Privacy Policy
Last updated: 2026-10-22 · India
Who we are
United One News is the data fiduciary under the Digital Personal Data Protection Act, 2023 (DPDP Act). Contact: privacy@unitedonenews.com. Grievance Officer: Anil Kumar Shahi — grievance@unitedonenews.com.
What we collect
• Anonymous device identifier (UUID) used to remember likes, saves, and reading history.
• Account email and OAuth provider profile when you sign in.
• Story interactions: like / save / view / share events.
• Push notification token (only if you grant permission).
• If you turn on alerts on the website: your browser's push subscription (endpoint and encryption keys), your browser type, and a one-way hash of your network address used only to limit abuse.
• Subscription state mirrored from RevenueCat or Stripe (no card data).
• Consent transitions logged to comply with DPDP Act requirements.
• Grievance and report submissions (category, description, optional contact email).
• Privacy choices (consent state, data-saver preference).
Why we collect it
• To run the app (tier check, history, push delivery).
• To improve coverage (aggregate analytics on which categories are read).
• To comply with legal obligations (consent, billing, audit).
AI-generated summaries
Story summaries and "AI Insights" are generated by AI models (Groq, Google) from published headlines and snippets only — we never send your personal data to these models. Summaries are labeled "AI-generated" in the app, in line with the labeling requirements for synthetically generated information under the IT Amendment Rules, 2026. They may contain errors. Report an inaccurate summary with the "Report inaccuracy" action on any summary, or via grievance@unitedonenews.com.
Children
United One News is not directed at children and is rated 18+. We do not knowingly process children's personal data, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children (DPDP Act, s.9). If we learn an account belongs to a person under 18, we will delete it.
Your rights (DPDP Act)
• Right to access: Profile → Privacy → Download my data.
• Right to correction and erasure: Profile → Manage account → Delete my account (14-day grace period, cancellable).
• Right to grievance redressal: Profile → Help & Support → Report a problem, or grievance@unitedonenews.com. We acknowledge within 24 hours and resolve within 15 days.
• Right to nominate: nominate a person to exercise your rights in the event of incapacity or death — contact privacy@unitedonenews.com.
Retention
• story_interactions: 12 months
• push_tokens: until you uninstall
• web push subscriptions: until you turn alerts off, block notifications, or the browser's push service reports them expired (at most 180 days without a visit); alert delivery log: 3 days
• consent_log: 3 years (DPDP Act minimum)
• subscriptions: while active + 8 years for Indian tax law
• grievances: 3 years from resolution
• After account deletion: consent records are retained with the account link removed (legal obligation); an anonymised billing archive is kept for tax law; published Reporter stories are retained with attribution removed.
Third parties
• Supabase (data + auth)
• Browser push services (Google, Mozilla, Apple, Microsoft) deliver website alerts end-to-end encrypted; they cannot read the content
• RevenueCat (mobile in-app purchases)
• Stripe (web subscriptions)
• Google AdMob (mobile app ads — not currently active; will only run with your consent)
• Google AdSense (web ads — not currently active; see "Advertising (Google AdSense)" below)
• Google Reader Revenue Manager (on story pages on the website: an optional reader survey and a call-to-action button; if you answer the survey, your answers are shared with Google and with us)
• Groq, Google (AI summarisation; we send headlines only, never personal data)
Browser extension
The United One News browser extension sends the web address of the https page you are viewing to our server, only to check whether that article is part of a story we cover. It sends nothing else: no page content, browsing history, cookies, account or personal details. We do not store these addresses, link them to you, sell them or use them for advertising; our hosting provider's request logs may hold them briefly as part of normal server operation and delete them automatically within days. The extension keeps its answers and your "Check pages automatically" setting in your own browser. Turn automatic checks off in the extension's menu, or remove the extension, at any time.
Advertising (Google AdSense)
On the web, free-tier pages may show ads served by Google AdSense once enabled. Google and its advertising partners may process data about your visits here and to other sites to serve and measure ads. See Google's "How Google uses information from sites or apps that use our services" (policies.google.com/technologies/partner-sites) for details, and Google's Ad Settings (adssettings.google.com) to control ad personalisation directly with Google. If you're visiting from the UK, EEA, or Switzerland, Google's own certified consent message governs ad personalisation and appears before any personalised ad loads.
International transfers
Some of the processors listed above (including Groq and Google) are based outside India and may process data on servers outside India. We take steps to limit what we send them — for AI summarisation we send only public headlines and snippets, never your personal data.
Grievances
Raise a grievance in-app (Profile → Help & Support → Report a problem) or with our Grievance Officer at Anil Kumar Shahi — grievance@unitedonenews.com. We acknowledge within 24 hours and resolve within 15 days. If you are dissatisfied, you may appeal to the Grievance Appellate Committee (gac.gov.in) within 30 days, or approach the Data Protection Board of India under section 27 of the DPDP Act.