The short version. Chronaria reads the news feeds you choose and writes you a press review. Doing that needs an account and it needs your settings. There are no adverts, no analytics of any kind, no tracking, and nothing of yours is sold or shared with advertisers. The model that writes the reports is sent the news and never your name. You can delete everything from the app, in one go, and it cannot be recovered.
The controller of the data described on this page is Federico Monti, who runs the server Chronaria is installed on.
For any question about this notice, to exercise your rights, or to ask for your data to be deleted: dreamsin03@gmail.com.
Chronaria is self-hosted: there is no company behind it, and the server is the one belonging to whoever invited you. No data protection officer has been appointed, because none of the cases in which the Regulation requires one applies.
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Your email address and an account identifier (a code assigned by Google Firebase Authentication) | Recognising you from one request to the next, and knowing whose settings and reports these are | Performance of a contract (Art. 6(1)(b) GDPR): without an account there is no personal press review | Until the account is deleted |
| When the account was created and when it was last used | Knowing whether an account is still in use | Performance of a contract | Until deletion |
| The topics you follow, the sources and feeds you pick, the urgency rules (places and keywords), the public Telegram channels, the report times, the language and shape of the reports, whether you want pictures | It is what the service does: without them there is nothing to read and no review to write | Performance of a contract | Until deletion, or until you remove them |
| Which articles you have already been shown, and when | Not repeating the same story in your next report | Performance of a contract | Until deletion |
| The reports written for you | So you can read them again, including offline | Performance of a contract | Until deletion |
| An app installation identifier, provided by Firebase Cloud Messaging | Delivering notifications to this phone and not to somebody else's | Performance of a contract. Permission to show notifications is granted to the operating system and can be withdrawn there | Until you uninstall, sign out, or delete the account |
| A daily count of how many requests to the language model were made for you and how many tokens they cost | Stopping one reader from consuming the shared allowance of everybody else, and knowing what the service costs | Legitimate interest (Art. 6(1)(f)): the model allowance is finite and shared, and without this count the only remedy would be to shorten everybody's report | Until deletion |
| Your account tier and its expiry; if you buy something, the product identifier and the purchase token Google Play returns | Knowing what you are entitled to, verifying the purchase with Google, and checking it again later (a subscription can be refunded before it expires) | Performance of a contract, and legitimate interest in verifying against abuse | Until deletion |
| Technical server logs: the IP address a request came from, the date and time, the path requested, the outcome | Keeping the server running, noticing failures and unusual access | Legitimate interest (security and availability) | As long as the rotation configured on the machine keeps them, typically a few weeks. They are used for nothing else and are not matched against your account |
Chronaria does not ask for and does not intentionally process data in the special categories of Art. 9 GDPR: nothing about health, religious or philosophical beliefs, political opinions, trade union membership or sex life, and no genetic or biometric data. Bear in mind, though, that the keywords and topics you choose are free text: if you write the name of an illness or of a political party as an urgency rule, that text is stored as you wrote it. Choose your words knowing that.
No, but without the data in the first row of the table the service cannot exist: there is no way to write a personal press review for somebody who cannot be recognised. Not providing it means not using Chronaria. Everything else is yours to choose, and notifications are optional.
Chronaria buys data from nobody, obtains none from third parties, and enriches none from outside sources.
No location. No access to your contacts, photos, microphone, camera or files. No advertising identifier. No third-party analytics, no measurement SDK, no cross-app or cross-site tracking. No adverts. No commercial profile. There is no password at all: Chronaria is never given one and stores none, because Google does the authenticating.
Nobody, except the technical providers needed to run the service, each of them only the part it needs:
| Recipient | What it receives | What for |
|---|---|---|
| Google Ireland Limited / Google LLC — Firebase Authentication | Your email address and sign-in credentials | Verifying who you are. Chronaria never sees your password |
| Google — Firebase Cloud Messaging | The app installation identifier and the text of the notification (the headline of an urgent story, or the title of a report) | Delivering the notification to your phone |
| Google — Gemini API | Headlines, publishers, dates and the opening lines of the articles gathered for your topics. Not your email address, not your identifier, not the names of your topics as personal data | Writing the text of the reports. The model is given news and does not know who it is writing for |
| Google — Google Play Billing and the Play Developer API | Only if you buy something: the product identifier and the purchase token | Checking that the purchase is real and when it expires |
| The sites of the sources you chose | Nothing about you | Requests to feeds and article pages are made by the server, not by your phone: those sites see the server, not you, and do not know you exist |
| The provider of the machine the server runs on | Nothing specific: it hosts the disk the database sits on | Running the server |
No data is sold, traded, bartered or disclosed to advertisers, ad intermediaries or data brokers, for any reason and at any price.
The Google services listed above may process data on infrastructure outside the European Economic Area, including in the United States. Google states that it relies on the European Commission's standard contractual clauses and on its certification under the EU-US Data Privacy Framework as the basis for those transfers; the applicable terms are the ones Google publishes and to which whoever runs this server has agreed. You can read them here:
The reports are not written by a person: a Google language model (Gemini) writes them, and is sent the news gathered for your topics. Three points are worth being precise about.
No automated decision is taken that produces legal effects concerning you or similarly significantly affects you (Art. 22 GDPR). There is no profiling for commercial or advertising purposes, and nothing you read is used to infer your tastes, opinions or habits.
The only automatic things are these: your urgency rules are compared against incoming news to decide whether to send you a notification, and stories you have already been shown are left out of the next report. Those are rules you write, and you can change or delete them at any time.
No measure makes a breach impossible. If a personal data breach occurred that posed a risk to your rights, you would be informed and the supervisory authority notified within the periods the Regulation sets.
Until you delete it. There is no automatic deletion: reports, settings and the record of which articles you were shown stay until you close the account or remove them. That is a choice of simplicity rather than deliberate hoarding, and this notice says so because it is true. The exception is the technical server logs, which are rotated and overwritten as stated in the table in section 2.
From the app: Settings → Account → Delete account. It is immediate and permanent. The topics, sources, urgency rules, channels, times, preferences, reports, the record of what you were shown, the phones registered for notifications, the usage counters, the purchase details and the account you sign in with all go. There is no bin and no restore.
Without the app: write to dreamsin03@gmail.com from the address you registered with. See also the dedicated page.
What remains: only the news articles downloaded from the feeds. They are stories published by news organisations, shared by every reader, and they contain nothing about you: neither your identifier nor the record that you had read them, which goes with the account.
Deleting the account in the app also deletes the Firebase sign-in account. If you bought a subscription, remember to cancel it in Google Play as well: subscriptions are managed by Google and cannot be cancelled from here.
Within the limits of Articles 15-22 of the Regulation you have the right to:
To exercise them, write to dreamsin03@gmail.com. The request is free and is answered without undue delay and in any case within one month, extendable by two months for particularly complex requests, with reasons given.
If you believe your data is being processed in breach of the Regulation you can lodge a complaint with a supervisory authority. In Italy that is the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Rome (garanteprivacy.it). You may also approach the authority of the member state where you live or work, or the courts.
Chronaria is not directed at anybody under sixteen and does not knowingly ask for or process their data. If you become aware that somebody under sixteen has created an account, write to the address above and it will be deleted.
This page and the account deletion page use no cookies, load nothing from third parties, contain no tracking pixels, and record nothing beyond the technical server log described in section 2. The app uses no cookies and contains no tracking of any kind.
If what is processed changes, or the way it is processed changes, this page is updated and the date at the top changes with it. If the change is substantive — a new recipient, a new purpose, a different legal basis — you will be told in the app before it takes effect. Earlier versions can be requested at the contact address.