Privacy Policy

1. What we get from Google sign-in

• Only three things: your name, email address and profile photo, plus a stable account ID from Google so we recognise you next time.
• We request only the openid, email and profile scopes. We do not store Google access tokens and they never reach your browser.
• Google sign-in does not give any website your Google Search history, Chrome browsing history, “My Activity” or YouTube watch history. MyNews does not receive these and does not ask for them.

2. Optional permission: YouTube subscriptions

If you choose to, you can grant a one-time YouTube permission in Settings (youtube.readonly). We read only the list of channels you subscribe to, add the verified MyNews outlets among them to your preferences, and revoke the permission immediately. We do not store the channel list or any other YouTube data. YouTube watch history is not available to third parties.

3. What you give us

• The interests and keywords you choose during onboarding and in Settings.
• Optional profile details: display name, profile photo, date of birth, mobile number, website, and links to public social media profiles. We never read data from those social accounts.
• Reports and feedback you send.
• Your chosen interface language and theme.
• Your news country and any countries you follow, if you choose them, and optionally a country in your profile. Without a choice, MyNews may use only the country that your network's hosting/CDN provider reports for the current request, or suggest one from your browser's language and time zone. We never ask for GPS location and never store addresses, coordinates or location history. Your news country never changes the app language or translates news.

4. Reading activity and how personalization works

• While personalization is on, MyNews stores what you do inside MyNews: which stories and videos you open and for how long; saves, shares, “Not interested” and visits to the original outlet; clicks on categories, topics and outlets, and what you search on MyNews; and which stories were shown to you and why (so they don't repeat and so we can explain them).
• From these we calculate a score for your interest in each topic, category, party/person and outlet. Older activity counts less over time. Stories are ordered by relevance, freshness, importance, source quality and diversity.
• Interest in a political party or person is treated only as a news preference — never as your political identity or beliefs. We do not infer, store or show your religion, political views, health or any other sensitive personal characteristic. The “Other Perspectives” section uses an internal signal about how a story frames a party only to diversify your feed; it never declares any story true or false.
• You can turn personalization off in Settings at any time — new activity is then not stored and you see the same important stories as everyone else.

5. Languages

Your interface language only changes the MyNews interface. News content is always shown in its original language and is never translated automatically. Any future translation feature will only run when you explicitly ask for it, and the original will always remain available.

6. What we don't do

• We don't sell your data or share it with advertisers.
• We don't track you on other websites or use third-party tracking cookies.
• We don't store your IP address directly (security logs keep only a one-way hash).

7. Cookies

Only essential cookies: your sign-in session (encrypted, HttpOnly), a security token (CSRF), your theme and your interface language. Embedded YouTube (privacy-enhanced mode) or Facebook players follow their own policies.

8. Your controls

• See and download: Settings → “Download my data” gives you a complete copy (JSON).
• Change: edit your profile, interests and language at any time.
• Clear history: Settings → “Clear reading history”.
• Delete your account: Settings → “Delete account”. Your profile, photo, interests, activity, saved stories and social links are permanently deleted immediately. Reports you sent are kept without your identity. Copies in database backups are removed automatically when those backups expire.

9. Security

We use HTTPS, encrypted sessions, server-side authorization, input validation, rate limiting and audit logs for admin actions. Admins cannot see users' personal data beyond what is necessary.