Privacy Policy

What we collect

• Account. Your email address and name, and how you sign in: a hashed password, Sign in with Apple, or both.
• Sign in with Apple. If you use it, the identifier Apple assigns you for pushr and the token Apple issues when you sign in. See below for what Apple shares.
• Sign-in sessions. The IP address and device type of each signed-in session, used to keep your account secure.
• Devices. A push token and device name for each iPhone you register, so pushes reach it.
• Your content. Notifications you send (titles, bodies, links, images), replies to action buttons, source-app names and uploaded logos.
• Purchases. Whether you have an active Pro subscription. Apple handles payment; we never see card details.

We don't collect location, contacts, advertising identifiers or analytics about how you use the app.

How we use it

Only to run pushr: to authenticate you, deliver and display your notifications, send action-button callbacks to the URLs you configure, enforce plan limits and restore purchases. We email you only about your account, such as confirming your address or resetting your password. We don't send marketing email.

Sign in with Apple

When you sign in with Apple, Apple confirms who you are and gives us an identifier that's unique to pushr. We never see your Apple Account password. The first time you sign in, Apple also shares the name and email address you choose to share.

If you choose Hide My Email, we only receive a private relay address. Apple forwards our account emails to your real inbox, and you can turn forwarding off at any time in your Apple Account settings.

You can link Apple to an account you created with email, or unlink it, in Settings → Account. When you delete your account, we also revoke pushr's Sign in with Apple access with Apple. You can stop using Sign in with Apple for pushr yourself on your iPhone under Settings → your name → Sign-In & Security → Sign in with Apple.

Who processes it

• Convex. Hosts the pushr backend and database.
• Apple. Verifies your identity when you use Sign in with Apple, and relays email to Hide My Email addresses.
• Resend. Sends account emails, such as email confirmation and password reset.
• Apple Push Notification service and Expo. Carry notifications to your devices.
• RevenueCat. Verifies App Store subscriptions and links them to your account.

If you point the app at a self-hosted backend, your notifications go to that server instead and never reach ours.

How long we keep it

Notification history is kept for 7 days on the free plan and 90 days on Pro, then deleted automatically. Account data is kept until you delete your account.

Deleting your data

Delete your account anytime in the app under Settings → Delete account. This permanently removes your account, source apps, devices, notification history and sign-in details, and revokes Sign in with Apple if you used it. Deleting your account doesn't cancel an App Store subscription; manage that in your Apple Account settings.

Children

pushr isn't directed at children under 13, and we don't knowingly collect their data.

Changes and contact

If this policy changes, we'll update the date above. Questions or requests: privacy@pushr.sh.