Privacy Policy

Effective date: June 20, 2026  ·  Last updated: June 20, 2026

1. Who We Are

NewZelo ("NewZelo," "we," "us," or "our") operates the NewZelo mobile application ("App") and the website located at newzelo.app (collectively, the "Service").

NewZelo is a news aggregation service that curates, translates, and delivers news content from publicly available sources. We are the data controller for the personal data collected through our Service.

For questions about this Privacy Policy or your personal data, contact us at privacy@newzelo.app.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

• Account registration: When you create an account, we collect your name, email address, and password (stored as a one-way cryptographic hash — we never store your plaintext password).
• Profile information: Optional profile photo and display name you choose to provide.
• Communications: When you contact our support team, we collect the content of your messages and your email address.
• Interests and preferences: Topic categories and languages you select during onboarding or in settings.

2.2 Information Generated by Your Use of the Service

• Reading activity: Articles you view, how long you spend reading them, and which topics you engage with most frequently. This data powers your personalized feed.
• Interactions: Articles you like, save, or share within the App.
• Search queries: Terms you search for within the App.
• Session data: Login timestamps, session duration, and logout events.

2.3 Technical and Device Information

• Device identifiers: A randomly generated device ID we create and store locally on your device to associate your session with your account.
• Device information: Device model, operating system version, and app version, collected for compatibility and crash diagnosis purposes.
• Network information: IP address, used for security logging and fraud prevention. IP addresses are not linked to your profile for advertising purposes.
• Crash and performance data: Diagnostic logs generated when the App encounters an error, used solely to fix bugs.

2.4 Payment and Subscription Information

If you subscribe to NewZelo Premium, all payment processing is handled by Apple via the App Store. We do not receive, process, or store your payment card information. We receive from Apple only your subscription status (active, expired, cancelled) and a non-reversible subscription identifier.

2.5 Information We Do Not Collect

• We do not collect your precise location or GPS data.
• We do not collect your contacts, calendar, or any other app's data.
• We do not use advertising identifiers (IDFA/GAID).
• We do not collect biometric data.

3. How We Use Your Information

Purpose	Data Used
Provide and operate the Service, including displaying personalized news feeds	Account data, reading activity, interests
Authenticate your identity and maintain your login session	Email, password hash, device ID, session tokens
Personalize your news feed based on your interests and reading behavior	Reading activity, likes, saves, topic interests
Send transactional emails (account verification, password reset)	Email address
Manage and process your Premium subscription	Subscription status from Apple
Detect and prevent fraud, abuse, and security incidents	IP address, device ID, session logs
Fix bugs, monitor performance, and improve the Service	Crash logs, device info, performance metrics
Respond to your support requests	Communications data
Comply with legal obligations	As required by applicable law

We do not use your data for targeted advertising, and we do not build advertising profiles.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Performance of a contract (Article 6(1)(b) GDPR): Processing necessary to provide the Service to you, including account management, personalization, and session authentication.
• Legitimate interests (Article 6(1)(f) GDPR): Security monitoring, fraud prevention, bug fixing, and service improvement — balanced against your rights and interests.
• Legal obligation (Article 6(1)(c) GDPR): Processing required to comply with applicable laws.
• Consent (Article 6(1)(a) GDPR): Where you have given explicit consent, such as for optional communications.

5. How We Share Your Information

We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes.

We may share your information in the following limited circumstances:

• Service providers: We engage trusted third-party vendors who process data on our behalf, under strict data processing agreements, including:
  • Cloud hosting providers (server infrastructure)
  • Transactional email delivery (for account emails only)
  • Subscription management (RevenueCat, acting as our processor)
• Legal requirements: We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of our users.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the acquiring entity. We will notify you before your data is transferred and subject to a different Privacy Policy.
• With your consent: We may share your information for any other purpose with your explicit consent.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Active account data: Retained for the lifetime of your account.
• Reading activity and preferences: Retained for the lifetime of your account to maintain your personalization profile.
• Security and audit logs: Retained for up to 12 months.
• Support communications: Retained for up to 3 years.
• Deleted account data: Upon account deletion, your personal data is permanently deleted within 30 days, except where retention is required by law.

7. International Data Transfers

NewZelo operates servers in the European Union (EU). If you access the Service from outside the EU, your data may be transferred to and processed in the EU. We take appropriate safeguards to ensure your personal data is protected in accordance with this Privacy Policy and applicable data protection laws, including the use of Standard Contractual Clauses for transfers from the EEA.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data. You can update your name and email directly in the App under Profile Settings.
• Right to erasure ("right to be forgotten"): Request deletion of your account and personal data. You can delete your account directly in the App (Profile → Security & Privacy → Delete Account) or by contacting us.
• Right to restriction of processing: Request that we limit how we process your data in certain circumstances.
• Right to data portability: Request your personal data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@newzelo.app. We will respond within 30 days. We may need to verify your identity before fulfilling your request.

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights. To submit a request, contact privacy@newzelo.app.

Managing Notifications and Communications

You can opt out of non-essential email communications by following the unsubscribe link in any email we send. Note that you cannot opt out of transactional emails (such as password reset emails) as these are required for the operation of your account.

Subscription Management

To cancel your NewZelo Premium subscription, go to iPhone Settings → [Your Name] → Subscriptions → NewZelo → Cancel Subscription. Cancellation of your subscription does not delete your account.

9. Children's Privacy

The NewZelo Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under these ages. If we become aware that we have inadvertently collected personal information from a child under the applicable age threshold, we will take steps to delete that information promptly.

If you believe a child has provided us with personal information, please contact us at privacy@newzelo.app.

10. Security

We implement and maintain appropriate technical and organizational security measures designed to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of all data in transit using TLS (HTTPS)
• Password storage using bcrypt hashing with salt
• Session tokens stored using cryptographic hashing
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that affects your rights, we will notify affected users and relevant authorities as required by applicable law.

11. Cookies and Tracking Technologies

The NewZelo mobile application does not use browser cookies. The App uses a locally stored, randomly generated device identifier to associate your device with your account session. This identifier does not track your activity outside of the NewZelo App and is not linked to any advertising profile.

Our website (newzelo.app) does not use tracking cookies, analytics cookies, or advertising cookies. We use only technically necessary session data for the operation of our web-based tools (such as the password reset form).

12. Third-Party Services

The Service integrates with the following third-party services. Each service operates under its own privacy policy:

• Apple Sign In / Google Sign In: Optional social authentication. If you use these, Apple or Google may share your name and email address with us. Your use of these services is governed by their respective privacy policies.
• Apple App Store / RevenueCat: Subscription billing and management. Payment data is handled exclusively by Apple. RevenueCat processes only subscription status information on our behalf.
• Google Gemini (AI): Our AI chat and summary features are powered by Google's Gemini AI. Article content is sent to Google's API to generate summaries and responses. No personal identifiers (name, email, account ID) are sent to Google's AI services. See Google AI Terms.

We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make material changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via an in-app notification or email (for significant changes)
• Where required by law, obtain your consent for the new practices

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you should stop using the Service and may delete your account.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email (general privacy): privacy@newzelo.app
• Email (support): support@newzelo.app
• Website: newzelo.app

We will make every effort to respond to your inquiry within 30 days.