Privacy Policy
Last updated: October 19, 2026
This policy explains what personal data DynamiRSS collects when you use our website (rss.dynamiapps.com) and API (api.rss.dynamiapps.com), why, and what you can do about it. DynamiRSS is run by DynamiApps in Israel, which is the data controller. Questions: support@dynamiapps.com.
Websites that use DynamiRSS
Customers call our API from their own servers. For example, the DynamiRSS WordPress plugin runs on the customer's WordPress server. Those requests carry the customer's API key and search settings (search words, categories, channels, language, date filters, sort order, excluded words, page size and offset). They don't contain information about the people visiting the customer's website, and those visitors' browsers never contact our API.
Article images in API results are linked from the original publishers. If a customer's site shows them, visitors' browsers load them from those publishers, not from us.
What we collect and why
Your account
When you sign up, our login provider Clerk collects your email address and name. If you sign in with Google or GitHub, Clerk receives your basic profile (name, email and profile picture) from them. If you use a password, Clerk stores it in hashed form; we never see it. Clerk also records sign-in details such as IP address and device to keep accounts secure.
Why: to create and run your account and send account emails such as verification codes. Legal basis: performing our contract with you.
Your API key
We generate a personal API key the first time you open your dashboard. Our API server stores a one-way hash of the key together with your account ID and email address. The full key is also kept in your Clerk account, where only our server can read it, so your dashboard can show it again.
Why: to recognize your requests. Legal basis: contract.
Plan and usage
We store your plan, its expiry date and, for paid plans, the Freemius license ID. We count your requests per calendar month.
Why:to apply your plan's limits and show usage on your dashboard. Legal basis: contract.
Payments
Paid plans are sold and billed through Freemius. Freemius collects your payment and billing details; we never see your card number. Freemius tells us your plan, license and the email used for the purchase, so we can link the purchase to your account.
Why: to sell and manage subscriptions. Legal basis: contract, and legal obligations such as tax records.
API request and server logs
For each API request, our server logs the time, the endpoint, the search settings sent, the result status and, in some logs, your account ID or the IP address of the server that made the request. Logs don't contain your API key.
Why: to run the service, fix problems and prevent abuse. Legal basis: our legitimate interest in a secure, working service.
Public demo
The democan be used without an account. We use your IP address briefly, in memory, to limit how many demo searches can be made, and log the searches themselves as above. We don't store the IP address in a database.
Legal basis: legitimate interest in preventing abuse.
We don't use analytics or advertising tools, we don't sell personal data, and we don't use it for profiling or automated decisions.
How long we keep data
- Account, API key, plan and usage data: until you delete your account.
- Server and API logs: 30 days, then deleted automatically.
- Demo rate-limit data: at most an hour, in memory only.
- Payment records: kept by Freemius for as long as tax and accounting law requires.
When you delete your account, your Clerk account is removed, and your key, plan and usage are deleted from our API server straight away, so your key stops working. Entries about you in server logs are removed when those logs expire, within 30 days.
Service providers
We use these providers to run the service. They process data on our behalf or as independent services:
- Clerk (United States): sign-up, login, account emails and account storage.
- Freemius: checkout, payments, invoices and subscription management.
- DreamHost (United States): hosting for our website, API, database and logs.
- Google and GitHub: only if you choose to sign in with them.
International transfers
We are based in Israel, and our providers store data in the United States and other countries. Where data protection law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the provider's certification under the EU-US Data Privacy Framework.
Your rights
Depending on where you live (for example under the GDPR in the EU and UK, or Israel's Privacy Protection Law), you can ask to see the personal data we hold about you, correct it, delete it, receive a copy in a portable format, or object to or restrict how we use it.
- To delete your account and its data yourself, open the account menu, choose “Manage account” and delete it there. Cancel any paid subscription in the billing portal first.
- For anything else, email support@dynamiapps.com from your account email. We will reply within 30 days.
- You can also complain to your local data protection authority, or in Israel to the Privacy Protection Authority.
Children
The service is for developers and businesses and is not meant for children. You must be at least 16 to create an account. If you believe a child has given us personal data, contact us and we will delete it.
Changes to this policy
We will post any changes on this page and update the date at the top. If a change is significant, we will tell account holders by email before it takes effect.
Contact
DynamiApps, Israel. Email: support@dynamiapps.com. See also our Terms of Service.