Mobile App Policy

1. Scope and controller

This policy explains how the GUAY.news mobile app for iOS and Android works (identifier news.guay.app, version 1.0.0 and later), what data it processes, which system permissions it requests and why, and the conditions that apply to its use. For the app, it supplements the Privacy Policy, which remains the general text on how your data is processed across all GUAY.news services, and the Terms and Conditions of Use. Where this policy is more specific than the Privacy Policy in relation to the app, this policy applies.

The controller and owner of the app is:

• Owner: WEBSITESYSEO S.L., tax ID (CIF) B27442433 (NIF-IVA: ESB27442433), Registered in the Companies Register of Lugo (Spain).
• Registered address: Calle Antonio Rosón 1, 27002 Lugo (Spain).
• General contact: info@websitesyseo.com · 982 990 610.
• Newsroom contact: info@guay.news.
• Data protection contact: info@guay.news. We have not appointed a Data Protection Officer because we are not required to (we do not process special categories of data on a large scale or systematically monitor users), but this mailbox handles all your privacy queries and requests.

The app is listed on the App Store and Google Play under the name of WEBSITESYSEO S.L. Apple and Google are not responsible for the app or its content (see section 18).

2. What the app is and how it works

The app is the mobile version of the GUAY.news newspaper: good news only, with a daily edition at 7:00 (Madrid time) and updates at 13:00 and 19:00. It is built with React Native and Expo and runs on compatible iPhones, iPads and Android phones and tablets. Its parts are:

• Welcome (onboarding): three introductory screens, acceptance of the legal texts (required to use the app) and a screen explaining what notifications are for before the system asks you for permission.
• Today: the day’s edition.
• Sections: news arranged by topic (everyday heroes, health, science, useful technology, environment and animals, society and solidarity, sport, culture and education, «the world is getting better» and curiosities).
• Article: the full text, with the link to the original source, text size adjustment, the save button and the share button, which generates an image with the headline on the spot to accompany the link.
• Saved and Search: the articles you save and your recent searches. Both are stored only on your device.
• My GUAY: your account, your favourite sections, the time of your daily notification, dark mode, the legal texts, account deletion, the option to rate the app, the shop and links to our social media.
• Widget: a home screen widget showing the good news of the day.
• Offline mode: the app keeps the last downloaded edition so you can read it without a connection.

Stories are selected and written as explained in the Notice on the Use of Artificial Intelligence: they are written from scratch based on facts published by other media, with the help of AI and with human review, and each one states its original source. The app shows exactly the same content as the website.

3. What data the app processes and why

3.1. If you use the app without an account

You do not need an account to read. In that case we do not know who you are and we only process:

• Technical connection data that any app needs to download content: the IP address and basic request data (date and time, app version, operating system). This is used to serve you the news and for the security of the service; security logs are deleted after 90 days.
• The notification token, your preferred time and your favourite sections, only if you turn on notifications (section 5).
• Anonymous usage statistics, which you can turn off (section 7).

Everything else (saved articles, recent searches, text size, dark mode, the cached edition and the record that you have accepted the legal texts) stays on your device and does not reach us.

3.2. If you create an account or sign in

An account is optional. It lets your preferences follow you to other devices and to the website, and it is the same account you use on guay.news (including the shop). You can create it in three ways:

• With email and password: we process your email address, your password (which we store transformed with a hash function, never in plain text) and any name you choose to give.
• With «Sign in with Apple»: Apple provides us with a unique user identifier for our app, your email address and, only the first time and if you allow it, your name. You can choose to hide your email: Apple then gives us a relay address (of the form …@privaterelay.appleid.com) that forwards our messages to your real email address, which we never see. You can stop receiving emails through that route at any time in your Apple ID settings. We never see your Apple password.
• With «Sign in with Google»: Google provides us with your Google account identifier, your email address and your name. We do not request access to your contacts, your Gmail, your files or any other data in your Google account, and we do not use your profile picture. We never see your Google password.

With an account we also process: your internal user identifier, your favourite sections and notification time (to synchronise them), the record of your acceptances of the legal texts (version, date, IP address and «app» as origin) and, if you buy from the shop, the order data described in the Terms of Sale and in the Privacy Policy.

3.3. Purposes, legal bases and retention periods

We do not take automated decisions with legal effects on you and we do not build profiles. Choosing favourite sections only serves to arrange what you see and what we notify you about.

4. System permissions

The app requests the minimum permissions. This is the complete list:

You can review and withdraw any permission in your device settings (on iOS, Settings > GUAY.news; on Android, Settings > Apps > GUAY.news > Permissions). If a future version needed a new permission, we would update this policy beforehand and the system would ask for your authorisation when it is first used.

5. Push notifications

What you receive. One daily notification with the day’s edition, at the time you choose (by default 7:00 Madrid time), and, exceptionally, a highlighted piece of good news. Notifications are editorial content: we do not use them for advertising or to promote shop products.

How they work. When you grant permission, your device obtains a technical identifier called a notification token, which does not reveal your identity but allows notifications to be addressed to that device. We store on our server that token, your preferred time, your favourite sections, your language and the platform (iOS or Android) and, if you have an account, we associate them with it. For delivery we use Expo Push Service from 650 Industries, Inc. (USA), which in turn delivers the notification via Apple Push Notification service (Apple) on iOS and Firebase Cloud Messaging (Google) on Android. These providers receive the token and the content of the notification (the headline) solely in order to deliver it. See section 13 on the safeguards for these transfers.

How to change or turn them off.

• Change the time or the sections in My GUAY.
• Turn them off in My GUAY or in the system settings (iOS: Settings > Notifications > GUAY.news; Android: Settings > Apps > GUAY.news > Notifications).
• When you turn them off, uninstall the app or delete your account, we stop using the token and remove it from our server. Tokens that Apple’s or Google’s services report as invalid are removed automatically.

6. What is stored on your device

The app stores in your phone’s memory the information it needs to work. None of this is sent to our servers except as indicated:

• Content cache: the last downloaded edition, with its text and images, for offline mode and for the widget. It is replaced with each new edition.
• Saved articles and recent searches: only on your device. To search, the app sends the search term to our server, which returns the results and does not store the search linked to you; the recent searches history exists only on your phone and you can clear it from the Search screen.
• Preferences: text size, dark mode, favourite sections, notification time, your choice regarding statistics and the version of the legal texts you have accepted.
• Session token: if you sign in, the token that keeps you signed in is stored encrypted in the system’s secure storage (iOS Keychain or Android Keystore), never in plain text.
• Widget: the widget shows the good news of the day using the public content of the edition; it contains no account data.

If you uninstall the app, the system deletes all of this data. We also remove it from the device when you sign out (except reading preferences) and when you delete your account. Saved articles are not synchronised with your account: if you change phone, they are not transferred.

7. Anonymous usage statistics

To find out which sections are most popular, which screens are used and whether anything is failing, the app sends anonymous usage statistics to our own server (not to third parties): screens viewed, articles opened, sections, use of features (save, share, change text size), app version, operating system and language.

• They do not include your name, email address, user identifier, notification token or any device or advertising identifier, and they are not matched with your account.
• The IP address of the connection is discarded and not stored with the events.
• Search terms are not part of the statistics.
• They are used only in aggregate, are not disclosed to anyone and are not used to build profiles.

How to turn them off: in My GUAY, switch off the option «Send anonymous usage statistics». From that moment the app stops sending them.

8. No advertising or third-party trackers

The app contains no advertising SDKs and no third-party analytics, attribution or tracking kits, does not show personalised advertising, does not use Apple’s IDFA or the Android advertising ID, does not share data with data brokers and does not follow you across other apps or websites. That is why we do not show Apple’s App Tracking Transparency prompt: the law and Apple’s rules only require it from those who track, and we do not.

If GUAY.news publishes sponsored content, it will be labelled as such in accordance with the Advertising Policy and will be shown without tracking you.

9. The shop within the app

Opening the shop from My GUAY loads the guay.news shop in a web view embedded in the app. That web view is, for all purposes, our website: the website’s Cookie Policy applies (with its own cookie notice, where you can accept, reject or configure), together with the Privacy Policy and the Terms of Sale. We process the data you enter when buying (name, delivery address, telephone number, email address) to manage the order. Payment is processed by Stripe; GUAY.news neither sees nor stores your card details.

The shop sells physical products only (T-shirts, mugs, books). The app does not sell digital content, subscriptions or paid features: all content in the app is free. For that reason purchases are not made through Apple’s or Google’s in-app purchase systems, and neither Apple nor Google is involved in or responsible for them.

10. Original sources, sharing, rating and social media

• Original source: each article links to the outlet it comes from. When you open that link you leave our content and go to a third party’s website, which applies its own privacy and cookie policies, for which we are not responsible.
• Sharing: when you share, the app generates on the spot an image with the headline and the GUAY.news brand from the public content of the article, with none of your data, and opens your system’s share menu. You choose the destination app; we do not know who you send it to.
• Rating the app: this uses Apple’s or Google’s rating window. The rating is handled by the store and we do not receive your identity from the app.
• Social media: links to our profiles open each network’s app or website. We do not embed code from those networks in the app. Processing on our profiles is explained in the Privacy Policy.

11. Acceptance of the legal texts and new versions

During onboarding the app shows you, with links to read them in full, the Terms and Conditions of Use, this Mobile App Policy and the Privacy Policy. To continue you must tick the box, which is never pre-ticked, by which you accept the Terms and declare that you have read the Privacy Policy. Reading the Privacy Policy does not amount to giving any consent: consents (such as for notifications) are requested separately.

• Without an account: the app stores on your device the accepted version and the date.
• With an account: we record on our server the version, date, IP address and origin («app»), and keep this while the account is active and for 5 years thereafter, so that we can evidence it.

When we publish a new version of the Terms or of this policy with material changes, the app will show it to you when you open it or sign in and will ask you to accept it again in order to continue using it. Changes that affect you apply from that acceptance; rights you have already acquired are not affected. You can always consult the current texts in My GUAY > Legal texts.

12. Deleting your account

You can delete your account whenever you like, free of charge and without having to give a reason, in any of these ways:

1. From the app: My GUAY > Delete account. The app asks you to confirm and, where necessary for security, to sign in again.
2. From the website: at https://guay.news/borrar-cuenta/, or from My account once signed in on guay.news.
3. By email: by writing to info@guay.news from the email address associated with the account. If we cannot verify that you are the account holder, we will ask you for the minimum needed to do so.

What is deleted: your profile (name, email address, password), the link with Apple or Google, your favourite sections and notification time, the notification token, your open sessions and the other data associated with your account on the website. Comments you have published no longer show your name and, if you ask us, we delete them too. If you signed in with Apple, we also revoke with Apple the authorisation you gave our app. Deleting the account is a real deletion, not a mere deactivation.

What is kept, and why: only what the law requires or allows us to keep, blocked and not used for anything else:

• Orders and invoices: 6 years (Art. 30 of the Spanish Commercial Code) and 4 years for tax purposes.
• The record of acceptances of the legal texts: 5 years, for defence against possible claims.
• The record of your deletion request: 3 years, to evidence that we handled it.
• Security logs: until their 90 days have elapsed.

Timescale: deletion is carried out immediately when you do it from the app or the website, and within a maximum of one month from receipt of your email (Art. 12(3) GDPR). Any traces that may remain in backups disappear when their rotation cycle is completed, within a maximum of 30 days, and if a backup had to be restored before then, we would apply your deletion again. Data stored on your device is removed when you delete the account from the app or uninstall it.

Deleting the account does not delete the app. If you want to stop using it, uninstall it as well.

13. Recipients and international transfers

We do not sell or disclose your data. Only the providers that render services to us have access to it, as processors, under contract and on our instructions:

• LucusHost (servidores de OVH) (European Union): hosting of our servers, including our own statistics.
• 650 Industries, Inc. (Expo), USA: Expo Push Service, to send notifications.
• Apple (Apple Push Notification service) and Google (Firebase Cloud Messaging): technical delivery of notifications on each platform.
• Stripe: shop payments (see the Terms of Sale).

When you sign in with Apple or Google, Apple and Google act as independent controllers of their own identity service, in accordance with their privacy policies.

Data generated by the app is not sent to the artificial intelligence providers we use to prepare the news. Transfers to the USA are based on the EU-US Data Privacy Framework (Commission adequacy decision of 10 July 2023, upheld by the General Court in Case T-553/23) where the provider is certified and, failing that, on the standard contractual clauses in Decision (EU) 2021/914, with any supplementary measures required (Art. 46 GDPR). You can request information about these safeguards at info@guay.news.

14. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw at any time any consent you have given (without affecting the lawfulness of prior processing), by writing to info@guay.news or to Calle Antonio Rosón 1, 27002 Lugo (Spain). Many of them you can exercise directly in the app: edit your account and preferences, turn off notifications, object to statistics and delete your account. We will reply within one month, extendable by two further months in complex cases (Art. 12(3) GDPR).

If you consider that we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es). More details in the Privacy Policy.

15. Minors

The app’s content is suitable for all audiences, but the app is not directed at children. To create an account you must be at least 14 years old, the age from which you can consent yourself to the processing of your data in Spain (Art. 7 of the Spanish Organic Law 3/2018 on Data Protection, LOPDGDD). Below that age you can read the app without an account, but you cannot register, and it is for your parents or guardians to supervise use of the device. If we learn that an account has been created by a child under 14, we will delete it. Parents or guardians can let us know at info@guay.news.

16. Security

We apply technical and organisational measures appropriate to the risk (Art. 32 GDPR): all communications between the app and our servers are encrypted with HTTPS/TLS; the session token is stored in the iOS Keychain or Android Keystore; passwords are stored using hash functions; access to data is restricted to the staff who need it; we keep security logs for 90 days and make daily backups. No system is invulnerable: if a security breach occurred that posed a high risk to you, we would inform you without undue delay and notify the AEPD where required (Arts. 33 and 34 GDPR).

You can help too: use a password you do not use for other services, keep your device’s operating system up to date and protect it with a passcode or biometrics.

17. Updates and minimum version

We publish app updates through the App Store and Google Play to add features, fix bugs and improve security. We recommend keeping automatic updates turned on. For security reasons or for compatibility with our servers, we may set a minimum version: if your version is older, the app will ask you to update it in order to keep working. In the meantime, you can always read GUAY.news on the website.

The app requires a reasonably recent version of iOS or Android; the specific requirements are shown on each store listing. We may stop supporting old operating system versions once they no longer receive security updates from their manufacturers. GUAY.news is a free service and we may modify, suspend or withdraw the app for good reason (for example, technical, security or legal reasons or the closure of the service), giving reasonable advance notice where possible and without prejudice to your rights as a consumer.

18. App stores

You download the app from the App Store (Apple Distribution International Ltd. / Apple Inc.) or from Google Play (Google Ireland Ltd. / Google LLC). Apple and Google are third parties unrelated to GUAY.news: the download, your store account, your ratings and the information the store collects are governed by their own terms and privacy policies, which we recommend you read. We do not receive your identity from the stores because you downloaded the app; only aggregated download and performance statistics that the stores make available to developers when you allow it in your device settings.

The app is free and offers no in-app purchases. Purchases of physical products in the guay.news shop are a contract between you and WEBSITESYSEO S.L., with no involvement by Apple or Google (section 9).

19. Licence to use the app

Use of the app is governed by the Terms and Conditions of Use, which include the rules on content and intellectual property (see also the Intellectual Property Policy) and, where applicable, the Community Guidelines. In short, WEBSITESYSEO S.L. grants you a personal, free, non-exclusive, non-transferable licence, revocable for good reason, to install and use the app on Apple or Android devices that you own or control, for your personal and non-commercial use, subject to the usage rules of the relevant store (including any family sharing they allow). You may not copy, modify, decompile or extract the app’s content on a large scale, except to the extent expressly permitted by law.

In particular, if you download the app from the App Store, you acknowledge that:

• This licence is concluded between you and WEBSITESYSEO S.L., not with Apple, and WEBSITESYSEO S.L., not Apple, is solely responsible for the app and its content.
• Apple has no obligation to provide any maintenance or support services for the app; support is provided by WEBSITESYSEO S.L. at info@guay.news and Calle Antonio Rosón 1, 27002 Lugo (Spain).
• In the event of any failure of the app to conform to any applicable warranty, you may notify Apple, which will refund the purchase price, if any (the app is free); to the maximum extent permitted by law, Apple will have no other warranty obligation whatsoever with respect to the app. All of this is without prejudice to your rights as a consumer against WEBSITESYSEO S.L.
• WEBSITESYSEO S.L., not Apple, is responsible for addressing any claims by you or any third party relating to the app or its use, including product liability claims, claims that the app fails to conform to any legal or regulatory requirement, consumer protection or privacy claims, and third-party claims of infringement of intellectual property rights.
• You represent that you are not located in a country that is subject to a US Government embargo or that has been designated by the US Government as a «terrorist supporting» country, and that you are not listed on any US Government list of prohibited or restricted parties.
• You must comply with applicable third-party terms when using the app (for example, those of your mobile data provider).
• Apple and its subsidiaries are third-party beneficiaries of this licence and, upon your acceptance, will have the right to enforce it against you as a third-party beneficiary.

Nothing in the above excludes or limits the liability of WEBSITESYSEO S.L. for wilful misconduct or gross negligence, or your non-waivable rights as a consumer. The applicable law and jurisdiction are those set out in the Terms and Conditions of Use.

20. Changes to this policy

We will update this policy when the way the app works, its permissions or the providers involved change, and we will keep the App Store and Google Play privacy declarations (Annexes A and B) aligned with it. The version and effective date appear at the top. If the changes are material, we will tell you in the app and, where appropriate, ask you to accept again (section 11).

21. Annex A — App Store privacy labels (App Privacy)

This annex sets out the answers that WEBSITESYSEO S.L. declares in App Store Connect for the «App Privacy» section of news.guay.app, version 1.0.0, using Apple’s official category and purpose names.

General declaration: Yes, we collect data from this app. Data Used to Track You: none. No data type is used for tracking.

Summary shown on the listing: Data Used to Track You: none. Data Linked to You: Contact Info, Financial Info, Identifiers, Purchases and Other Data. Data Not Linked to You: Usage Data.

Privacy Policy URL to declare: https://guay.news/en/privacy/. App-specific policy: https://guay.news/en/app-policy/. Account deletion: available within the app (My GUAY > Delete account), in accordance with App Store Review Guideline 5.1.1(v), and at https://guay.news/borrar-cuenta/.

22. Annex B — Google Play «Data safety» section

This annex sets out the answers that WEBSITESYSEO S.L. declares in Google Play Console for the «Data safety» section of news.guay.app, version 1.0.0, using Google’s official names.

Overall answers

Data types

No row is marked «Shared»: providers acting as processors on behalf of WEBSITESYSEO S.L. (hosting, Expo Push Service, Firebase Cloud Messaging, Stripe) do not count as sharing under Google’s definition. No data is processed only ephemerally (Processed ephemerally: No), except as indicated for searches.

Privacy policy URL to declare: https://guay.news/en/privacy/. App-specific policy: https://guay.news/en/app-policy/. Delete account URL: https://guay.news/borrar-cuenta/.

23. Prevailing version

This policy is published in Spanish and English. In the event of any discrepancy between the two versions, the Spanish version prevails, unless mandatory consumer protection legislation provides otherwise.