Privacy Policy

Overview

Notixy is an iPhone app that delivers notifications from businesses and people you choose to hear from. It is an independent project made and operated by an individual developer, not a company. Notixy has no user accounts: it does not collect your name, your email address or your phone number. It has no advertising, no tracking across apps, no analytics SDKs, and does not sell data. Because it delivers notifications, a Notixy server does process the limited data listed below.

What Notixy processes

You are identified by an anonymous random install ID and a generated user key, not by who you are. The data processed is:

• the install ID, and the Apple push token of your device;
• your user key, generated by the app;
• an optional nickname, if you choose one;
• your preferred language, and your quiet hours if you set them, with the time zone you chose and the categories you allow during them;
• your subscriptions: which senders, which categories, an optional daily limit, whether a sender is paused and until when, whether that sender may see your nickname, and an opaque reference a sender may attach to your subscription;
• a short-lived random token when you open “Show my QR” (valid for 6 minutes, single use, stored only as a hash), and a request from a sender that scanned your code, kept until you answer it or it expires after 7 days;
• the content of the notifications senders send you;
• your responses to notifications, if a sender offers any;
• reports you file about a sender or a message.

Notixy does not use any of this for advertising, profiling or analytics.

The camera is used only when you open the code scanner, and only on your device, to read a QR code. Nothing from the camera is stored or sent; only the text of a Notixy code you scan is used.

How long notifications are kept

The content of a notification is deleted from our servers automatically, by category:

• time-sensitive messages: after 15 minutes;
• promotions and critical alerts: after 7 days;
• appointment and informational messages: after 30 days.

Your responses and your reports are kept as long as needed to handle them, then deleted. Your device keeps its own notification history for 30 days, and a message you delete waits in Trash on the device for 7 days before it is removed; you can delete messages sooner in the app.

What senders see

Senders are kept in a separate Notixy service, and Notixy’s server tells that service when you subscribe or unsubscribe. For each of your subscriptions, that sender sees:

• a random subscription ID, which is not your ID, when you subscribed and which categories you enabled;
• the reference it attached to your subscription, and your responses to its own messages;
• whether each of its messages was delivered to your device (never whether you read or deleted it);
• your nickname, but only if you switched on “Show my nickname to this sender” for it (off by default), or if that sender requires nicknames, in which case the app tells you before you subscribe and you cannot hide it while you are subscribed.

Senders never get your phone number, your name, your email address or your device token, and are not told your quiet hours, daily limits or pauses. Your ID is not shown to senders either, except to a sender that scans your “Show my QR” code, because the code carries it. Scanning a sender’s QR code or answering a sender’s request is your own consent, and the sender gets nothing more than the list above. When you unsubscribe or delete your data, the sender’s service is told that the subscription ended; anything a sender has already received is kept by that sender, not by Notixy.

Service providers

Notixy uses Apple’s Push Notification service (APNs) to deliver notifications to your device; Apple handles that under Apple’s own Privacy Policy. Our servers and database run with hosting and database providers that process data on our behalf. Providers are described here by what they do rather than by name, so that changing one is a deployment change and not a rewrite of this page. Like any server, they receive the IP address of the device making a request and may log standard web-server data as part of normal operation.

What the app contacts directly

• Notixy’s servers: for everything above. Sender icons are loaded from Notixy’s servers too, not from a sender’s own website, so a sender cannot learn your IP address from its icon.
• Cloudflare and api.country.is: each time the app starts, it asks Cloudflare (cloudflare.com) which country your IP address is in and, if that fails, asks api.country.is, so that it can choose the right Notixy server for your region. Those services see your IP address and the request itself, as any web service does, and receive nothing else from Notixy. The app keeps only the resulting country code on your device. It uses no location permission.
• The Notixy proxy, only if you turn on the experimental “Route via proxy” setting for networks where Notixy is blocked (off by default). The app’s requests then go through a forwarding server run for Notixy on their way to the Notixy servers. It forwards them unchanged, so while a request passes through it can see what the app would otherwise send directly, including your device’s access token; it stores no accounts, subscriptions or messages, and like any server it may log standard request data such as IP address and time.

No advertising, no tracking

Notixy contains no advertising, no tracking across apps or websites, no analytics or crash-reporting SDKs and no advertising identifiers. We do not sell your data and do not share it with anyone for their own purposes.

This website

This site is static HTML with no cookies, no analytics, and no tracking scripts of any kind. The one page that sends anything anywhere is the feedback form, and it sends what you type into it — your message, an email address if you chose to leave one, and which app the message is about. That submission is handled by the site’s hosting provider, which forwards it through a third-party messaging service to a private chat the developer reads; the message, the optional email address, and the app name all sit with that third party. Messages stay in that chat until deleted by hand — nothing removes them automatically. None of it is used for anything other than replying to you.

Deleting your data

In the app, open Settings and choose Delete my data. This removes your ID, nickname, subscriptions, settings, messages, responses and reports from our servers immediately, wipes the app’s data on your device and gives the app a new, empty ID. You can also ask through the feedback form. Deleting the app from your device removes the history stored on that device, but does not by itself remove server-side data — use Delete my data first.

Who is responsible

Notixy is made and operated by an independent individual developer, not a company. The feedback form is the way to reach them.

Children

Notixy has no sign-up and collects no name, email address or phone number from anyone, of any age. The anonymous identifiers described above are processed in the same way for every user, and nothing is collected to profile or advertise to anyone, child or adult. Notixy is not directed to anyone under 18 — the app’s age rating is 18+ — and we do not knowingly collect personal information from anyone under that age. If you believe the data of someone under 18 should be removed, use Delete my data in the app or the feedback form.

Changes to this policy

If this policy changes, the update is posted here with a new “Last updated” date above.

Contact

Questions about this policy: the feedback form.