To exercise any of these, email support@news-agency.org. We will respond within one month. We may ask you to confirm your identity first. Exercising your rights is free, and we will not treat you differently for doing so.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113. We would prefer the chance to resolve it first.

14. Cookies and storage on your device

Our web systems use cookies that are strictly necessary to keep you signed in and to keep the service secure. We also use analytics and error tracking, which store identifiers on your device. Where these are not strictly necessary, we set them only with your consent, which you give or refuse through the banner shown on your first visit and can change at any time.

The App stores data locally on your device to keep you signed in, remember your settings, hold the most recent edition for offline reading, and store the stories you save. None of this is used for advertising.

15. Children and young people

You must be at least 13 to create an account, and anyone under 18 needs the permission of a parent or guardian. The App can be opened and the free part of each briefing read without an account.

We apply the same protections to everyone. We do not profile any user, we do not target advertising, we collect no more than is described in this policy, and we do not sell personal data. Stories saved in the App stay on the device.

If you are a parent or guardian and have a question about your child’s use of the App, or want us to delete their data, email support@news-agency.org and we will deal with it promptly.

We do not knowingly collect personal data from anyone under 13. If you believe we have, contact us and we will delete it.

16. Automated decision-making and AI

We do not use automated decision-making that produces legal or similarly significant effects for you, and we do not profile you to determine what you see. Every subscriber receives the same briefing. The only difference between users is how much of it they can read, which depends on whether they hold a subscription.

Our briefings are produced by AI systems under human editorial oversight. Those systems process published news articles. They do not process your personal data and they do not adapt what they produce based on you.

If we later introduce settings that let you change how much you receive, those will be settings you choose rather than inferences we draw, and we will update this policy before they launch.

17. Changes to this policy

We may update this policy. The date at the top shows when it was last changed. If a change materially affects how we use your data, we will tell you through the App or by email before it takes effect.

18. Contact

Reality Co XYZ Ltd Registered in England and Wales, company number 17162614 66 Paul Street, London EC2A 4NA

support@news-agency.org