Privacy
Last updated 4 August 2026
Viralah is a news reader. It works without an account, and most of what it remembers about you never leaves your phone. This page says exactly what is kept, where, and how to be rid of it. It is written to be read, not to be survived.
What stays on your phone only
These are stored in your browser and are never sent to us:
- The topics you picked, and any publishers you follow
- Your reading language and light or dark theme
- Your text size
- Your name, points, streak and badges on the You tab — unless you sign in, in which case see below
Clearing your browser data, or the app's storage, deletes all of it immediately. We cannot recover it, because we never had it.
What we collect if you sign in
An account is optional. It is only needed to like, save or comment. If you make one, we store:
| Data | Why |
|---|---|
| Your email address | To sign you in. We use a link rather than a password. |
| A display name | Shown next to anything you post. |
| Your likes, saves and comments | So they are still there on your next visit and on another device. |
| Your points and streak | So a lost phone does not lose your streak. |
| Session records | So you can be signed out everywhere if you ask. |
Comments are public. Anything you post can be seen by other readers and by whoever moderates the app.
Notifications
If you turn on notifications, your browser gives us an anonymous subscription address for your device. It is not your phone number, your email, or anything that identifies you by itself. It is used only to send the daily digest and, if you choose it, breaking news. Turning notifications off in the app deletes it.
Analytics
We count things, not people. We record which stories and topics get read, which language is chosen, and where readers stop — with no name, no email, no advertising identifier, and no cross-site tracking. We do not sell any of it, and there is no advertising network in this app.
News content and other websites
Viralah summarises stories from public news feeds and always links back to the publisher. Tapping Read full story takes you to their site, where their privacy policy applies, not ours. Video cards embed the publisher's own YouTube player, which loads only when you tap play — until then, YouTube is not contacted at all.
Who else sees your data
- Cloudflare hosts the app and its database, in the Asia-Pacific region.
- Resend sends the sign-in email, and therefore handles your address at the moment it is sent.
- Google Gemini writes the summaries. It is given the publisher's headline and extract. It is never given anything about you.
Nobody else. We do not sell or rent data, and there are no advertising or data-broker partners.
How long we keep it
Account data stays until you delete your account. Sign-in links expire in 15 minutes. Sessions expire after 30 days of not being used. Analytics are kept in aggregate and are not tied back to an account.
Your rights
Under Malaysia's Personal Data Protection Act 2010 you may ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it entirely. Email hello@viralah.my from the address on the account and we will action it within 21 days.
Children
Viralah is not aimed at children under 13, and we do not knowingly keep an account for one. If you believe we have, write to us and it will be deleted.
Changes
If this policy changes in a way that affects what we collect, the app will say so rather than quietly updating this page.