Privacy Policy
Last updated: June 3, 2026
1. Who we are
NewsNook (“NewsNook,” “we,” “us,” or “our”) operates an AI-assisted reading application that helps users organize and consume newsletters and similar content.
- Operator: Trevillyan Labs, Inc., 210 Easy Street, APT 14, Mountain View, CA 94043, U.S.A
- Contact: privacy@trevillyanlabs.io
This Privacy Policy describes how we collect, use, disclose, and protect information when you use our websites, applications, and related services (collectively, the “Services”).
2. Scope
This policy applies to personal information we process in connection with the Services. It does not apply to third-party websites, integrations, or services that we do not control.
3. Information we collect
3.1 Information you provide
- Account and profile: Name, email address, password or authentication credentials (when you create or sign in to an account), and preferences you set in the product.
- Payment information: Billing details are processed by our payment provider (Stripe). We receive limited payment metadata (for example, subscription status) rather than full card numbers.
- User-generated content: Notes, tags, highlights or excerpts you save in the app, and similar content you choose to store.
- Communications: Messages you send to support or feedback channels.
3.2 Information we collect automatically
- Device and usage data: IP address, browser type, device identifiers, general location derived from IP, pages or screens viewed, timestamps, and diagnostic or performance data.
- Cookies and similar technologies: We and our analytics or security partners may use cookies, local storage, or similar technologies as described in our cookie notice or in-product settings (if provided).
3.3 Information from connected email (Gmail and similar)
When you choose to connect a Google account, we access Gmail data only as needed to provide the Services you request—for example, to identify and sync messages that constitute newsletters or similar reading material, to display them in NewsNook, and to keep your reading state in sync.
We request access through Google OAuth and in line with the scopes you approve. We do not use Gmail data for serving third-party ads, and we do not sell your email content.
Google API Services User Data Policy: NewsNook's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.4 Information from other sources
We may receive information from authentication providers, payment processors, or analytics partners as described in this policy.
4. How we use information
We use personal information to:
- Provide, operate, and improve the Services (including sync, search, reading workflows, and account management).
- Generate AI-assisted summaries and in-app assistance based on content you have synced and related product context, using subprocessors listed in Section 7.
- Process subscriptions and payments, send transactional messages, and provide customer support.
- Maintain security, prevent abuse, enforce our terms, and comply with legal obligations.
- Understand usage in aggregate or de-identified form to improve the product (for example, via analytics tools).
We do not sell your personal information as “sale” is commonly defined under U.S. state privacy laws. We do not use Gmail content for advertising personalization for unrelated third parties.
4.1 AI features and model training
NewsNook does not use Google user data to train, fine-tune, or improve generalized or foundational artificial-intelligence or machine-learning models. We use AI only to provide user-facing features you request — generating newsletter summaries, answering your questions about an item (“Interact”), and converting newsletters to audio narration. To do this, the relevant newsletter text is sent to our AI subprocessors (see Section 7) at the time you use the feature, solely to produce that result for you. Neither NewsNook nor its AI subprocessors use your Google data to train their models, and your data is not retained by those subprocessors beyond what is necessary to deliver the feature. You can disable AI features at any time in Settings; with them off, no newsletter content is sent to AI subprocessors.
5. Legal bases (where applicable)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on one or more of the following:
- Contract: Processing necessary to provide the Services you request.
- Legitimate interests: For example, securing the Services, improving features, and fraud prevention, balanced against your rights.
- Consent: Where required (for example, certain cookies or marketing communications, if offered).
- Legal obligation: Where we must comply with law.
6. How we share information
We share personal information only as needed:
- Service providers (subprocessors): Vendors that host infrastructure, process payments, run background jobs, provide error monitoring, analytics, email delivery, or AI inference, subject to contractual obligations. See Section 7.
- Legal and safety: When required by law, legal process, or to protect rights, safety, and security.
- Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
- With your direction: When you ask us to share information or connect integrations.
We may share aggregated or de-identified information that cannot reasonably identify you.
7. Subprocessors
We share data with the following subprocessors only as needed to operate NewsNook. Those that may process content derived from your Google data are marked (Google-data).
| Subprocessor | Purpose | Data processed |
|---|---|---|
| Supabase | Database, authentication, storage | Account and all app data (encrypted at rest) |
| Vercel | Application hosting / delivery | Request traffic, logs |
| Anthropic (Claude) (Google-data) | Newsletter summaries; “Interact” Q&A | Newsletter subject + body text for items you open |
| ElevenLabs (Google-data) | Audio narration of newsletters (text-to-speech) | Newsletter text for items you convert to audio |
| Tavily (Google-data, optional) | Web search within “Interact” (only when you invoke it) | The text you select + your question |
| Stripe | Payments | Billing details (no card data touches NewsNook) |
| Upstash | Rate limiting + background job queue | Operational metadata |
| Sentry | Error monitoring | Diagnostic data, scrubbed of personal information |
| PostHog | Product analytics | Pseudonymous usage events |
We do not sell your data or share it with third parties for their own marketing.
8. International transfers
If you access the Services from outside the country where we operate, your information may be processed in the United States or other countries where we or our subprocessors maintain facilities. Where required, we use appropriate safeguards (such as Standard Contractual Clauses).
9. Retention
We retain your newsletter content while your account is active so you can read, search, and revisit it — that is the purpose of NewsNook. When you delete an item, that item's content is removed. When you delete your account, all of your data is permanently deleted within 30 days and your Google authorization is revoked.
We retain other personal information only for as long as needed to provide the Services, comply with law, resolve disputes, and enforce agreements, subject to those legal retention requirements.
10. Security
We implement technical and organizational measures designed to protect personal information. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
11. Your rights and choices
Depending on where you live, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is consent-based.
- Port your data in a machine-readable format (where applicable).
- Opt out of certain “sales” or “sharing” for cross-context behavioral advertising (we do not sell Gmail content; adjust if your analytics practices change).
- Lodge a complaint with a supervisory authority.
To exercise these rights, contact privacy@trevillyanlabs.io. We may need to verify your identity. If you use Google sign-in, you may also manage permissions in your Google account.
11.1 Revoking Gmail / Google access
You can revoke NewsNook’s access to your Gmail account at any time. You have two options:
- From within NewsNook: Open NewsNook, go to Settings → Connected Accounts (or Integrations), find your connected Google account, and select Disconnect. This stops further Gmail syncing.
- From your Google Account (recommended for a complete revoke):
- Go to https://myaccount.google.com/permissions (or in your Google Account, open Security → Your connections to third-party apps & services).
- In the list of apps with access to your account, select NewsNook.
- Click Delete all connections you have with NewsNook (or Remove Access).
- Confirm when prompted.
Revoking access immediately prevents NewsNook from accessing any new Gmail data. It does not, by itself, delete Gmail-derived data already stored by NewsNook—see Section 11.2 to delete that data.
11.2 Deleting your Gmail data from NewsNook
To delete Gmail data that NewsNook has already synced or stored, you can:
- Delete content in the app: Remove individual synced newsletters or messages from within NewsNook, or use Settings → Delete account to remove your account and all associated data.
- Request deletion by email: Email privacy@trevillyanlabs.io with the subject line “Delete my Gmail data” from the email address associated with your account. We may verify your identity before acting on the request.
When you delete an item, that item's content is removed. When you delete your account—or submit a deletion request—all of your data is permanently deleted within 30 days and your Google authorization is revoked, except where we are required to retain limited information to comply with law, resolve disputes, or enforce our agreements. Disconnecting your Google account stops further syncing but does not, by itself, delete data already stored; use one of the options above to delete that data.
California residents: You may have additional rights under the CCPA/CPRA. We do not knowingly “sell” or “share” personal information of minors under 16 for behavioral advertising in ways that trigger opt-out rights beyond what this policy describes—update this section after legal review.
12. Children
The Services are not directed to children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to delete it.
13. Third-party links and integrations
The Services may link to third-party sites or allow integrations. Their privacy practices are governed by their own policies.
14. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, where appropriate, provide additional notice (for example, by email or in-app message).
15. Contact
Trevillyan Labs, Inc.
210 Easy Street, APT 14
Mountain View, CA 94043, U.S.A
Email: privacy@trevillyanlabs.io
See also Terms of Service.