Last updated: October 14, 2026
For You Newsletter ("we," "us," or "our") operates the For You Newsletter service accessible at foryounewsletter.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
Your newsletter content is generated by automated artificial intelligence. We use a large language model (currently OpenAI's GPT models) to summarize and rewrite news drawn from third-party sources into the sections you select. In plain terms:
When you create an account, we collect your email address and any display name you provide. This is used to authenticate you and deliver your newsletter. You can sign in with email and password, with Google, or (in the iOS app) with Apple. If you use Google or Apple we receive the email address and name your provider shares with us (with Apple you may choose to hide your real email, in which case we get Apple's private relay address and newsletters are delivered through it). We never receive your Google or Apple password. Passwords for email sign-in are stored only as salted hashes by our authentication provider (Supabase).
We store the topics, subtopics, and customization settings you choose so we can generate a newsletter personalized to you. Some choices (for example health topics, the teams you follow, or the stocks you track) can say something about your interests. We use them only to write and deliver your newsletter and we do not infer sensitive characteristics from them or use them for advertising.
Payments are processed entirely by Stripe, Inc. We never see or store your card number, bank details, or full payment credentials. We receive a Stripe customer ID and subscription status from Stripe solely to manage your plan.
While your first newsletter is being created we ask how you found us. If you answer, we store your choice (and any details you type, such as a creator or friend's name) on your profile. It is optional and is used only to understand which channels work.
When you cancel a subscription, pause a newsletter, or delete a newsletter, we offer a short "why?" choice and, for some answers, a box to explain. Your answer is optional. If you give one we store the reason and anything you type, linked to your account. For cancellations, the reason is also passed to Stripe as the cancellation comment on your subscription. Please do not include sensitive personal information in free-text answers.
If you post, vote, or comment on the feedback board, we store that content together with your account. Posts may be reviewed by us before they appear.
If you accept analytics cookies, we collect product-usage events through PostHog, including page views, feature use, autocapture, and session recording, and we also record a limited set of the same product events in our own database. Your PostHog distinct ID is your account UUID (Linked to you: Yes). If you Reject analytics, or your browser sends a Do Not Track or Global Privacy Control signal, we do not record these analytics events. Crash reports via Sentry are necessary to run the Service and are not consent-gated.
To keep the Service reliable we record when something goes wrong or degrades while building a newsletter, for example a failed issue, a topic that could not be covered, or a news source that was unavailable. These records include the time, the topic, a technical message, and your account identifier, so we can fix problems affecting your newsletter. They are used for operations and support, not marketing.
Standard server and infrastructure logs may record your IP address, browser type, and request timestamps. These are used for security, debugging, and abuse prevention, and are not linked to your account for marketing purposes.
An at-a-glance summary of the data we collect, why, and whether it is linked to your identity. Product analytics are Linked to you: Yes because PostHog uses your account UUID. This mirrors the format used by app stores. The sections below provide the full detail.
| Data type | Purpose | Linked to you | Used to track you |
|---|---|---|---|
| Email address | Account, login, newsletter delivery | Yes | No |
| Newsletter preferences | Personalizing your content | Yes | No |
| Payment/subscription status | Billing (card data held by Stripe, not us) | Yes | No |
| How you heard about us (optional) | Understanding which channels bring users | Yes | No |
| Cancel / pause / delete reasons (optional) | Improving the product and pricing | Yes | No |
| Feedback board posts, votes, comments | Product feedback | Yes | No |
| Usage & analytics events (only if you accept) | Improving the product (PostHog UUID, autocapture, session recording, first-party events) | Yes | Yes |
| Service operations records | Reliability, support, fixing failed newsletters | Yes | No |
| Crash reports (Sentry) | Error monitoring and reliability | Yes | No |
| Technical logs (IP, browser) | Security, debugging, abuse prevention | Not for marketing | No |
We do not sell your personal information, and we do not use it for cross-context behavioral advertising or third-party tracking. We do not offer file uploads.
Newsletter emails may include an open pixel and click redirects signed with HMAC so we can tell whether an issue was opened or a source link was followed. These are first-party metrics. We do not use a third-party ad network for this. Many email apps can block the pixel (for example by not loading remote images). Every newsletter email has an unsubscribe link, and we send a separate one-click unsubscribe header that your email app can use.
Free and Plus plans may include sponsored content selected from your chosen topics. We do not sell your personal data to advertisers. Premium never includes sponsored content. At launch there may be no live campaigns — the slot stays empty until we run one.
New Plus or Premium subscribers who have never used a trial receive a 7-day free trial. Unless you cancel, your card is charged $4.99 (Plus) or $9.99 (Premium) when the trial ends. We send a reminder 48–72 hours before that charge. Canceling a paid plan takes effect at period end; your account and data stay until you delete them. Cancel from Settings or Stripe's customer portal — both are valid.
We share data with the following service providers only to the extent necessary to operate the Service. We do not sell your personal information to third parties.
Content and data sources (no account identity sent)
To write your newsletter we query outside sources using search terms taken from your selections, for example a team name, a stock ticker, a city, or a topic. We do not send your name, email address, or account identifier to these sources, although they can see the technical request itself (such as our server's IP address).
We may also disclose information if required by law, court order, or to protect the rights, property, or safety of For You Newsletter, our users, or the public.
Access to the Service's data is limited to the people who run it. We use an internal, access-controlled reporting dashboard that reads our database to show business and reliability information, such as the number of accounts, how many are on each plan, cancellations and the reasons people gave, which topics are popular, how people said they heard about us, and which newsletters had errors or fell back to a different news source. Some of those views show an individual account's email address and the optional answers described above, for example so we can look into a failed newsletter or reply to your feedback. We use this information only to operate, support, secure, and improve the Service. We do not sell it, and we do not use it to profile you for advertising.
We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse. All data transmitted between your browser and our Service is encrypted via HTTPS. Your account is protected by authentication managed through Supabase.
No method of transmission or storage is 100% secure. While we work to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.
We retain your account data and newsletter preferences for as long as your account is active. You can delete your account yourself at any time from Settings. When you do, we delete your profile, newsletters, and preferences. Records that are kept for product, reliability, and feedback purposes (analytics events, your answers to the "why?" questions, and service operations records) have the link to your account removed, so they no longer identify you, although the text of an answer you typed may remain. We may keep information where the law requires it (for example, Stripe transaction records needed for tax and accounting) and in routine backups for a limited time until they are overwritten.
Newsletter issues are kept for a period that depends on your plan, after which older issues are removed.
We use cookies and similar browser storage technologies to keep you signed in and remember your preferences. For full details, see our Cookie Policy.
Your newsletter may contain links to third-party news articles and websites. We do not control those sites and are not responsible for their privacy practices or content. We encourage you to review the privacy policies of any third-party sites you visit.
Depending on where you live, you may have the following rights regarding your personal information:
California Residents (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. As stated above, we do not sell or share your personal information for cross-context behavioral advertising. To exercise any of these rights, contact us at the address below.
Other U.S. States
Residents of states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Texas, Oregon, and others) have similar rights to access, correct, delete, and obtain a copy of their personal data, and to opt out of targeted advertising, sale, and certain profiling. We do not sell personal data, do not use it for targeted advertising, and do not make automated decisions with legal or similarly significant effects. If we decline a request you may appeal by replying to our response, and you may contact your state attorney general.
European Economic Area, United Kingdom, and Switzerland (GDPR)
We are based in the United States. If you are in the EEA, UK, or Switzerland, we process your personal data on these legal bases: to provide the Service you asked for (contract) — account, newsletter generation and delivery, billing; our legitimate interests in security, reliability, and improving the Service — operations records, and the optional answers you choose to give; your consent — analytics cookies and session recording, which you can withdraw at any time by choosing Reject; and legal obligations — tax and accounting records.
You have the right to access, correct, erase, restrict, and object to processing of your personal data, to receive it in a portable format, to withdraw consent, and to complain to your local data protection authority. Your data is processed in the United States and other countries where our service providers operate; where required we rely on safeguards such as the Standard Contractual Clauses and our providers' data processing terms.
Do Not Track and Global Privacy Control
We treat a Do Not Track signal or a Global Privacy Control signal from your browser as a request to Reject analytics. Your newsletter content does not depend on analytics.
To exercise any privacy right, contact us at hello@foryounewsletter.com. We will respond within 45 days.
If a security incident affects your personal information, we will investigate promptly, take steps to contain it, and notify affected users and regulators where the law requires, without undue delay (and within 72 hours of becoming aware where GDPR applies to a regulator notification).
Your newsletter is written by an AI model (OpenAI) from public news and data sources and the topics you chose. We do not use AI to make decisions that have legal or similarly significant effects on you (such as pricing, eligibility or account termination). We do not use your newsletter content or your account data to train AI models, and we ask our AI provider not to train on it. The topics you choose are sent to the AI provider with the source text so it can write your newsletter; your name and email are not.
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. In some countries the minimum age to consent to data processing is higher (up to 16); where that applies, you must meet your country's minimum age to use the Service. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify you (e.g., via email or a notice on the Service). Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.
Questions or concerns about this Privacy Policy? Contact us at: hello@foryounewsletter.com