GDPR & CCPA Compliance
GDPR & CCPA Compliance — Short News
Last Updated: August 22, 2026
This page explains the additional rights available to users in the European Economic Area (EEA), United Kingdom, Switzerland (under the GDPR), and California, USA (under the CCPA/CPRA), when using the Short News mobile application ("App," "Service," "we," "us," "our"). This page supplements our main [Privacy Policy] and should be read alongside it.
Part A: GDPR Compliance (EEA / UK / Switzerland Users)
A.1 Who This Applies To
This section applies if you are located in the European Economic Area, the United Kingdom, or Switzerland, and use the Short News App.
A.2 Legal Basis for Processing
We process your personal data under the following legal bases:
| Legal Basis | Applies To |
|---|---|
| Consent | Location access, push notifications, personalized advertising |
| Contractual Necessity | Account creation, news feed delivery, content publishing, monetization/payouts |
| Legitimate Interests | Fraud prevention, platform security, product analytics, service improvement |
| Legal Obligation | Responding to lawful requests from courts/authorities, tax/accounting records for payouts |
A.3 Your Rights Under GDPR
Subject to applicable exceptions, you have the right to:
- Right to Access — Request a copy of the personal data we hold about you.
- Right to Rectification — Request correction of inaccurate or incomplete data.
- Right to Erasure ("Right to be Forgotten") — Request deletion of your personal data.
- Right to Restrict Processing — Request that we limit how we use your data in certain circumstances.
- Right to Object — Object to processing based on legitimate interests, including profiling used for personalized ads.
- Right to Data Portability — Receive your personal data in a structured, commonly used, machine-readable format, and transmit it to another controller.
- Right to Withdraw Consent — Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
- Right to Lodge a Complaint — File a complaint with your local Data Protection Authority (Supervisory Authority) if you believe your rights have been violated.
A.4 International Data Transfers
Where personal data is transferred outside the EEA/UK (for example, to servers or service providers located in India or the United States), we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) and the transfer mechanisms provided by our third-party processors (Google/Firebase, Google AdMob, OneSignal).
A.5 Data Controller
Short News acts as the Data Controller for personal data collected through the App. Our third-party processors (see Section D below) act as Data Processors under our instructions.
A.6 How to Exercise Your GDPR Rights
Submit a request using the contact details in Part C below. We will respond within the timeframe required by GDPR (generally one month, extendable by two further months for complex requests, with notice to you). We may need to verify your identity before processing your request.
Part B: CCPA/CPRA Compliance (California Residents)
B.1 Who This Applies To
This section applies if you are a California resident, as defined under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).
B.2 Categories of Personal Information We Collect
In the preceding 12 months, we may have collected the following categories of personal information:
| Category | Examples | Collected? |
|---|---|---|
| Identifiers | Name, email, phone number, device ID, IP address | Yes |
| Geolocation Data | Precise and approximate location (GPS, city/state) | Yes |
| Internet/Device Activity | App usage, crash logs, interaction data | Yes |
| Audio/Visual Data | Photos and videos you upload | Yes |
| Commercial Information | Payout/transaction records, monetization earnings | Yes |
| Financial Information | Bank account, UPI ID, payment details (for payouts) | Yes |
| Inferences | Content preferences derived from app usage | Yes |
| Sensitive Personal Information | Precise geolocation, financial account details | Yes |
B.3 Sources of Personal Information
We collect personal information directly from you (registration, content uploads, payout details), automatically through your device (location, usage data), and from third-party SDKs (Firebase, AdMob, OneSignal) as described in our Privacy Policy.
B.4 How We Use and Disclose Personal Information
See Section 3 ("How We Use Your Information") and Section 4 ("Third-Party Services & SDKs") of our main Privacy Policy for full details.
B.5 Sale or Sharing of Personal Information
We do not sell personal information for monetary consideration. However, certain advertising integrations (such as Google AdMob) may constitute "sharing" under CPRA for purposes of cross-context behavioral advertising, since device/advertising identifiers may be used to serve personalized ads.
B.6 Your CCPA/CPRA Rights
You have the right to:
- Right to Know — What personal information we collect, use, disclose, and share, and the categories of sources and third parties involved.
- Right to Delete — Request deletion of personal information we've collected from you, subject to certain legal exceptions.
- Right to Correct — Request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing — Opt out of the "sharing" of your personal information for cross-context behavioral advertising (see Part B.7).
- Right to Limit Use of Sensitive Personal Information — Restrict use of sensitive data (e.g., precise geolocation) to what is necessary to provide the Service.
- Right to Non-Discrimination — We will not deny services, charge different prices, or provide a lower quality of service because you exercised your CCPA rights.
- Right to Appeal — If we deny your request, you may appeal our decision (see Part C).
B.7 How to Opt Out of Sharing/Personalized Ads
You can limit ad personalization by:
- Resetting or limiting your device's Advertising ID in your Android device settings.
- Adjusting in-app ad preference settings, if available.
- Contacting us directly using the details in Part C, with the subject line "CCPA Opt-Out Request."
B.8 How to Exercise Your CCPA/CPRA Rights
Submit a verifiable consumer request using the contact details in Part C. We will respond within 45 days (extendable by an additional 45 days when necessary, with notice to you). You may also designate an authorized agent to submit a request on your behalf, subject to identity verification.
We will not discriminate against you for exercising any of these rights.
Part C: Contact Us
For any GDPR or CCPA/CPRA request — access, deletion, correction, portability, or opt-out — contact:
Data Protection / Grievance Officer: [Name] Email: [your-support-email@example.com] Address: [Company/Registered Address]
Please specify whether your request relates to GDPR (EEA/UK) or CCPA/CPRA (California) so we can route it appropriately.
Part D: Third-Party Processors
The following third-party service providers may process personal data on our behalf, as described in our main Privacy Policy:
- Google Play Services & Firebase (Authentication, FCM, Crashlytics, Analytics)
- Google AdMob & Custom Ad Networks (Advertising)
- YouTube IFrame API (Embedded live streams)
- OneSignal (Push notifications)
- GoldAPI (Commodity market data — no personal data shared)
This document is intended to supplement, not replace, our main Privacy Policy. Please review and complete the bracketed placeholders (officer name, email, address) before publishing. If Short News does not currently have users in the EEA/UK or California, you may still choose to publish this page as a precautionary compliance measure, or omit it if not applicable to your user base.