Privacy Policy

Effective October 25, 2026

Alertflare is an iPhone app and web API that delivers notifications you send from your own scripts and services to your own devices. It is run by Chris Siena, an individual based in New Jersey, USA ("we", "us"). This policy explains what we collect, why, who helps us process it, how long we keep it, and the choices you have.

In short: we collect only what is needed to deliver your alerts. We do not sell your data, show ads, or use tracking or analytics SDKs. You can delete your account and its data at any time from the app.

What we collect

Account information

Your email address.
Your password, stored only as a strong one-way hash (Argon2id, or bcrypt where Argon2id is unavailable). We never see or store it in plain text.
If you use Sign in with Apple: a stable identifier Apple gives us for your account, and the email Apple shares (which may be a private relay address). If you delete your account, we ask Apple to revoke Alertflare's access.

Devices

For each iPhone you sign in on: the device name you see in Settings, a push token used to deliver notifications to it, its time zone, its quiet hours, and which alerts you route to it.

Content you send

The notifications your sources send: title, body, priority, type, links, image links, item lists, and any extra data you attach, plus each notification's delivery status.
Your sources and their settings (name, sound, repeat and reminder settings).
API tokens for your sources, stored only as one-way hashes. The full token is shown to you once, when you create it.

Technical information

IP addresses, in our hosting provider's server logs and in short-lived rate-limiting records that protect sign-in and password reset from abuse.
Error reports from the app and the server when something breaks: the error, the app or server version, and basic device information (model, iOS version). Before a report leaves the device or server, tokens, passwords and request bodies are removed. Reports do not include your email address or the content of your notifications.

How we use it

To run your account, sign you in and keep it secure.
To deliver your notifications to the devices you choose, and to show their history and delivery status.
To send account emails you need: password reset codes, email confirmation codes, and notices that your password changed or your account was deleted. We do not send marketing email.
To prevent abuse and to find and fix bugs.

We do not sell your personal information, share it for advertising, or use it to build profiles.

Service providers

We use these companies to run Alertflare. Each one receives only what it needs for its part:

Namecheap (United States): hosts our server and database.
Expo (650 Industries, Inc., United States): relays notifications to Apple. It receives the push token and the notification's title, a shortened body, and its link and image address.
Apple: delivers notifications to your iPhone (Apple Push Notification service) and provides Sign in with Apple.
MailerSend (MailerLite, Lithuania and United States): sends account emails. It receives your email address and the email content.
Sentry (Functional Software, Inc., United States): error monitoring. It receives the scrubbed error reports described above.

How long we keep it

Your account, devices, sources and notification history are kept until you delete them or delete your account.
When you delete your account, its data is removed from our live database immediately. Copies can remain in our hosting provider's routine backups for a limited time until those backups are overwritten.
Rate-limiting records last minutes to hours. Server logs and error reports are kept for a limited time and then deleted.

If we introduce a fixed history limit (for example, a number of days of history for free accounts), we will update this policy and tell you in the app before it applies.

Your choices and rights

Delete your account: in the app, open Settings, then Delete account. This removes your account, devices, sources, tokens and notification history. You can also email us from the address on your account.
Access, correct or export: email us and we will respond within 30 days.
Stop notifications: turn them off for a device in the app, in iOS Settings, or by signing out.

Depending on where you live (for example California or the European Union), you may have additional rights, such as the right to know what we hold about you or to object to certain processing. Email us to use any of them; we will not treat you differently for doing so.

Security

All traffic uses HTTPS. Passwords and tokens are stored as one-way hashes, and access to the server is restricted. No system is perfectly secure; if we learn of a breach that affects your data, we will notify you as required by law.

Children

Alertflare is not directed to children under 13, and we do not knowingly collect their information. If you believe a child has created an account, contact us and we will delete it.

International transfers

Alertflare is operated from the United States. Your information is stored and processed in the United States and by the providers listed above, which may process it in other countries.

Changes

We will post any changes on this page and update the effective date. If a change is significant, we will also tell you in the app or by email before it takes effect.

Contact

Questions or requests: support@alertflare.app