Privacy Policy

Last updated: May 2026

Citizen’s Daily Brief is a free editorial product. Your reading is private. This policy explains what information we collect and how we use it.

Information We Collect

Account Data (optional)

You can read CDB without signing in. The Daily Brief and Weekly Assessment are free for everyone — no account required, no paywall.

If you choose to sign in (to support the work or to manage your supporter subscription), we store:

• Your Apple ID or Google account identifier (for authentication)
• Your display name, if provided
• Your email address (may be an Apple relay address)

Supporter Data

If you become a supporter, we record the transaction and your supporter status. We use this only to acknowledge your support in your account view and to associate renewal events with your account. We do not show any different editorial content to supporters versus non-supporters — the work is identical.

Payment processing is handled by Stripe (web) or Apple’s App Store (mobile, when supporter purchases are available on iOS). We never see or store your payment method details. See Stripe’s Privacy Policy and Apple’s Privacy Policy for details on how they handle payment data.

Push Notifications (optional)

If you grant notification permission, we register your device with Apple Push Notification service (iOS) or Firebase Cloud Messaging (Android) to deliver Daily Brief drops, Weekly Assessments, and breaking-news alerts. The device token is stored on our servers, associated with your account if signed in. You can revoke notification permission at any time from your device settings.

Analytics Data (opt-in)

We use Mixpanel to collect anonymous app usage data so we can understand which features readers use and improve the product. Analytics is opt-in: nothing is collected until you accept the consent banner. You can change your decision at any time from your account settings (when wired) or by clearing your local site data.

When you opt in, analytics data includes:

• Sign-in and account events (sign-in completion, sign-out, account deletion)
• Supporter funnel events (paywall view — for the supporter panel — supporter purchases, restores)
• Push notification events (permission grant, token registration, notification tap-through)
• App lifecycle (app open, app background)
• Page views (web only — auto-captured by Mixpanel as $pageview)

Analytics data is associated with an anonymous identifier and these non-identifying attributes: app name, app version, family (CDB’s product family), platform (iOS / Android / web), and whether you have an active supporter subscription.

Analytics data does not include:

• Your name, email address, Apple ID, or Google account
• The content of any Daily Brief or Weekly Assessment you read
• Your physical location

We do not use advertising identifiers (IDFA) or track you across apps. Analytics data is retained for 12 months. See Mixpanel’s Privacy Policy for details on how they handle data.

Local Data

Your reading preferences and recently-viewed Briefs are stored locally on your device using standard browser storage (web) or iOS / Android storage (mobile). This data is not transmitted to our servers.

Third-Party Services

Supabase

We use Supabase for authentication, data storage, and serverless functions. Supabase’s infrastructure is hosted on AWS. See Supabase’s Privacy Policy for details.

Stripe (web payments)

We use Stripe Checkout to process supporter subscriptions and one-time contributions on the web. Stripe receives your payment method details directly; we do not see or store them. See Stripe’s Privacy Policy.

RevenueCat (mobile payments, when active)

When mobile in-app supporter purchases are available, we use RevenueCat to manage the subscription lifecycle. RevenueCat receives the App Store transaction details to track entitlements. See RevenueCat’s Privacy Policy.

Mixpanel (Analytics)

We use Mixpanel to collect anonymous feature usage data as described above. No personal information is shared with Mixpanel. Analytics is opt-in.

Apple Push Notification service / Firebase Cloud Messaging

Push notifications are delivered through Apple’s APNs (iOS) or Google’s FCM (Android). Device tokens are technical identifiers used solely for delivering notifications; they are not used for advertising or cross-app tracking.

Data Sharing

We do not:

• Sell your data
• Share personal data with third parties beyond what’s needed to operate the service
• Display advertising
• Track you across apps or websites

Your Rights

You can:

• Read CDB without providing any personal information
• Decline analytics and still use the full product
• Sign in to support the work and manage your supporter subscription
• Change your analytics consent decision at any time
• Delete your account and all associated data at any time from the Account screen — this removes your account record, your supporter status, and any analytics identifier associated with your account
• Export or request a copy of any personal data we hold by emailing the contact below

If you are in the EU, UK, or California (and other jurisdictions with similar laws), you have additional rights under the General Data Protection Regulation (GDPR), UK GDPR, and California Consumer Privacy Act (CCPA) — including the right to access, correct, port, restrict, or object to our processing of your personal data, and the right to withdraw consent at any time. To exercise these rights, contact us at the address below.

Children’s Privacy

CDB is not directed at children under 13. We do not knowingly collect personal information from children.

Contact

If you have questions about this privacy policy or wish to exercise any of your rights, contact us at:

Email: support@stalefishlabs.com

Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the “Last updated” date above. Material changes will be communicated via in-app notice or email to signed-in supporters.