Know the Plain-English guide
What Does This Privacy Policy Actually Say?
Every app promises it "takes your privacy seriously." The policy itself tells a more specific story — if you know which sections to read and which words are doing the heavy lifting.
What they collect
Look for the "information we collect" section and sort it into buckets: what you hand over (account details, content, payment info), what the app observes (location, device identifiers, usage behavior), and what it infers or buys (demographic profiles, data from brokers). Policies worded as "we may collect" are reserving the right to all of it. The honest signal is specificity — a policy that lists exactly what it takes is more trustworthy than one with a long "including but not limited to" list.
Who they share it with — the real question
This is the section that answers "is this app selling my data," and it is deliberately hard to parse. Watch the vocabulary:
- "We do not sell your personal information" — a meaningful statement, but read the next sentence.
- "Share with partners / service providers" — often means advertising networks, analytics firms, and data processors. Some state laws treat this kind of sharing as a sale, which triggers opt-out rights.
- "For business purposes" — a broad umbrella. Check whether marketing and ad targeting are listed under it.
- "In the event of a merger or acquisition" — your data is an asset that transfers to the buyer. Standard, but worth knowing.
If the policy names categories of third parties (advertisers, analytics, social networks) rather than hiding behind "trusted partners," that is at least honest — and it tells you exactly where your data goes.
How long they keep it
Find the data retention section. "We keep your data as long as your account is active" is normal. "We may retain anonymized data indefinitely" is also normal — and means deletion is never complete. The sharpest question: after you delete your account, what survives, and for how long? If the policy will not say, assume the answer is "plenty."
Your rights (and how hard they make them)
Depending on your state, you may have rights to access, delete, correct, and opt out of the sale or sharing of your data. A good policy explains how — a link, an email address, a settings page. A bad one buries the mechanism three clicks deep or requires you to "contact us" with no address given. Also check whether exercising your rights requires verifying your identity in ways that hand over more data.
Red flags to watch for
- "We do not sell" immediately followed by broad "sharing" with advertising partners.
- Location or contact-list collection with no clear product reason.
- No retention limits — data kept "as long as necessary" with no definition of necessary.
- Children's data collected without a clear age gate or parental consent process.
- Opt-outs that require mailing a letter or calling a phone number.
- A policy that changed recently with only a "last updated" date and no summary of what changed.
Wondering what an app does with your data?
Paste the privacy policy's URL and get a plain-English breakdown: what they collect, who gets it, whether it is sold, and how to delete it. Your first document is free.
Analyze a privacy policyCommon questions
Is this app selling my data?
Check the sharing, selling, and third-party sections. "We do not sell your personal information" is meaningful — but watch for sharing with "partners" for advertising, which can function like a sale under some state laws.
What's the difference between "share" and "sell"?
"Sell" usually means exchanging data for money or value. "Share" often covers giving data to ad or analytics partners without direct payment. Some state laws treat certain sharing as a sale, giving you opt-out rights either way.
Can I delete my data?
In many states you have a legal right to request deletion, and the policy should explain how. Watch for carve-outs — data kept for "security," "legal compliance," or "legitimate business purposes" — and anonymized copies kept indefinitely.
Does "we may collect" mean they actually collect it?
Usually yes, or they reserve the right to. Policies are written to cover everything the company might do. More useful: what they say they will not collect — specific limits are more trustworthy than broad permissions.
Not legal advice. This guide explains what the words in a privacy policy typically mean in plain English. Know the Fine Print is not a lawyer, and this is not legal advice. Privacy rights vary by state — for decisions with real consequences, talk to a licensed attorney.