What we know about you, and why.

Last updated 25 September 2026. This policy covers The London Brief app and oneread.news.

We sell subscriptions, not you. There is no advertising in the brief, we do not sell or share your data with advertisers or data brokers, and you can delete everything from inside the app in two taps.

1. Who is responsible

Sarthak Gupta, a sole trader trading as OneRead.News, of Flat 7, Wryneck Apartments, London NW9 7FN, United Kingdom, is the data controller for the personal data described here. Contact us at contact@oneread.news about anything in this policy.

We are registered with the Information Commissioner's Office under registration [ICO REGISTRATION NUMBER].

2. What we collect

Your account

Your email address, and an authentication record, so you can sign in. Passwords are stored hashed by our authentication provider; we never see them.

Your profile, if you fill it in

A display name and your date of birth, both required, plus a profile picture and how you identify, both optional. Your display name appears on any comment you write. Date of birth is required because ORN is for readers of 17 and over, which is also its App Store rating; we check it at signup and refuse an account below that age. It is also what lets us mark your birthday. The identity question is used only in aggregate, to understand who reads the brief.

How you read

Which stories you open, save or share; how long each card holds you and where in the brief you stop reading; how long you spend in each section and how many stories you turn over to read the analysis; which news outlets you tap through to, recorded as the publication's name only and never the full link; your reading streak and the days you have read. Each event carries a session identifier and the platform you were on.

We use this for one thing: working out which stories are worth your ten minutes, and which are not. It is first-party — it is written to our own database, it is never sold, never shared with anyone, and never used to make a decision about you, set a price, or target an advert. There is no advertising identifier and no third-party analytics company involved.

You can switch all of it off. Profile, then Privacy and safety, then "Share how I read". Turning it off deletes what we have already gathered as well as stopping anything new, and nothing else about the app changes.

Your device

If you turn notifications on, a push token so we can send the 7 AM notification. We also store a device identifier supplied by your operating system alongside your free-trial record, so the six free days cannot simply be claimed again with a new account on the same device. This is not an advertising identifier and we do not use it for tracking across other apps or sites.

Your subscription

Whether you are a subscriber, and the lifecycle events behind that (started, renewed, lapsed). We never see your card details. Payment is handled entirely by Apple or Google; we receive only the fact of a valid subscription.

What you write

Comments you post, stories you report to us, and any correspondence with us. Comments are visible to other readers.

3. Why we use it, and our lawful basis

To provide the service — your account, the brief, your saved stories, your subscription. Lawful basis: performance of our contract with you.
To keep the trial fair — the device identifier described above. Lawful basis: our legitimate interest in preventing repeated claiming of a free trial.
To improve the brief — aggregate reading analytics. Lawful basis: our legitimate interest in understanding what is read and what is not. You can object; see section 6.
To moderate comments — reports and warnings. Lawful basis: our legitimate interest in keeping the comments usable, and compliance with our legal obligations.
To send the 7 AM notification — your push token. Lawful basis: your consent, given through the system permission prompt and withdrawable at any time in your device settings.
Optional profile details — your date of birth and how you identify. Lawful basis: your consent, since providing them is entirely up to you.

We do not use your data for automated decision-making that produces legal or similarly significant effects for you. AI is used to write the brief, not to make decisions about readers.

4. Who else sees it

We use a small number of providers, each acting on our instructions:

Supabase — database, authentication and file storage.
Apple — subscription billing and push notification delivery on iOS.
Google — subscription billing and push notification delivery on Android.
RevenueCat — subscription status management on both platforms.
Expo — app delivery and push notification routing.
Vercel — hosting for oneread.news.

We may also disclose data where the law requires it, or to establish or defend legal claims. We do not sell your personal data, and we do not share it with advertisers or data brokers.

The AI models we use to produce the brief are given news articles, not your personal data.

5. Where your data goes, and for how long

Some providers are based outside the UK and the European Economic Area, including in the United States. Where data is transferred there, it is protected by the UK International Data Transfer Agreement or the Addendum to the European Commission's Standard Contractual Clauses.

We keep data only as long as it is useful:

Account and profile: until you delete your account.
Reading analytics: 400 days, then deleted automatically by a nightly job. Aggregate figures that identify nobody are kept longer.
Comments: until you or we remove them, or you delete your account.
Trial records: up to 24 months, so the trial cannot simply be reclaimed.
Records we must keep for tax or accounting: as long as the law requires.

6. Your rights

You can do three of these yourself, inside the app, without asking us. Delete everything: Profile, then Delete account. Get a copy: Profile, Privacy and safety, then "Download everything we hold". Object to the analytics: the same screen, "Share how I read". All three are immediate and all three are real.

Under UK and EU data protection law you have the right to:

ask for a copy of the personal data we hold about you;
have inaccurate data corrected;
have your data deleted;
receive your data in a portable, machine-readable form;
object to processing based on our legitimate interests, including analytics;
ask us to restrict processing while a dispute is resolved;
withdraw consent at any time, which does not affect what we did before.

Email contact@oneread.news and we will respond within one month. There is no charge.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office, though we would appreciate the chance to put it right first.

7. Children

ORN is not aimed at children. You must be at least 17 to hold an account, which matches the app's 17+ App Store rating: it carries comments written by other readers and it reports every day on war, casualties and crime. We ask for your date of birth at signup and refuse an account below that age. If you believe someone under 17 holds an account, contact us and we will delete it.

8. Cookies

The app does not use cookies. On oneread.news we store your light or dark theme preference in your browser's local storage. That is a functional preference, it stays on your device, and it is not used to track you.

9. Security

Data is encrypted in transit and at rest, access to production data is restricted, and readers' records are separated at the database level so one account cannot read another's. No system is perfectly secure, but if a breach ever affects your rights we will tell you and the regulator as the law requires.

10. Changes

If we change this policy in a way that materially affects you, we will tell you in the app or by email before it takes effect.