Privacy & data handling
Notification text never leaves your devices except as encrypted sync to another device you paired. We do not store your notification data on a server.
What never happens
- Notification titles, text, or metadata are not sent to analytics or third-party APIs.
- Notification content is not sent to the translation service (see App UI translation).
- Notification content is not uploaded to cloud storage operated by Noti-Clean.
- The only network path for notification data is encrypted sync between your paired devices.
On your device
- Notifications, rules, and settings live in a local database on that device.
- Encryption keys are generated and stored on the device — they are not uploaded.
- You choose which apps Noti-Clean may access via Android permissions.
App UI translation (optional)
If you use in-app language features, the translation service translates only Noti-Clean UI strings — labels, messages, buttons, and other app controls. It does not receive notification titles or body text from other apps.
Sync transport (broker)
- A minimal message queue passes encrypted envelopes between paired devices.
- The broker cannot read notification content — only opaque encrypted blobs.
- Envelopes expire automatically (typically within 48 hours).
- No user accounts, no authorization database, no advertising profiles.
- The transport layer is not aware of what your devices store or display.
Support messages (separate, optional)
If you contact support from the app, you explicitly choose what to send. That is unrelated to notification sync and does not include your notification history unless you add it yourself.
Formal privacy policy and terms of service are part of go-to-market legal work (#284). This page summarizes the technical model for MVP users.