1. Who is responsible
neuws is operated from Sweden by Edvin Kollberg, an individual developer (“neuws”, “we”, or “us”). Edvin Kollberg is the controller for the processing described here. neuws is not currently operated through a registered company.
Privacy and rights requests: edvin@kollberg.se. Postal correspondence details are available on request when they are needed for a rights request or another legitimate legal purpose.
2. Scope
This policy applies to the neuws mobile app, website, waitlist, beta programme, account services, news and event discovery, quizzes, Neulingo learning features, profiles, community features, and related transactional emails. Third-party websites and services have their own policies.
3. Personal data we use
- Account and profile: email address, authentication identifiers, display name, username, country, city, languages, profile image, biography, preferences, and account status.
- Content and social activity: content you publish, comments, messages, follows, reactions, reports, event interests and invitations, and related timestamps.
- Product activity: saved or opened articles, quiz activity, Neulingo progress, XP, rewards, streaks, collections, and settings needed to provide and synchronise features.
- Waitlist and communication: name, email, selected country, delivery status, and communications with support.
- Device, security, and diagnostics: app version, operating system, coarse device class, session and security logs, IP address and network metadata processed by our infrastructure providers, crash information, and abuse-prevention signals.
- First-party beta analytics: a restricted set of low-cardinality events, including screen visits and time while a screen is in the foreground, named feature actions and their outcomes, and interactions with Neuws+ offers. We do not put email addresses, message text, search text, article text, stable content IDs, advertising IDs, or individual Neulingo answers in this analytics stream. It can be turned off in Settings.
- Optional rewarded ads: if you choose to watch an ad for an extra Neulingo life, Google AdMob processes network and device information, ad interactions, and consent choices to deliver non-personalised ads, measure their delivery, and prevent fraud. This may include your IP address, device identifiers and approximate location inferred from the network. We do not send Google your account email, username, learning answers or precise location. An opaque, short-lived reward request identifier lets our server verify the reward.
Do not submit sensitive personal data through public posts, feedback, or support unless it is necessary for your request.
4. Why we use data and our legal bases
| Purpose | Legal basis |
|---|---|
| Create and secure an account; provide, synchronise, and support requested features. | Performance of our contract with you. |
| Send confirmation, password-reset, security, and essential service messages. | Contract and our legitimate interest in secure service operation. |
| Operate profiles, community interactions, moderation, reports, and safety controls. | Contract, legitimate interests in a safe service, and legal obligations where applicable. |
| Measure reliability and improve the beta using restricted first-party analytics. | Our legitimate interest in understanding whether the service works and improving it. You may object or switch it off in Settings. |
| Prevent fraud, spam, abuse, and unauthorised access; establish or defend legal claims. | Legitimate interests and legal obligations. |
| Send optional marketing or use optional device permissions. | Your consent where consent is required. You may withdraw it at any time. |
| Deliver an optional, non-personalised rewarded ad and verify the extra life you request. | Consent for device storage or access where required; contract for the requested reward and legitimate interests in fraud prevention. Declining an ad does not prevent use of the app. |
| Meet tax, accounting, regulatory, or law-enforcement duties. | Legal obligation. |
We do not use acceptance of the Terms as consent for advertising or optional marketing.
5. Where data comes from
Most data comes directly from you or from your use of neuws. We may also receive authentication, delivery, security, and diagnostic information from our service providers, and public information from sources used to display news or events. If another user interacts with you, their activity can create records involving your account.
6. Who receives data
We share data only as needed to operate the service, follow your instructions, protect people and the service, or comply with law. Categories of recipients include:
- Supabase for authentication, database, storage, and backend functions.
- Cloudflare for website hosting, delivery, DNS, and security.
- Brevo for transactional email delivery.
- Apple and Google when you install the app, use their platform services, or receive platform notifications.
- Google AdMob for optional rewarded ads, consent management, delivery measurement and fraud prevention. See how Google uses information from apps that use its services.
- Professional advisers, competent authorities, or a successor operator where legally permitted and necessary.
Public profile fields, posts, comments, and other content you choose to make public are visible to other people according to the feature’s visibility settings. Direct messages are shown to their participants and may be accessed when necessary for safety, support, or legal compliance.
We do not sell personal data and do not use it for third-party behavioural advertising.
7. International transfers
Providers may process data outside Sweden or the EEA. Where a destination does not benefit from an EU adequacy decision, we use an approved transfer mechanism such as the European Commission’s Standard Contractual Clauses and supplementary safeguards where appropriate. You may contact us for information about the relevant safeguards.
8. Retention
We retain account data while the account is active and then only as long as reasonably needed for deletion, backups, legal duties, dispute handling, fraud prevention, and security. Public content may remain until you delete it or close the account, subject to moderation, legal holds, and backup cycles. Waitlist data is kept until access is offered, you unsubscribe, or it is no longer needed. Security and diagnostic records are kept for limited periods based on risk and operational need. We delete or anonymise data when the purpose and applicable retention requirement end.
9. Your choices and rights
Depending on the circumstances, GDPR gives you rights to access, correct, delete, restrict, or receive a portable copy of personal data; object to processing based on legitimate interests; and withdraw consent without affecting earlier lawful processing.
You can change available profile and privacy settings in the app, turn beta analytics off in Settings, and contact us for rights or account-deletion requests. We may need to verify your identity. We normally respond within one month, subject to lawful extensions.
Rewarded ads are optional and shown only when you request an extra life. Required ad consent is requested before an ad; you can decline or manage it. Where applicable, Ad privacy choices in Settings lets you revisit or withdraw consent. Beta analytics and ad consent are separate choices. Neuws+ members do not receive these ads.
You may complain to the Swedish Authority for Privacy Protection, IMY, or the supervisory authority where you live or work.
10. Children
neuws accounts are not intended for anyone under 16. If we learn that an under-16 user supplied personal data, we will take reasonable steps to close the account and delete the data, unless law requires retention. A parent or guardian can contact us.
11. Automated decisions
We do not make decisions based solely on automated processing that produce legal effects or similarly significant effects for you. Recommendations, translations, rankings, and learning prompts may be automated, but they are product features and not such decisions.
12. Security and beta limitations
We use access controls, encrypted transport, restricted credentials, monitoring, and other proportionate safeguards. No service can guarantee absolute security. Because this is a beta, report suspected security or privacy issues promptly and avoid using the service for highly sensitive information.
13. Changes
We will update the version date when this policy changes. If a change materially affects how we use personal data, we will provide appropriate notice and, where required, ask for a new acknowledgement or consent.
14. Contact
Email edvin@kollberg.se with “Privacy” in the subject. The controller is Edvin Kollberg, an individual developer based in Sweden. Postal correspondence details are available on request where needed.