Privacy Policy
Operator and contact
Today Only News is operated by Mintc Inc. Contact support@mintcinc.com about privacy, article errors, or rights concerns.
Reading and local storage
You can read without signing in. The app stores language and notification preferences, viewed-story markers, and an article cache on your device. Offline display uses articles cached within the previous 24 hours. You can delete the article cache and viewed-story markers in Settings. Refreshing the feed may save articles again.
Interests and personalized delivery
After the displayed notice, selecting interests and starting onboarding, or choosing More/Less on a story and pressing Agree and apply in the displayed notice, also gives consent to personalized delivery and server storage of interests. You may also agree on the My deliveries or interest-order consent screen, or in Settings. The processing notice is shown before the action. Skipping, submitting an empty selection or loading historical choices does not grant consent. With consent, your saved topics, feedback, viewed article IDs and timezone are stored with an anonymous account on Supabase to select stories for you. Interests are not sent to external AI or advertising services. All news remains accessible latest first without consent. My deliveries and interest order require consent; push permission and night alerts remain separately controlled. Revoking consent in Your interests deletes server interests, viewed markers, delivery history and pending personal alerts; local interests remain. Deletion confirmation requires connectivity. Inactive server interests expire 90 days after synchronization, individual feedback/viewed markers after 90 days, and delivery history after 32 days through daily cleanup. Send-limit records containing no interests or article IDs remain for up to 30 days to prevent notification bursts, and are deleted with the anonymous account. Local feedback is limited to 90 days and 1,000 entries, cleaned while the app runs. Device backups may contain local records.
Saved stories
Saving keeps only the story ID, save time, titles, publication date and topics on this device, up to 500 entries until removed or cleared with local news data. Story bodies are not permanently stored offline. Opening a saved story requests its current public version by ID. The full saved list and interests are not sent to our server. Individual story requests may generate infrastructure logs under provider policies. Existing body caches are available offline only within 24 hours; older saved stories may require connectivity. Confirmed corrections update titles and withdrawn stories are marked unavailable. Saving is not used as preference feedback and does not sync between devices.
When you enable notifications
Notifications use an anonymous authentication session, installation identifier, push token, language, timezone, and night-alert preference. These support delivery and your selected settings. We do not request your name, contacts, or precise location. You can change notification permission in device settings. New-story notifications are available on Android and iOS. Alerts are skipped from 22:00 to 08:00 in your local timezone by default; you may allow night alerts in settings.
Article reports
Reports include the article identifier, issue category, your description, and interface language. We do not require an email address or phone number. Do not include passwords, credentials, phone numbers, or other personal information in a report. Reports are private and used to review articles. If you separately opt in and the report is eligible for automated review, your report and the article and its evidence are sent to OpenAI to investigate the issue and draft corrections. You may submit without agreeing; an operator will review the report. Legal/rights notices and detected credentials are routed to an operator before an AI call. This does not guarantee automatic detection of all personal data; do not include sensitive information.
Request limits and retention
To limit excessive reports, network addresses are transformed into daily rotating one-way values; original IP addresses are not stored in the app database. Resolved reports are cleaned daily after 90 days from submission. Unresolved reports, disputes and legally retained records are restricted and kept until the operator assesses the processing need and legal basis, rather than discarded automatically. Unresolved reports over 75 days and overdue legal-hold review dates raise operational alerts; the operator reviews necessity at least monthly. Once resolved and any hold is released, expired reports are deleted by the next cleanup. Request-limit values are kept within three days; unlinked deletion receipt hashes are cleaned after 30 days.
Service providers
Supabase stores news, reports, and notification settings; the database region is Seoul. When remote push is enabled, Expo, Google FCM, and Apple APNs process information necessary for notification delivery. Firebase Hosting serves the information website. Provider networks and notification systems may process data outside your country. The current app does not include an advertising SDK. Consented AI report review uses OpenAI services, which may process data abroad under their service terms and privacy policies. On Android, the Firebase messaging SDK may create and process technical app-installation identifiers and push registration information when the app starts. Delivery of news alerts follows your notification and quiet-hour choices. Provider-specific technical installation identifiers and security logs follow the providers’ retention rules.
Notification data and local copies
Notification-only anonymous accounts are deleted by daily cleanup after 180 days without authentication or app notification registration/preferences synchronization, together with installations, push tokens and delivery records. Existing installations start this inactivity window when the policy is applied. Tokens for registrations disabled for over 30 days are removed. Delivery records expire after 30 days; completed-delivery tokens and receipt identifiers are cleared after seven days. Notification delivery itself does not count as app activity. Report copies and retry material on the operator machine are retained up to 24 hours, and temporary write files up to one hour, then deleted when the machine runs cleanup. Unresolved originals remain on the server under the exceptions above; deleting a local copy does not close a report. Local cleanup resumes on the next run if the device or machine is off. Report-copy folders are excluded from future local backups; existing backups and provider security logs follow their respective expiry rules. Backups must be restored into isolation and deletion/retention decisions reapplied before use.
Deletion and other requests
In Settings > Your data, Delete notification account removes your anonymous authentication account and sessions, server interests, viewed markers, personal delivery history, installation identifiers, push tokens, notification preferences and delivery records. Confirmation requires connectivity; retry on the same screen if interrupted. New registrations are blocked once deletion starts. After deletion, a new account is created only when you explicitly enable alerts or consent to personalized delivery. Clear on-device interests, viewed markers and cache separately. An unlinked hash of a random deletion confirmation key and the completion time are retained for retries and removed by daily cleanup after 30 days. The original key stays on your device until cleanup completes. Reports submitted without signing in are not linked to your account; request report deletion at support@mintcinc.com with the receipt ID. Messages already sent to providers and provider security logs or backups cannot be immediately recalled.
Changes
We update this information and its effective date when advertising, account, notification, or data-processing features change, and provide consent flows where required. Effective date: 2026-09-18.