Privacy Policy

Pocketbell is built to know as little about you as it can while still delivering your notifications. This policy covers the Pocketbell apps for iPhone, iPad and Mac, the Pocketbell service at api.pocketbell.dev, and this website. Pocketbell is made by SR WORKS LLC (“we”).

The short version

• You sign in with Apple, and we never ask for your name or email address.
• We keep the notifications your Sources send so they can show in your inbox, for as long as your plan’s history lasts, then we delete them.
• There is no advertising, no tracking, and no analytics in the apps.
• You can delete your account from the app at any time, and everything goes with it.

What we collect

Your account

When you sign in with Apple, we receive Apple’s stable identifier for you, and nothing else: Pocketbell requests neither your name nor your email address. We keep a hash of each session token your devices use, never the token itself.

Your devices

For each device you sign in on, we keep its name, its platform (iPhone, iPad or Mac), the push token Apple issues for it, a random identifier the app makes for itself on that device (so the device is listed once when you reinstall the app or sign in again; it says nothing about the device, and no other app can read it), and your settings for it, such as its sounds, quiet hours and which Sources it receives. If you use Live Activities, we keep the tokens Apple issues for them.

Your notifications

We store what your Sources send: titles, messages, links and their titles, action buttons, tags, image addresses, and the delivery details, such as priority, sound and schedule. We also record each notification’s state on each device: when it was sent, when the device reported it delivered, when it was read, acknowledged or answered, and on which device, with the answer given. For a webhook Source, we keep the most recent event it received, so the app can show it while you set up the Source.

Images are not stored by us. When one of your devices shows a notification’s image, our server fetches it from the address the sender gave and passes it on without keeping it. Your devices never contact the sender’s server for it, so it never sees their addresses or when you looked. If you save an image to Photos from a notification, the app asks for permission to add it there, and it goes only to your photo library.

Your Sources

We keep each Source’s name and settings. API keys are stored only as hashes, and webhook addresses carry long random secrets. A Source’s signing secret for callbacks is kept as is, because signing requires it.

Purchases

When you buy Pocketbell Pro, Apple handles the payment. We receive the signed transaction from the App Store, including the product, the dates, and whether it was renewed, refunded or canceled, so the server knows your plan. We never see your payment details.

Usage

For each month, we keep a count of how many notifications and questions your account sent, so your plan’s monthly limits apply even after the notifications themselves are deleted. It holds numbers only, nothing from the notifications, and is deleted with your account.

Quiet hours

If you set quiet hours, we keep the hours and your time zone, so Normal notifications can arrive silently at the right time.

Technical logs

Our servers keep short-lived technical logs, which include IP addresses, to operate the service and protect it from abuse.

What we don’t collect

No name, no email address, no contacts, no location, no advertising identifier, and no analytics or tracking of any kind in the apps. We don’t sell data, and we don’t share it with anyone for advertising.

How long we keep it

• Notifications are deleted once they are older than your plan’s history: 7 days on Free, or 90 days on Pro. A notification you delete has its text erased from our servers at once, with the earlier updates it replaced, which are otherwise kept with it for the same history.
• Devices are removed when you remove them in the app, and their push tokens are discarded when Apple reports them no longer valid.
• Sessions end when you sign out, or after 90 days unused.
• Your account and everything in it is deleted when you delete your account in the app (Settings, then Delete Account). At the same time we ask Apple to revoke Pocketbell’s access to your Sign in with Apple ID.

Backups of our database are kept for disaster recovery, for 14 days, so deleted data leaves them within about two weeks.

Who else is involved

• Apple provides Sign in with Apple, delivers every notification through the Apple Push Notification service, and processes App Store purchases. Each notification carries a short code made from your Sign in with Apple identifier (a one-way hash, not the identifier itself), so a device signed in to another account since doesn’t keep it.
• UpCloud hosts our servers, in the United States: the Pocketbell service in Chicago, and our status page at status.pocketbell.dev, which checks from outside that Pocketbell is up, in New York. The status page sees its visitors’ IP addresses as part of serving the page.
• Cloudflare serves this website and our DNS, and handles the email sent to support@pocketbell.dev. It sees visitors’ IP addresses as part of doing so. It also stores our database backups (Cloudflare R2), encrypted on our servers before they leave, with a key only we hold.
• Sentry receives reports of errors in our servers, so we can fix them: what went wrong and where in our code. They never include your notifications, your keys or anything identifying you or your devices. The apps send nothing to Sentry.

Nothing in Pocketbell’s delivery path uses Google or Firebase.

Security

Everything between the apps, the senders and our servers travels over HTTPS. API keys and session tokens are stored only as hashes. Every address our servers contact for you, such as a callback or an image, is checked so it cannot be used to reach private networks.

This website

pocketbell.dev sets no cookies and runs no analytics. It uses your device’s own fonts and loads nothing from other websites.

Your rights

You can see your notifications, Sources and devices in the app, and delete any of them, or your whole account, there. If you’d like a copy of your data, or have a question about it, email support@pocketbell.dev. Depending on where you live, including the EU, the UK and California, you may have further rights over your data, and you can use them the same way.

Children

Pocketbell is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes, we’ll update this page and the date at the top. For a significant change, we’ll tell you in the app as well.

Contact

SR WORKS LLC, support@pocketbell.dev