Privacy Policy

This Privacy Policy explains how KottuRoti (“we”, “us”) collects, uses, and protects your information when you use our website at kotturoti.app and our mobile applications (the “Service”). KottuRoti is a news aggregation service: we gather publicly available news from independent Sri Lankan sources and summarize it so it is easier to read in one place.

1. Information we collect

Account information. If you create an account, we collect your email address and a securely hashed password, along with your role and account settings.

Preferences. We store choices such as your preferred reading language (English, Sinhala, or Tamil) so we can show you the right content.

Usage and device data. Like most services, we may collect device and app version, screens and stories viewed, categories, search terms, subscription interactions, notification interactions, performance timings, and crash diagnostics. Share links use a random token to measure who created a link and how many visits or app opens it produced. IP addresses used for share-visitor counting are irreversibly hashed before storage; we do not put account identity in a shared URL.

We do not knowingly collect information from children, and we do not sell your personal information.

2. Personal information in news reports

The news stories in the Service come from third-party publishers, not from you. Public reporting may nevertheless contain personal information about named individuals. For a correction or privacy concern, contact us with the article address and the information concerned. Our handling of news content is also described in our Terms & Conditions.

3. How we use your information

We use the information we collect to provide and maintain the Service, to authenticate your account, to remember your preferences, to deliver notifications you have opted into, to keep the Service secure and prevent abuse, and to improve how the Service works. Recent story reads and bookmarks are used to estimate topic interests and modestly rank the optional hourly news notification. Your notification language, selected categories, quiet hours, and opt-outs continue to apply.

4. AI and automated processing

We use Amazon Bedrock for news embeddings and configured language-model providers, including Bedrock or Groq, for selected AI-assisted summaries. On-demand translation uses Google Cloud Translation. This processing is applied to news content from third-party sources, not to your personal account data.

5. Cookies and similar technologies

We use cookies or similar local storage that are necessary to keep you signed in and to remember your preferences. You can control cookies through your browser settings, though some features may not work without them.

On the public website, Meta Pixel uses cookies or similar identifiers to record page visits and App Store link interactions, and help us measure whether Facebook and Instagram ads lead people to KottuRoti. This measurement is not enabled in local development or private administration pages.

6. Service providers and sharing

The Android app uses Google Firebase Analytics, Crashlytics, Cloud Messaging, and Performance Monitoring to measure feature usage, diagnose crashes, deliver notifications, and monitor speed and reliability. We send an internal account identifier rather than your email address and do not send passwords, authentication tokens, or Kottu AI message text. Meta Platforms provides Meta Pixel for website-visit and advertising attribution measurement. See the Meta Privacy Policy for information about how Meta processes data. AdSense account-verification metadata does not serve ads. Google advertising can use cookies and similar identifiers to deliver and measure ads; see how Google uses information from partner sites.

We share information only with service providers that help us run the Service — such as our cloud hosting and AI infrastructure providers — and only as needed for them to perform their services. We may also disclose information where required by law or to protect the rights, safety, and security of KottuRoti and its users. We do not sell your personal data to advertisers.

7. Data retention

We keep your account information for as long as your account is active. If you close your account or ask us to delete your data, we will delete or anonymise your personal information unless we are required to retain it by law.

8. Your rights

You may request access to, correction of, or deletion of your personal information, and you may withdraw consent or object to certain processing. You can permanently delete your account and all associated data directly in the mobile app (Account → Delete account), or email us at hi@joel.lk.

9. Security

We take reasonable technical and organisational measures to protect your information, including hashing passwords and restricting access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

11. Governing law

This Privacy Policy is governed by the laws of the Democratic Socialist Republic of Sri Lanka.

12. Contact

For any privacy questions or requests, email us at hi@joel.lk.

See also our Terms & Conditions.