Privacy Policy

Last updated: October 08, 2025 1. Information We Collect This policy outlines how BriefTea collects, uses, and protects your information. BriefTea is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you use our mobile application. Account Data: • Email address (if you create an account) • Name (optional, if provided) • User ID (generated automatically) • Device information (device type, OS version) • Push notification tokens (for sending news alerts) Usage Data: • Article swipes and interactions • Reading time per article • Articles liked and bookmarked • Category preferences selected during onboarding • Reading streaks and statistics • Notification interaction data (e.g., opened notifications) Editorial Data (admin only): • Content creation and approval metadata • Editorial team member information • Article curation timestamps We do NOT collect: • Personal addresses • Sensitive biometric data • Financial information • Location data beyond country/region for content relevance • Browsing history outside the app 2. How We Use Your Data Content Personalization: • Deliver personalized "For You" feed based on your selected interests • Recommend articles matching your reading habits • Show trending topics in your preferred categories • Improve content curation based on aggregate user preferences App Functionality: • Enable account features (bookmarks, reading history, preferences sync) • Track reading streaks and statistics • Send push notifications for breaking news (opt-in only) • Sync preferences across devices for logged-in users Editorial Quality: • Maintain editorial standards and content curation • Analyze which topics resonate with readers • Improve summary quality based on engagement • Ensure fact-checking and approval processes Analytics and Improvement: • Understand how users engage with content (likes, swipes, reading time) • Identify technical issues and app performance • Measure feature usage to improve user experience • Generate aggregate statistics (no individual user data sold) 3. Editorial Content Process and AI Disclaimers Original Editorial Work: • All 80-word summaries are written by our professional editorial team • We do not copy or scrape text from other sources • Each article is fact-checked and approved before publication • Content is selected based on newsworthiness and relevance • We operate under fair use principles for news commentary and analysis AI Image Disclaimers: • Images used in articles are for illustrative purposes only • Many images are AI-generated (Midjourney, DALL-E, Gemini) or sourced from stock libraries • AI-generated images clearly display source attribution (e.g., "Image Source: Midjourney") • Images do NOT depict actual people, locations, or events from news stories • All people depicted in AI-generated images are not real individuals • Images are decorative illustrations meant to enhance visual presentation • BriefTea is not a photojournalism platform Content Attribution: • We transparently credit original news publishers for journalistic ethics • Source attribution shown on every article • Users can identify which publisher originally reported the story AI Processing Limitations: • AI tools may assist in content workflow, which can produce errors • Users should independently verify important information • We make no warranties about absolute completeness or accuracy • Editorial team reviews all AI-assisted content before publication 4. Data Sharing We do NOT sell your personal data to third parties. Limited sharing only with: Essential Service Providers: • Firebase/Google Cloud (secure data storage and authentication) • Cloud notification services (Apple Push Notification Service for iOS) • Mixpanel (product analytics processed on our behalf: usage events and device information, keyed to a pseudonymous user ID) Legal Requirements: • When required by law, court order, or legal process • To protect our rights, safety, or property • To investigate potential violations of our terms • In connection with a business merger or acquisition (users will be notified) Editorial Operations: • Third-party services assist in editorial workflows (no personal user data shared) • Content moderation and fact-checking services (article content only) We implement strict data protection agreements with all service providers to ensure your data remains secure and is not used for purposes beyond our specified services. 5. Data Storage & Security Storage Infrastructure: • All data securely stored using Google Firebase • Encrypted in transit (TLS/SSL) and at rest (AES-256) • Data may be stored on servers in various regions as determined by Firebase's infrastructure • Regular security audits and monitoring Access Controls: • Access restricted to authorized personnel only • Multi-factor authentication for admin access • Role-based permissions for editorial team • Activity logging for security monitoring Data Retention: • Account data: Retained while account is active, deleted upon request • Reading history: Retained for 90 days for personalization • Analytics data: usage events keyed to a pseudonymous user ID, retained indefinitely • Deleted data: Permanently removed within 30 days of deletion request Security Measures: • Regular security updates and patches • Intrusion detection systems • Automated backups for data recovery • Incident response procedures in place 6. Your Rights (UK GDPR & Privacy Laws) You have the following rights regarding your personal data: Right to Access: • Request a copy of all personal data we hold about you • Receive data in a structured, commonly used format Right to Rectification: • Correct inaccurate or incomplete personal data • Update your profile information at any time Right to Erasure ("Right to be Forgotten"): • Request deletion of your personal data • We will delete your data within 30 days unless legally required to retain Right to Data Portability: • Receive your data in a machine-readable format • Transfer your data to another service provider Right to Object: • Object to processing of your data for specific purposes • Opt out of personalized content recommendations • Disable push notifications at any time Right to Withdraw Consent: • Withdraw consent for data processing at any time • Delete your account to stop all data collection Right to Lodge a Complaint: • File a complaint with your local data protection authority • Contact us first to resolve concerns directly To exercise any of these rights, contact us through the app's contact feature or email [email protected]. We will respond within 30 days. 7. Children's Privacy BriefTea is not intended for children under 13 years of age. • We do not knowingly collect personal information from children under 13 • If you are under 13, please do not provide any information on this app • Parents: If you believe we have collected information from a child under 13, contact us immediately • Upon learning of such collection, we will delete that information promptly • Age verification: We may request age confirmation during account creation If you are between 13-16 years old (or the digital age of consent in your region), we recommend using the app with parental guidance. 8. Cookies and Tracking BriefTea Mobile App: • We do not use browser cookies (this is a native mobile app) • Device identifiers used for authentication and analytics • Push notification tokens stored for sending alerts • No third-party tracking pixels or advertising networks Analytics: • Mixpanel and Firebase Analytics for usage statistics • No cross-app tracking • No advertising networks; analytics identifiers are never used for ads • Device IDs used for technical and analytics purposes only User Control: • Disable analytics in iOS Settings → Privacy → Analytics • Opt out of personalized content by not selecting preferences • Disable push notifications in app Settings 9. Third-Party Links and Content Source Attribution Links: • Articles attribute original sources (BBC, Guardian, Reuters, etc.) • Tapping "Source:" shows attribution, but does not open external links • We removed "View Source" buttons to keep you in the app • If external links exist, their privacy policies apply on those sites Third-Party Services: • Firebase (Google): https://firebase.google.com/support/privacy • Apple Push Notifications: https://www.apple.com/legal/privacy/ BriefTea is not responsible for the privacy practices of third-party websites or services linked from attributed sources. 10. International Data Transfers • BriefTea operates globally using Firebase infrastructure • Your data may be transferred to and stored in countries outside your jurisdiction • We ensure adequate data protection measures are in place for international transfers • EU users: Data transfers comply with GDPR requirements (Standard Contractual Clauses) • UK users: Data transfers comply with UK GDPR and Data Protection Act 2018 11. Changes to This Policy • We may update this Privacy Policy periodically to reflect changes in our practices • Material changes will be notified via: - In-app notification - Email notification (if you have an account) - Updated "Last updated" date at the top of this policy • Continued use of BriefTea after changes constitutes acceptance of the updated policy • We encourage you to review this policy periodically 12. Data Breach Notification In the unlikely event of a data breach affecting your personal information: • We will notify affected users within 72 hours of discovery • Notification will include: nature of breach, data affected, steps taken • We will report to relevant data protection authorities as required by law • We maintain cyber insurance and incident response procedures 13. California Privacy Rights (CCPA) If you are a California resident, you have additional rights under CCPA: • Right to know what personal data is collected • Right to know if personal data is sold (we do NOT sell data) • Right to request deletion of personal data • Right to opt out of sale of personal data (not applicable - we don't sell) • Right to non-discrimination for exercising CCPA rights 14. Contact Information For privacy questions, data requests, or concerns: Email: [email protected] Response Time: Within 30 days Subject Line: "Privacy Request" or "Data Request" For data protection officer inquiries: Email: [email protected] For urgent security concerns: Email: [email protected] Mailing Address: BriefTea Privacy Team [Your Business Address] [City, Postal Code] [Country] 15. Consent and Acceptance By using BriefTea, you consent to: • Collection and use of your data as described in this policy • Transfer of data to service providers for app functionality • Use of AI-generated images for illustrative purposes • Editorial curation and personalization of content • Receiving important service announcements (account-related only) You can withdraw consent at any time by: • Deleting your account in Settings • Contacting us to request data deletion • Uninstalling the app (local data removed) Last reviewed and updated: October 08, 2025 Version: 2.0