Privacy policy
Effective 16 October 2026
epushy delivers chat-style messages from businesses and developers to your phone or browser. This page explains what data epushy handles, why, and who else touches it.
What we collect
- Your email address, to log you in with a one-time code. We email the code from noreply@epushy.com.
- Messages sent to channels, including the title, text, sender name, buttons and time, and the replies you send back.
- Channels you follow and, for channels you create, their names and a hash of their publish key.
- Your device's push token and platform (Android or iOS), so we can send you notifications.
- Technical data: your IP address appears in server logs and is used for rate limiting and abuse prevention. We store only a hash of your login session token.
We do not use advertising or analytics SDKs, we do not track you across other apps or websites, and we do not sell your data.
Who can see messages
Channels that nobody has claimed are open: anyone who knows the channel name can read and post to it. Do not send private information through an open channel. Channels claimed by an account require a publish key to post, but anyone who knows the channel name can still read it and subscribe to it.
Spam and abuse filtering
Messages are checked by automated rules on our own server that look for spam and phishing patterns. Messages judged to be spam are withheld or removed, and readers can report or block content in the app. Message text is not sent to any third party for this check. If we later add an AI-based check, we will update this page first and name the provider.
Services that handle data for us
| Service | Why | What it receives |
|---|---|---|
| Google Firebase Cloud Messaging | Deliver push notifications on Android and iOS | Push token, notification title and text |
| Apple Push Notification service | Deliver push notifications on iOS | Notification content via Firebase |
| Purelymail | Send login-code emails | Your email address and the code |
| DigitalOcean (Singapore) | Server hosting and storage | All data described above |
How long we keep it
We keep your account and messages while your account is active or the channel is in use. You can delete your account and the data tied to it at any time in the app, or by contacting us. Reports are kept so we can act on abuse. Backups and server logs are removed on a rolling basis.
Security
All traffic uses HTTPS. Login codes expire after 10 minutes and work once. Session tokens and channel publish keys are stored only as hashes. No system is perfectly secure, and open channels are public by design.
Your choices
- Turn notifications off in your phone's system settings, or unsubscribe from a channel by swiping it away in the app.
- Log out in the app, which removes your device's push token from our server.
- Delete your account in the app (menu → Delete account). This erases your login, devices, subscriptions and blocks, replies you sent while logged in, and any channels you created along with their messages. It cannot be undone.
- Report or block: press and hold a message to report it, or to block the channel it came from. Blocking stops its notifications. Messages reported by several people are removed automatically, and we review reports.
- Ask to access or correct your data by contacting us.
Children
epushy is not directed at children under 13, and we do not knowingly collect their data.
Changes
If we change this policy in a way that matters, we will update the date above and, where appropriate, tell you in the app.