Privacy Policy

Effective Date: April 19, 2026

Last Updated: May 2, 2026

This Privacy Policy applies to the mobile application ApnaFlix by NewsifyX.

NewsifyX ("we," "us," or "our") operates ApnaFlix by NewsifyX, a news aggregation and artificial intelligence-powered content summarization application. This Privacy Policy describes how we, as data controller, collect, process, disclose, and protect your personal information when you access or use our mobile application and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree, you must discontinue use of the Service immediately.

1. Data Controller and Processor Roles

NewsifyX acts as the data controller for personal information collected through the Service. We determine the purposes and means of processing your personal data.

Data Processors: We engage third-party service providers who process personal data on our behalf as data processors under our instruction:

Google Firebase: Processes authentication, database storage, and messaging data as our data processor
DeepSeek AI: Processes content data for AI summary generation as our data processor
YouTube (Google LLC): Processes API requests for content retrieval as our data processor
CricAPI: Processes requests for sports data as our data processor

Independent Data Controller: Google LLC acts as an independent data controller for Google Mobile Ads (AdMob) services. Google processes advertising data for its own purposes, including ad personalization, measurement, and fraud prevention, under its own privacy policy. We do not control Google's processing of advertising data.

2. Information We Process

We process the following categories of personal information:

2.1 Account and Authentication Data

Identity Information: Email address, name, and profile information obtained through Google Sign-In authentication
Authentication Credentials: Secure authentication tokens and session identifiers

2.2 User-Generated Content and Preferences

Content Interactions: Comments, likes, bookmarks, and saved articles
Reading Activity: Articles viewed, reading duration, and content engagement metrics
Preference Settings: Language selections, notification preferences, content categories, and accessibility configurations
Sports Preferences: Followed cricket teams and series

2.3 Technical and Device Data

Device Identifiers: Device type, model, operating system version, and unique device identifiers
Application Data: App version, installation identifier, crash reports, and error logs
Usage Analytics: Feature usage statistics, performance metrics, and session data
Location Data: Approximate geographic location (only when explicitly enabled by user) for content localization

2.4 Advertising Identifiers

Mobile Advertising IDs: Google Advertising ID (Android) or Identifier for Advertisers (iOS)
Ad Interaction Data: Ad impressions, clicks, and engagement metrics collected by Google Mobile Ads

3. Purposes and Legal Basis for Processing

We process personal data for the following purposes and legal bases:

3.1 Service Provision (Legal Basis: Contract Performance)

Authenticate users and maintain account access
Deliver personalized news feeds and content recommendations
Process content through automated AI summarization systems
Provide live cricket scores and sports updates
Enable user-generated content features (comments, likes, bookmarks)

3.2 Communication (Legal Basis: Consent / Legitimate Interest)

Send push notifications for breaking news and sports updates (requires explicit consent)
Deliver service-related communications regarding app functionality and security

3.3 Service Improvement (Legal Basis: Legitimate Interest)

Analyze usage patterns to optimize app performance and user experience
Monitor and improve AI summary accuracy and content relevance
Develop new features based on user behavior analysis

3.4 Security and Compliance (Legal Basis: Legal Obligation / Legitimate Interest)

Detect, prevent, and investigate fraudulent activities and security threats
Comply with applicable laws, regulations, and legal processes
Enforce Terms of Service and protect user rights

3.5 Advertising (Legal Basis: Consent for EEA/UK users / Legitimate Interest for other regions)

Display advertisements through Google Mobile Ads to support app operations
Enable ad personalization based on user interests (requires explicit consent in EEA/UK)

4. Automated Processing and AI-Generated Content

4.1 Nature of Automated Processing System

CRITICAL DISCLAIMER: ApnaFlix by NewsifyX utilizes an automated processing system powered by artificial intelligence (DeepSeek AI) to generate news summaries. Users must understand and acknowledge the following material limitations:

Probabilistic Outputs: AI-generated summaries are produced through probabilistic machine learning models and do not constitute factual guarantees. Outputs may contain inaccuracies, omissions, hallucinations, or misinterpretations of source material
No Editorial Oversight: AI summaries are generated automatically without human editorial review, fact-checking, or journalistic verification
Informational Purpose Only: AI-generated content is provided solely for informational convenience and does not constitute official news reporting, journalistic content, or authoritative information
Not a Substitute: AI summaries are not a substitute for consulting original news sources. Users must verify information from authoritative sources before relying on it for any purpose
User Responsibility: Users bear sole responsibility for verifying the accuracy of AI-generated content before making decisions based on such information
Third-Party Processing: Content is transmitted to DeepSeek AI, a third-party data processor, for automated analysis and summary generation
No Liability: We disclaim liability for inaccuracies, errors, or omissions in AI-generated summaries to the fullest extent permitted by law

4.2 Content Aggregation Model

ApnaFlix by NewsifyX operates as a news aggregation platform that collects and displays content from third-party sources:

Source Attribution: All news content is attributed to original sources, including YouTube channels and news publishers
No Ownership Claims: We do not claim ownership, authorship, or editorial control over aggregated news content
Intellectual Property Respect: We respect intellectual property rights of content creators and comply with applicable copyright laws
Original Source Access: Links to original content sources are provided for verification and proper attribution
Fair Use: Content aggregation and summarization are conducted in accordance with fair use principles and applicable law

5. Entertainment Feature and YouTube Content

5.1 Entertainment Feature Overview

ApnaFlix by NewsifyX includes an Entertainment section that provides access to YouTube-based video content, including:

Channel Videos: Curated video content from YouTube channels organized by category
Reels: A short-form vertical video feed featuring YouTube Shorts-style content with infinite scroll and shuffle playback
Video Player: In-app YouTube video playback powered by the YouTube Player API

5.2 YouTube API Services

The Entertainment feature is powered by YouTube Data API v3 and the YouTube Player API (provided by Google LLC). By using the Entertainment feature, you are also subject to:

5.3 Data Processed During Video Playback

When you use the Entertainment feature, the following data may be processed by Google/YouTube as an independent data controller:

Video Interaction Data: Videos watched, playback duration, and engagement signals
Device and Network Data: IP address, device type, browser/app information, and geographic location (country-level)
Cookies and Identifiers: YouTube may set cookies or use device identifiers for playback functionality, analytics, and ad serving within the embedded player
Watch History: If you are signed into a Google account, YouTube may associate video views with your Google account history

We use the YouTube Privacy-Enhanced Mode (youtube-nocookie.com) where technically feasible to minimize data collection during video playback.

5.4 Reels Feature — Shuffle and Infinite Feed

The Reels feature provides a TikTok-style vertical video feed with the following characteristics:

Shuffle Playback: Videos are randomly shuffled client-side on your device. No behavioral profiling or watch history is used to determine shuffle order
Infinite Scroll: Content is loaded in batches of 12 videos from our Firestore database as you scroll. When all available content is exhausted, the feed reshuffles and repeats
No Personalization: The Reels feed is not personalized based on your viewing history within ApnaFlix by NewsifyX. All users see the same pool of content in random order
Autoplay: Videos autoplay when scrolled into view and pause when scrolled away. This behavior is controlled locally on your device

5.5 Content Ownership and Attribution

All video content displayed in the Entertainment section is hosted on YouTube and owned by the respective content creators
ApnaFlix by NewsifyX does not host, store, or claim ownership of any video content
Content is accessed through YouTube's official API in compliance with YouTube's Terms of Service
We curate and organize content for display but do not modify or reproduce the underlying video files

5.6 Advertising in Entertainment Screens

Google AdMob banner advertisements are displayed on Entertainment screens, including the channel list, channel videos, video player, and Reels feed. These ads are served by Google LLC as an independent data controller. See Section 7 for full details on advertising data processing.

6. Third-Party Service Providers

6.1 Data Processors (Processing on Our Behalf)

The following entities process personal data as data processors under our instruction and control:

Google Firebase (Google LLC): Authentication services, Cloud Firestore database storage, Cloud Functions backend processing, and Firebase Cloud Messaging for push notifications
DeepSeek AI: Automated content processing for multilingual news summary generation
YouTube Data API v3 (Google LLC): Content retrieval from verified news channels
CricAPI: Sports data retrieval for live cricket scores and match information
Google Analytics for Firebase: Application performance monitoring and usage analytics

These data processors are contractually obligated to process personal data only in accordance with our instructions and to implement appropriate security measures.

6.2 Independent Data Controller

Google Mobile Ads (AdMob) - Google LLC:

Google acts as an independent data controller for advertising services
Google processes advertising identifiers, device data, and ad interaction data for its own purposes
Google's processing includes ad personalization, measurement, fraud prevention, and advertising optimization
Google's data processing is governed by the Google Privacy Policy and AdMob Privacy Policy
We do not control or have access to personal data processed by Google for advertising purposes

6.3 Third-Party Privacy Policies

We recommend reviewing the privacy policies of our service providers:

7. Advertising and User Consent

7.1 Google Mobile Ads (AdMob) Integration

We integrate Google Mobile Ads (AdMob) to display advertisements within the Service for revenue generation to support app development and maintenance. Banner ads are displayed on the following screens: News List, Entertainment (channel list, channel videos, video player, Reels feed), and other content screens.

7.2 Independent Data Controller Status

Important: Google LLC acts as an independent data controller for advertising services. Google processes the following data for its own purposes:

Mobile advertising identifiers (Google Advertising ID or IDFA)
Device information (device type, operating system, IP address)
Ad interaction data (impressions, clicks, conversions)
Inferred interests and demographics

7.3 Personalized Advertising and Consent

EEA, UK, and Consent-Required Jurisdictions:

We obtain your explicit consent before enabling personalized advertising
Consent is obtained through a clear consent mechanism upon first app launch or in settings
You may withdraw consent at any time through app settings or device settings
Non-personalized ads may still be displayed if you decline personalized advertising

7.4 User Controls for Advertising

Opt-Out of Personalized Ads: Manage preferences through Google Ads Settings
Reset Advertising ID: Reset your advertising identifier through device settings (Android: Settings > Google > Ads; iOS: Settings > Privacy > Advertising)
Limit Ad Tracking: Enable "Limit Ad Tracking" (iOS) or "Opt out of Ads Personalization" (Android)

7.5 Advertising Data Processing

Google may use cookies, SDKs, and similar technologies for ad serving and measurement
We do not directly share your personal information with advertisers
Ad performance data is processed by Google under its own privacy policy

8. Data Sharing and Disclosure

NO SALE OF PERSONAL DATA: We do not sell, rent, lease, or trade your personal information to third parties for monetary or other valuable consideration. This prohibition applies to all jurisdictions, including California (CCPA/CPRA) and other regions with data sale restrictions.

7.1 Limited Data Sharing

We disclose personal information only in the following limited circumstances:

Data Processors: With service providers (Firebase, DeepSeek AI, YouTube API, CricAPI) who process data solely on our behalf under contractual data processing agreements
Independent Controllers: With Google LLC for advertising services, where Google acts as an independent data controller
Legal Obligations: When required by law, regulation, legal process, or governmental request
Rights Protection: To protect the rights, property, or safety of NewsifyX, our users, or the public, including fraud prevention and security incident response
Business Transfers: In connection with a merger, acquisition, or asset sale, provided the acquiring entity agrees to honor this Privacy Policy (users will receive prior notice)
With Consent: When you provide explicit consent for specific disclosure purposes

7.2 Aggregate and De-Identified Data

We may share aggregate, anonymized, or de-identified data that cannot reasonably identify you for analytics, research, or business purposes. Such data is not considered personal information.

9. Data Security

We implement reasonable technical and organizational measures designed to protect personal information from unauthorized access, disclosure, alteration, or destruction:

Encryption in Transit: Transport Layer Security (TLS) encryption for data transmission between your device and our servers
Encryption at Rest: AES-256 encryption for personal data stored in Firebase Cloud Firestore
Access Controls: Role-based access controls and authentication protocols limiting data access to authorized personnel
Security Monitoring: Continuous monitoring for security vulnerabilities and unauthorized access attempts
Regular Assessments: Periodic security audits and vulnerability testing

8.1 Security Limitations

While we implement industry-standard security measures, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security of your personal information. You acknowledge and accept the inherent security risks of internet-based services.

8.2 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

Notify affected users without undue delay and within 72 hours where required by applicable law (e.g., GDPR Article 33)
Report the breach to relevant supervisory authorities as required by law
Implement immediate remedial measures to mitigate harm and prevent recurrence

10. Your Rights and Choices

9.1 Data Subject Rights

Subject to applicable law, you have the following rights regarding your personal data:

Right of Access (GDPR Art. 15): Request confirmation of whether we process your personal data and obtain a copy thereof
Right to Rectification (GDPR Art. 16): Request correction of inaccurate or incomplete personal data
Right to Erasure (GDPR Art. 17): Request deletion of your personal data (subject to legal retention obligations)
Right to Data Portability (GDPR Art. 20): Receive your personal data in a structured, machine-readable format
Right to Restriction (GDPR Art. 18): Request limitation of processing under certain circumstances
Right to Object (GDPR Art. 21): Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent (GDPR Art. 7(3)): Withdraw consent for processing activities requiring consent
Right to Lodge a Complaint (GDPR Art. 77): File a complaint with your supervisory authority

9.2 California Privacy Rights (CCPA/CPRA)

California residents have additional rights under Cal. Civ. Code §§ 1798.100-1798.199:

Right to know what personal information is collected, used, shared, or sold
Right to delete personal information (subject to exceptions under § 1798.105(d))
Right to opt-out of sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights (§ 1798.125)

9.3 In-App Controls

Manage account settings, notification preferences, and language selections
Clear reading history, bookmarks, and cached data
Enable or disable location services through device settings
Delete your account and associated personal data through app settings

9.4 Exercising Your Rights

To exercise data subject rights, contact us at newsifyx.support@gmail.com with your request. We will respond within 30 days (GDPR) or 45 days (CCPA) as required by applicable law.

11. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law:

Account Data: Retained until account deletion or 3 years of inactivity, whichever occurs first
Usage Analytics: Aggregated and anonymized data retained for 26 months
User-Generated Content: Retained while account is active; deleted within 30 days of account deletion
Crash Reports and Logs: Retained for 12 months for debugging and service improvement
Legal Retention: Data may be retained longer when required by law, regulation, or for legitimate purposes such as dispute resolution or fraud prevention

10.1 Account Deletion

Upon account deletion:

Personal data is permanently deleted within 30 days
Backup copies are deleted within 90 days
Anonymized analytics data may be retained indefinitely
Data subject to legal hold or required for compliance may be retained as required by law

12. Children's Privacy

Age Restriction: The Service is not directed to children under the age of 13 years (or the applicable age of digital consent in your jurisdiction, e.g., 16 in certain EU member states). We do not knowingly collect personal information from children under the applicable age threshold.

11.1 COPPA Compliance (15 U.S.C. §§ 6501-6506)

We do not knowingly collect, use, or disclose personal information from children under 13 without verifiable parental consent
If we become aware of unauthorized collection from a child under 13, we will delete such information immediately
Parents or guardians who believe their child has provided personal information should contact us at newsifyx.support@gmail.com

13. International Data Transfers

Personal data may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where our service providers operate. These countries may have data protection laws that differ from your jurisdiction.

12.1 Transfer Safeguards

Standard Contractual Clauses: We use European Commission-approved Standard Contractual Clauses (SCCs) for transfers from the EEA pursuant to GDPR Article 46(2)(c)
Adequacy Decisions: We rely on adequacy decisions under GDPR Article 45 where applicable
UK Addendum: For UK transfers, we use the UK International Data Transfer Addendum to the SCCs

14. Regional Compliance

We comply with the following data protection frameworks:

GDPR: Regulation (EU) 2016/679 (European Union, EEA, UK, Switzerland)
UK GDPR: UK Data Protection Act 2018 and UK GDPR
CCPA/CPRA: California Civil Code §§ 1798.100-1798.199 (California, USA)
COPPA: 15 U.S.C. §§ 6501-6506 (United States)
PIPEDA: Personal Information Protection and Electronic Documents Act (Canada)
LGPD: Lei Geral de Proteção de Dados Pessoais (Brazil)

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated as follows:

Advance Notice: We will provide at least 30 days' notice of material changes through the Service, email, or other prominent means
Effective Date: The updated policy will display a new "Effective Date" at the top of this page
Continued Use: Your continued use of the Service after the effective date constitutes acceptance of the updated Privacy Policy
Consent Requirement: For material changes affecting your rights, we may require explicit consent before changes take effect

16. Contact Information

Data Controller Contact

NewsifyX
Email: newsifyx.support@gmail.com
Response Time: Within 30 days (GDPR) or 45 days (CCPA)

Data Protection Requests

To exercise your data subject rights, please email us with:

Your registered email address
Specific type of request (access, deletion, correction, portability, etc.)
Identity verification information (for security purposes)
Detailed description of your request

Urgent Privacy or Security Concerns

For urgent matters, mark your email subject line as "URGENT - Privacy/Security Issue" for expedited handling.

Supervisory Authority (EEA/UK Users)

If you are located in the EEA, UK, or Switzerland, you have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your privacy concerns. Contact information for EU data protection authorities is available at https://edpb.europa.eu.

ApnaFlix by NewsifyX — Privacy Policy
This Privacy Policy complies with GDPR, CCPA/CPRA, COPPA, and Google Play Store requirements.
We are committed to protecting your privacy and processing your personal data lawfully, fairly, and transparently.