Privacy Policy
Last updated: 16 July 2026
Lert sends push notifications to your phone. This policy explains exactly what we store, why, and for how long. It is short because Lert collects very little.
No account. No email. No password. No tracking. Lert has no sign-up, so we never learn who you are. We don't use analytics or advertising SDKs, and we don't sell or share data with anyone.
What we store
| Data | Why | Kept for |
|---|---|---|
| Push token & platform | The address your phone gives us so notifications can be delivered, and whether it's iOS or Android. Identifies a device, not a person. | Until you delete the channel, or until we detect your device is no longer reachable (e.g. after you uninstall), at which point it's removed automatically |
| Channel name & emoji | Labels you choose, shown only to you. | Until you delete that channel |
| Notification content | The title, body and tag you send, so the app can show your history. | 7 days (free) / 30 days (paid), then deleted automatically |
| Send counts | Per-day, per-channel totals used to apply rate limits. | Up to 60 days |
| Sender IP address | Short-lived counters to rate-limit abuse of your endpoint and our servers. | Removed within ~24 hours |
The important one: notification content
When you POST to your endpoint, the message passes through our servers and is stored so it can appear in your history. Don't send secrets, passwords, or sensitive personal information through Lert. Treat a notification like a postcard: it's for "the deploy finished" or "you got an order", not for confidential data.
Your endpoint URL is a credential
Lert has no API keys — your endpoint URL is the authentication. Anyone who has it can send you notifications, so keep it out of public repositories and client-side code. If it ever leaks, open the app and regenerate it: the old URL stops working immediately.
Who we share it with
We don't sell or share your data. We use a small number of infrastructure providers purely to run the service:
- Apple (APNs) and Google (FCM) — deliver the notification to your device. This is unavoidable; it's how phone notifications work.
- Expo — routes our notifications to APNs/FCM.
- Vercel — runs the API.
- Supabase — stores channels and notification history.
Deleting your data
Deleting a channel in the app permanently removes it, its notification history, and the device links attached to it. Uninstalling the app stops delivery; your device token is then removed automatically the next time something tries to send to it and we learn the device is gone. Notification history always ages out on the schedule above, whether or not you do anything.
To erase everything associated with your device — including a channel you can't remove in the app — email support@lert.dev and we'll delete it. There's no account to close, because there was never one to open.
Children
Lert is a developer tool and isn't directed at children under 13. We don't knowingly collect data from them — and since there's no sign-up, we collect no age information at all.
Changes
If this policy changes materially we'll update the date at the top. Continued use after a change means you accept it.
Contact
Questions about privacy or your data: support@lert.dev