Privacy Policy

1. Introduction and scope

This Privacy Policy explains how Daily Lion ("Daily Lion", "we", "us"), operated from Israel, collects, uses, and shares personal data when you use the Daily Lion mobile app, the dailylionmedia.com website, and related services (the "Service"). It applies to all users worldwide. Some sections apply only in particular places, and each one says so in its own words.

The data controller, in the language of European privacy law, is Daily Lion, based in Israel and reachable at legal@dailylionmedia.com.

2. Information we collect

Data you provide directly

• Account data: your email address, and a display name if you set one. If you sign in using a third-party identity provider, the name and email that provider shares with us (some providers let you hide your real email address). We never receive or store your password for third-party sign-in, and email sign-in uses one-time codes rather than passwords.
• Which shows you follow: one switch per show, covering both your feed and your notifications. Following a show tells us what you want to listen to. It is not a political preference and we do not treat it as one.
• Support messages you send us by email.

Data collected automatically

• Listening activity: which episodes you play, your playback position, and whether you finished an episode. This is what lets you pick an episode up where you left off on another device.
• Your device's time zone, so a new-episode notification arrives in your morning rather than in the middle of your night.
• App usage analytics: screens viewed, feature usage, membership status, app version, device model, operating system and version, app language, and coarse events around sign-in, onboarding, playback, and chapter jumps. Collected via our analytics processor (see section 5). Your account identifier, email address, and display name are attached to these events so we can support your account.
• Push notification tokens: a device token used to notify you when a new episode is ready (only if you enable notifications).
• Diagnostic data: server request logs (IP address, timestamps, endpoints) retained briefly for security and debugging.

Data we do not collect

• Precise location, contacts, photos, microphone, health data, or advertising identifiers.
• We do not show ads and do not use third-party advertising SDKs.
• Your political opinions. We never ask which way you lean, and nothing in the Service holds or uses an answer to that question. Balancing the spectrum is our job, not a setting you operate.

Data from third parties

• If you choose third-party sign-in, that identity provider gives us your basic profile (name and email address).
• Our membership processor tells us whether your purchase or trial is currently active. It does not give us your payment details. We never see your card number or billing information — payments are processed entirely by the app store.

3. How we use your information

• Deliver the core Service: show you the episodes of the shows you follow, stream them, and sync your playback progress across devices.
• Send a notification when a new episode of a show you follow is published, and transactional emails such as sign-in codes.
• Send the optional weekly newsletter if you have asked for it. The newsletter is published and delivered through Substack, so your email address is added to our Substack mailing list. Every issue carries an unsubscribe link, and unsubscribing there is what stops it.
• Operate memberships and unlock full episodes for members.
• Understand aggregate product usage and improve the Service (analytics).
• Maintain security, prevent abuse, and comply with legal obligations.

We do not sell your personal data, use it for third-party advertising, or use it to train AI models.

4. Legal basis for processing, under European law

This section explains what European privacy law calls our lawful basis. It matters most if you are in the EU, the EEA, or the UK.

We do not process any special category of data under Article 9. The shows you follow tell us which episodes to put in your feed and nothing else: they are never shared with advertisers or data brokers, never used to profile you, and are deleted with your account.

5. Third-party services and data sharing

We rely on a small number of specialist companies ("processors") to run the Service. Each of them acts only on our instructions under a written contract, may use your data solely to provide their service to us, and may not use it for their own purposes or sell it. The categories of recipient are:

You can ask us who these companies are. We will identify the specific processors in any category, and provide links to their privacy policies, on request to legal@dailylionmedia.com.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger or acquisition (in which case this policy continues to apply to previously collected data until amended).

6. AI and machine learning disclosure

Daily Lion's episodes are generated by AI, and it is important to be precise about what data touches those systems:

• Episode scripts are written by a third-party large language model, which processes published commentary articles from the publications we read. It does not process your personal data.
• Episode audio is produced by a third-party multi-speaker speech model, which processes the episode script. It does not process your personal data.
• No personal data about you — not your identity, the shows you follow, or your listening history — is ever sent to any AI provider. This is possible because episodes are shared rather than personalized: every listener who receives an episode receives the same one, so nothing about you needs to reach an AI system in order to produce it.
• We use these AI services under paid business agreements whose terms prohibit the provider from using the content we send to train their models. Providers may retain content briefly for abuse monitoring under their standard terms.
• AI-generated scripts, transcripts and audio are stored by us and served to you as episodes. They are not fed back into any model, and your listening behaviour never influences what any model receives.
• We will identify the AI providers we use, and link to their terms, on request to legal@dailylionmedia.com.

7. Data retention

• Account data and settings: kept while your account exists; deleted when you delete your account.
• Listening activity: kept while your account exists; deleted with your account.
• Analytics events: retained by our analytics processor for 12 months.
• Website analytics: retained by Google Analytics for 14 months.
• Server logs: retained up to 30 days.
• Sign-in codes: expire within minutes; email delivery logs are retained briefly by our email processor.
• Backups: encrypted database backups roll off within 30 days, so deleted data can persist in backups for up to that period before it is permanently gone.
• Episodes themselves are not personal data and are kept indefinitely, including after you delete your account: the same episode belongs to every listener, so there is nothing of yours in it to delete.

8. Your rights

Deleting your Daily Lion account

You can delete your account, and all personal data associated with it, directly in the Daily Lion app: open the Account tab and choose Delete account. Nothing is emailed and nobody has to approve it.

If you have already uninstalled the app, or cannot reach it for any reason, email legal@dailylionmedia.com from the address on your account and ask us to delete it. We will delete the account and its data, and confirm to you when it is done. What is deleted, what is kept and for how long is set out in section 7.

Everything else

You can change your settings in the app at any time. To exercise any other right below, contact legal@dailylionmedia.com.

If you are in the EU, the EEA, or the UK

You have the right to access, rectify, erase, and receive a portable copy of your data; to restrict or object to processing; and to withdraw consent at any time (for example by turning off notifications for a show or in your system settings) without affecting prior processing. You may lodge a complaint with your local supervisory authority.

If you are in California

You have the right to know what personal information we collect and how it is used and shared; to delete it; to correct it; and to non-discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined by the CCPA/CPRA, and we do not collect sensitive personal information — so no "Do Not Sell or Share" opt-out is required. To exercise rights, use in-app account deletion or contact legal@dailylionmedia.com. We will verify requests via your account email. You may use an authorized agent with written permission.

If you are in Israel

Daily Lion is operated from Israel and is subject to the Protection of Privacy Law, 5741-1981 (as amended). You have the right to review personal data we hold about you and to request that it be corrected or deleted. Israeli law treats political opinions as sensitive information; the app does not ask for yours and does not hold one (see section 2). Contact legal@dailylionmedia.com.

If you are somewhere else

Canada, Brazil, Australia and many other countries give you equivalent rights of access, correction, and deletion. Contact us and we will honor them regardless of where you live.

9. Cookies and tracking technologies

The mobile app does not use cookies. It stores local data on your device (session tokens, cached episode audio, settings) necessary for the app to function. Our analytics uses a generated identifier and your device's vendor identifier, not your device's advertising ID. Our website uses Google Analytics to understand, in aggregate, how many people visit, which pages they read, and which buttons they click. Google Analytics sets first-party cookies on your browser for this measurement. We do not use it for advertising, and it does not follow you across other companies' websites on our behalf. We do not track you across other companies' apps or websites, and the app answers "no" to iOS App Tracking Transparency-defined tracking (no ATT prompt is required).

10. Data security

Data is encrypted in transit (TLS) and at rest in our database. Database access is restricted by row-level security policies, and server credentials are held as managed secrets rather than in code. No system is perfectly secure, but we follow industry practices and will notify you and relevant authorities of a data breach as required by applicable law (including within 72 hours to supervisory authorities where GDPR applies).

11. What is public

Every published episode has a public page on our website at dailylionmedia.com. Anyone with the link can read the episode transcript and play the free news roundup, without an account. These pages carry nothing about you: sharing an episode link does not tell the person you sent it to that you listened, when you listened, or anything else about your account.

12. International data transfers

Our primary database is hosted in Frankfurt, Germany (EU), and our API servers run in Amsterdam, Netherlands (EU), so the core of the Service keeps your data inside the EU.

We are based in Israel, which the European Commission has recognised as providing an adequate level of data protection, so transfers to us do not require additional safeguards. Some of the processor categories listed in section 5 (in particular analytics, push delivery, transactional email, newsletter publishing and delivery, membership management, app store billing, and AI generation) may process data in the United States or other countries. Where data leaves the EU/EEA to those processors, transfers rely on the European Commission's adequacy decisions or on Standard Contractual Clauses in our agreements with them.

13. Children's privacy

The Service is not directed at children under 13, and we do not knowingly collect personal data from them (or from under-16s in EU member states applying that threshold). If you believe a child has created an account, contact legal@dailylionmedia.com and we will delete it.

14. Do Not Track and opt-out signals

The app is not a web browser and does not respond to Do Not Track or Global Privacy Control signals; regardless, we do not track users across third-party services or sell data, so these signals would not change our behavior.

15. Changes to this policy

We may update this policy as the Service evolves. Material changes will be announced in the app or by email before taking effect, with the effective date updated above. Prior versions are available on request. The Terms of Service govern your use of the Service alongside this policy.

16. Contact

Daily Lion
Email: legal@dailylionmedia.com

Write to us at that address for any privacy question or to exercise any right in section 8. We respond to privacy requests within 30 days.