Notified — Privacy Policy
Last Updated: August 5, 2026
Local-only Your data never leaves your device.
Overview
Notified is an on-device notification history app that keeps an encrypted archive of your messaging notifications. This policy explains what data we handle, why, and how we protect it.
1. Data We Handle
1.1 Notification Content
- What: Sender name, message text, app name, and timestamp from messaging notifications (WhatsApp, Signal, Telegram, Messages, etc.).
- When: Only from apps you explicitly whitelist.
- Storage: Encrypted locally using SQLCipher (AES-256). Never transmitted anywhere.
1.2 App Preferences
- What: Whitelisted apps, lock method, auto-lock timeout, retention period, theme.
- Storage: Local Jetpack DataStore. Never transmitted.
1.3 Encryption Key
- What: AES-256 cryptographic key for the notification database.
- Storage: Android Hardware Keystore (TEE/StrongBox). Cannot be extracted.
1.4 PIN Hash
- What: PBKDF2-hashed PIN with unique salt (if PIN lock is enabled).
- Storage: Local only. PIN is never stored in plaintext.
2. Data We Do NOT Collect
- No personal identity — no name, email, phone number, no accounts or login.
- No network transmission — no data is ever sent to any server or third party.
- No analytics — no Google Analytics, Firebase, Crashlytics, or similar.
- No advertising — no ads, no ad networks, no data sharing.
- No contacts or media — no access to contacts, SMS, camera, microphone, photos, or files.
- No tracking — no location, no browsing history, no usage tracking.
3. How Data Is Used
| Data | Purpose | Shared With |
|---|
| Notification content | Encrypted history, search, timeline | Nobody |
| App preferences | Personalization | Nobody |
| Encryption key | Database encryption | Nobody |
| PIN hash | Unlock verification | Nobody |
4. Third-Party Services
Notified uses no third-party services. No cloud backends, no analytics, no advertising, no crash reporting, no social SDKs. The app operates entirely on your device.
5. Permissions
- Notification Access — reads notification content from your whitelisted messaging apps only.
- Biometric (USE_BIOMETRIC) — optional fingerprint/face lock. No biometric data is stored by the app.
- Foreground Service — keeps the listener alive on devices with aggressive battery management.
- Query All Packages — displays installed apps in the whitelist picker. No app usage data is collected.
- Post Notifications — required for the foreground service notification on Android 13+.
6. Security
- AES-256 encryption via SQLCipher for all notification data.
- Hardware Keystore — encryption key sealed in TEE/StrongBox.
- No backups — Android Auto Backup and device transfer explicitly disabled.
- Screenshot protection — FLAG_SECURE prevents screenshots of app content.
- PIN hashing — PBKDF2-HMAC-SHA256, 10,000 iterations, unique random salt.
7. Data Retention
- Configurable: 3 days, 7 days, 14 days, 30 days, 3 months, 6 months, 1 year, or forever.
- Auto-fade: Daily background job deletes old notifications. Pinned items are exempt.
- Manual purge: "Purge the vault" deletes everything and rotates the encryption key.
- Uninstall: Permanently deletes all data.
8. Children's Privacy
Notified is not directed at children under 13. We do not knowingly collect data from children.
9. Changes
We may update this policy. The "Last Updated" date will reflect the most recent revision. Continued use after changes constitutes acceptance.
10. Contact
Email: privacy@notifiedapp.com