Privacy Policy

NotifyBell — Last updated: April 14, 2026

Overview

NotifyBell ("the App") is a smart notification platform for businesses and teams developed by OS Labs Inc. This policy describes how we handle your data.

Data We Collect

• Account Information — Email address, display name, and organization identity provided through Microsoft Entra ID (Azure AD) sign-in.
• Device Information — Device model, OS version, and Firebase Cloud Messaging (FCM) push token for delivering notifications.
• Notification Data — Notification content, delivery status, acknowledgment timestamps, and read state.
• Usage Data — Basic interaction logs such as login timestamps and notification actions (acknowledge, dismiss).

How We Use Your Data

• To authenticate your identity and manage your account.
• To deliver push notifications to your registered devices.
• To track notification acknowledgment for critical and emergency alerts.
• To maintain and improve the service.

Data Storage & Security

NotifyBell is a self-hosted platform. All data is stored on infrastructure controlled by your organization. Data is encrypted in transit using TLS 1.2+ via Cloudflare. On Android, authentication tokens are stored in app-private storage (Android DataStore), which the operating system isolates from other apps; they are excluded from cloud backup and device-to-device transfer. In the browser they are held in localStorage. Tokens are not additionally encrypted at rest on the device.

Third-Party Services

• Microsoft Entra ID — Used for single sign-on authentication. Subject to Microsoft's Privacy Statement.
• Firebase Cloud Messaging (Google) — Used to deliver push notifications. Subject to Google's Privacy Policy.
• Cloudflare — Used for CDN and DDoS protection. Subject to Cloudflare's Privacy Policy.

Data Retention

Notification data is retained for as long as your organization maintains the NotifyBell instance. Signing out releases your device's push token, so that device stops receiving alerts for your account.

Deleting Your Account

You can permanently delete your account and its associated data from within the app: Settings → Delete account. You will be asked to type your username or email to confirm. This removes your account, devices and push tokens, notifications and delivery history, sessions, and content you authored, and it cannot be undone.

You may also request deletion by emailing [email protected] from your account's email address. Records your organization is required to retain for audit or legal purposes may persist in its own logs, which are under your organization's control rather than ours.

Your Rights

You may request access to, correction of, or deletion of your personal data by contacting your organization's NotifyBell administrator. As a self-hosted platform, data control resides with the hosting organization.

Children's Privacy

NotifyBell is designed for business use and is not intended for children under 13. We do not knowingly collect data from children.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date.

Contact

For privacy questions, contact:
OS Labs Inc.
Email: [email protected]