Last Updated: September 6, 2026

Privacy Policy

Scope

  • This Privacy Policy applies to our mobile applications (iOS and Android) and related services (the "Service").
  • This Policy does not apply to third-party websites, services, or content not controlled by us.

Categories of Personal Information We Collect

  • Identifiers: Firebase user ID (UID), device tokens (FCM for push notifications), session identifiers.
  • Account/Contact Information: Email address, display name, profile image (if provided).
  • Usage and Interaction Data: Article views, clicks, reads, read duration, scroll percentage, shares, bookmarks, likes/dislikes, timestamps, onboarding selections (categories, topics, persona), follows (sources/categories/topics).
  • Preferences and Profiles: Category/topic/source preference scores; engagement metrics (average read time, frequency), daily briefing settings, podcast settings, local news settings.
  • Location Data: We do not collect GPS or precise real-time location. We only collect User-Provided Location (City, Province/State, Country) if you choose to enable local news features.
  • Device/Platform Information: Platform type (Android/iOS) and related OS-level signals required to operate features (e.g., push notifications).
  • Purchase Information: In-app purchase receipts or status supplied by the app stores. We do not process payment card details directly.
  • Analytics Data: Metrics collected to understand app usage and improve the Service.
  • Advertising (Non-Personalized): We serve only non-personalised (contextual) ads to Compass Basic users via Google AdMob. We do not request App Tracking Transparency permission on iOS, do not access the IDFA, and do not use advertising identifiers (IDFA/GAID) to track you across apps or build advertising profiles. Ads are not shown to Pro or Premium subscribers.

Sources of Personal Information

  • Directly from you: When creating an account, setting preferences, and interacting with the Service.
  • Automatically from your device: Telemetry and engagement events recorded while using the app.
  • App stores: To confirm and fulfill in-app purchases via RevenueCat.
  • Service providers and processors:
    • Firebase (Authentication, Cloud Firestore, Cloud Messaging, Vertex AI)
    • External notifications service hosted on Google Cloud Run ("Breaking Events Service")
    • Google AdMob (advertising, Compass Basic tier only)

How We Use Personal Information (Purposes)

  • Provide and maintain the Service and your account.
  • Personalize content and recommendations based on your reading preferences.
  • Send push notifications for breaking news and deliver daily briefings (subject to your device/OS permissions).
  • Fulfill in-app purchases and manage subscriptions.
  • Generate AI-powered content summaries and recommendations (all AI content is clearly labeled).
  • Serve non-personalised (contextual) advertisements to Compass Basic users to support the free tier of the Service. Ads are not shown to Pro or Premium subscribers.
  • Monitor performance, debug, and enhance security.
  • Comply with legal obligations and enforce our Terms.

Legal Bases

  • Consent: e.g., notifications, user-provided location selection, certain analytics.
  • Contract: To provide core Service functionality and fulfill purchases.
  • Legitimate Interests: Analytics, improving Service reliability and security, and preventing fraud/abuse.
  • Legal Obligations: To comply with applicable laws and Law Enforcement requests.

Sharing and Disclosure

  • Service Providers/Processors: We share personal information with trusted providers that help us operate the Service, including Firebase (Google Cloud Platform), Google Cloud Run, RevenueCat, and Google AdMob (for serving non-personalised ads to Basic tier users, subject to its own privacy policy).
  • Legal and Safety: We may disclose information to comply with law, protect rights and safety, and respond to lawful requests.
  • Business Transfers: In a merger, acquisition, or asset sale, data may be transferred subject to this Policy.
  • We do not sell personal information to third parties.

International Transfers and Data Location

  • Data associated with the Service is hosted and processed in the United States.
  • Cloud regions: us-central1 (Firebase & Google Cloud Run).
  • We implement appropriate safeguards consistent with applicable law.

Retention

We retain personal information for as long as necessary to provide the Service, comply with legal obligations, and resolve disputes.

Specific retention periods:

  • User activity and read history: 90 days from last activity.
  • Follows and preference profiles: Until account deletion.
  • Location selection (City/State): 30 days from last update.
  • Account Data: Permanent deletion upon user request.
  • Billing Records: Retained for 7 years as required by financial and tax regulations.

Your Choices and Rights (including Account Deletion)

  • Access/Correction/Deletion: You can request to access, correct, delete, or receive a copy of your personal data by contacting us at support@compassnews.app.
  • App Account Deletion: You can delete your account and all associated personal data directly within the app (Settings > Account > Delete Account).
  • Web-Based Deletion Request: If you have uninstalled the app, you may request account deletion via our web portal: https://compassnews.app/delete-account.
  • Notifications: Control push notifications using device settings (Settings > Notifications > Compass News).
  • Partial Data Deletion (Keep Your Account): If you'd like to delete some of your data — such as your reading history, follows, and personalized preferences — without deleting your account, use Settings > Account > Reset Account in the app.
  • Ad Preferences: If you use the Compass Basic (free) tier, ads are always non-personalised (contextual). You can review this under Settings > Data & Privacy > Manage Ad Preferences.

Advertising

  • Compass Basic (free tier) is supported by advertising served through Google AdMob (a Google service). Pro and Premium subscribers do not see ads.
  • Non-Personalised Only: Ads are always non-personalised (contextual) — based on general context, not your interests or a profile. We do not use advertising identifiers (IDFA/GAID) to personalise ads or track you across apps.
  • No App Tracking (iOS): We do not request App Tracking Transparency permission and do not access your IDFA, because we do not track you for advertising.
  • EU/EEA Consent (GDPR): Users in the European Economic Area, UK, and Switzerland are shown Google's standard consent form via the User Messaging Platform (UMP) before ads are initialised. That form is Google's certified template and may reference personalised-advertising options; regardless of the choice made, Compass only ever requests non-personalised ads.
  • Compass does not build ad profiles, track you across apps, or sell your data to advertisers. Ad serving is handled by Google AdMob subject to Google's Privacy Policy.

AI-Generated Content & Reporting

Our Service uses generative AI (Google Vertex AI) to enhance your experience.

  • AI-generated summaries: For informational purposes only; summaries are generated from source news content and are not a substitute for original reporting.
  • Reporting Mechanism: In compliance with store safety guidelines, users can report any inaccurate, offensive, or harmful AI-generated content by using the "Flag/Report" feature available on AI-generated cards or by contacting editorial@compassnews.app. We review all reports within 24 hours.

Children's Privacy (General Audience)

  • The Service is a general audience application and is not specifically designed for or intentionally targeted at children under the age of 13.
  • We do not knowingly collect personal information from children under 13. If you are under 13, please use the Service only with the supervision of a parent or guardian.
  • If we learn such data has been collected without verifiable consent, we will promptly delete it.

Security

  • We use standard encryption (TLS/HTTPS) and industry-recognized security measures (Firebase Authentication) to protect your data. While we strive for absolute security, no method of transmission is 100% secure.