Privacy
This notice covers the anypush app, the service at api.anypush.app (including the pages people see when they open one of your links) and this website. It is written to be read, not skimmed past: if something here is unclear, write to hello@anypush.app.
Who we are
anypush is a product of OID4Pay B.V. (“we”). We decide what happens to the data below, which makes us the “controller” under the GDPR.
OID4Pay B.V.Nassaukade 51-2
1052 CN Amsterdam, the Netherlands
KvK 42074824
hello@anypush.app
What is stored, and why
| What | Contents | Kept |
|---|---|---|
| Your account | Email address, the date you signed up, and until when you have Plus. If you sign in with Google, your Google account id. A display name, and a password (stored only as a bcrypt hash), only if you gave them when signing up before 21 October 2026. | Until you delete your account. |
| How you found us | Your answer to “How did you hear about us?”, if you gave one when signing up before 21 October 2026; the app no longer asks. We use it only to learn how people find anypush. | Until you delete your account, or sooner if you ask. |
| Hooks | Name, the secret token in its link and address, your quiet-alert setting, when it last received something. | Until you delete the hook or your account. |
| Messages | Title, text, link, priority, whether it came from the web, an email or a quiet alert, and when. | 7 days, or 30 days while you have Plus. Then deleted automatically. Sooner if you delete it. |
| Duplicate check | The id a sender may attach to a message (Idempotency-Key), or an email’s Message-ID, so the same message is not delivered twice. | 24 hours. |
| Devices | Type (phone or computer), name, push token, app version, when it was last seen. | Until you remove the device or delete your account. |
| Sign-in codes | A hash of the 6-digit code we email you to sign in, and how many times it was tried. | Until it is used, and at most 10 minutes. |
| Sign-in sessions | A hashed refresh token per signed-in device. | Signing out ends the session at once; the hashed token itself expires after at most 30 days. |
| Preferences | Settings such as quiet hours, and your timezone, so quiet hours follow your clock. | Until you delete your account. |
| Purchases | For each Plus pass: the Google Play order id, which pass, when you bought it, and whether it was refunded. | 7 years, because Dutch tax law requires it. Also after you delete your account. |
Your account, hooks, messages, devices, sessions and preferences are what the service needs to deliver the notifications you asked for. The legal basis for them is the contract between you and us (GDPR art. 6(1)(b)). Only an email address is needed to make an account, and without it we cannot make one: either you type it and we email you a code to check it is yours, or it comes from your Google account. Quiet hours are optional.
The answer to “How did you hear about us?” rests on our legitimate interest in knowing which places bring people to anypush (GDPR art. 6(1)(f)). It is optional, we say why we ask next to the question, and if you object we delete it.
Signing in
“Continue with email” sends a 6-digit code to the address you type. MailOdds, our mail provider, sends that email for us. The code works once, for at most 10 minutes, and we keep only a hash of it.
“Continue with Google” lets Google confirm who you are. Google then tells us your email address, whether Google has verified it, and a Google account id; we use them only to sign you in, and receive nothing else from your Google account. For the sign-in itself, Google decides what it collects and is responsible for it under its own privacy policy.
To stop anyone guessing codes, the server counts sign-in attempts per email address and per IP address. The counts are kept in memory only, for at most an hour, and never written down (legitimate interest in keeping accounts safe, GDPR art. 6(1)(f)).
Messages other people send you
Anyone who has one of your hook links or addresses can send you a message: a person on the page your link opens, a script, or an email. If you send a message to someone’s hook, this section is about you.
- What is kept is what was sent: on the page, an optional name and note and whether it is urgent; from a script, its title, text and link; from an email, its subject and plain text. We do not keep the sender’s email address, attachments or IP address.
- Only the owner of the hook sees it, in their inbox and as a notification. It is kept for 7 days (30 on Plus), then deleted automatically.
- We deliver it because the sender chose to send it to that person. The legal basis is our legitimate interest, and the owner’s, in delivering exactly what was sent (GDPR art. 6(1)(f)).
- Message content is used only to deliver it. We do not read it, analyse it or use it for anything else. Please do not use anypush for sensitive information such as health details: it is a notification service, not a medical or emergency service.
- A sender can use the rights below by writing to hello@anypush.app.
The page your link opens sets no cookies and runs no scripts.
Each hook has its own email address. Email sent to it is received by MailOdds, our mail provider. Our server reads it from there over IMAP, keeps the subject and the plain-text body as a message, and then deletes the email from the mailbox, so neither the email nor its attachments are kept. An email that cannot be delivered yet, because a hook received too much at once, stays in the mailbox until it is delivered or found to be undeliverable, and is then deleted.
Email that is not addressed to a hook, such as a question to hello@anypush.app, stays in our mailbox until we have dealt with it, and at the latest 12 months. We use it only to answer you (legitimate interest, GDPR art. 6(1)(f)).
Logs
The server logs each request’s method, route, status and duration. For the events it handles, it also logs internal ids (of accounts, hooks and messages), Google Play order ids, and error messages. It does not log IP addresses or what a message says. Logs are kept for at most 30 days. We keep them to run the service and keep it secure (legitimate interest, GDPR art. 6(1)(f)).
Crash reports, only if you agree
The app asks before it sends crash reports. If you agree, Firebase Crashlytics (Google) receives a report when the app crashes or runs into an error: the error, your device model, OS and app version, and a random installation id that Crashlytics creates. Google keeps crash reports for 90 days. Reports from before you agreed are deleted, never sent.
The legal basis is your consent (GDPR art. 6(1)(a)). You can withdraw it at any time in Settings → Turn off crash reports; reports already sent stay lawful. There is no analytics or advertising SDK in the app.
On your phone
The app keeps your sign-in in Android’s encrypted storage, your settings and choices (such as the answer about crash reports), and a copy of your recent messages so the inbox opens without a connection. Signing out deletes the sign-in and the copy of your messages; uninstalling the app deletes everything it stored.
Purchases
Plus is sold as prepaid passes in the Android app, through Google Play. Google Play takes the payment, and we never see your card details. With the purchase, the app gives Google Play your anypush account id (a random id, not your email address), so the pass is credited to the right account. From Google Play we receive the order id, which pass you bought, when, and whether it was later refunded. For the payment itself, Google decides what it collects and is responsible for it under its own privacy policy.
We keep these purchase records for 7 years, because Dutch tax law requires it. That includes after you delete your account. They contain no message content. The legal basis is the contract, to give you Plus (GDPR art. 6(1)(b)), and our legal obligation to keep the records (GDPR art. 6(1)(c)).
Who else handles your data
- Google (Firebase Cloud Messaging) delivers notifications to Android phones. The title and text of a message pass through Google to reach your phone.
- Google (Sign in with Google) confirms who you are when you choose “Continue with Google”.
- Google (Google Play) takes the payment when you buy a Plus pass, and tells us about the purchase.
- Google (Firebase Crashlytics) receives crash reports, only if you agreed to them.
- Cloudflare sits in front of the server and hosts this website. It processes IP addresses briefly, to deliver pages and to protect against abuse. It may also ask your browser to report failed connections to it (Network Error Logging).
- MailOdds, our mail provider, receives the email sent to anypush.app addresses and sends the sign-in codes.
Google (Google LLC) and Cloudflare (Cloudflare, Inc.) may process data in the United States. They do so under the EU–US Data Privacy Framework, and under the European Commission’s standard contractual clauses where that does not apply; ask us for a copy. anypush sells no data to anyone and shares it with no one else.
Where it is stored, and how it is kept safe
Our own server in the Netherlands stores everything in the table above. Every connection to it is encrypted (TLS). Passwords (older accounts only) are stored only as bcrypt hashes, and sign-in codes, sign-in tokens and link tokens only as hashes where we do not need to show them back to you. Daily backups are readable only by the service and are kept for 7 days, so deleted data leaves the backups within 7 days.
This website
This website is hosted on Cloudflare Pages. It sets no cookies and has no analytics or trackers. Its scripts run the demo on the front page (including the buzz sound, loaded from this website) and the light/dark switch, inside your browser, and send nothing anywhere. If you pick light or dark, your browser remembers that choice in its own storage; it never leaves your device. Cloudflare processes your IP address briefly, to deliver the pages and to protect against abuse.
Your rights
- Access and portability: Settings → Download my data, in the app, gives you everything stored about your account in a machine-readable file, purchase records included.
- Deletion: Settings → Delete account. It is immediate and permanent, apart from the purchase records, logs and backups described above. See also how to delete your account.
- Correction, restriction, objection, withdrawing consent, or a question: write to hello@anypush.app, from your account’s email address if it is about your account. You get an answer within one month. Withdrawing consent does not make what happened before unlawful.
- A complaint: you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or the one where you live.
anypush makes no automated decisions about you. Limits such as how many messages a hook may receive per minute only slow a hook down for a moment.
Children
You must be 16 or older to have an anypush account: the age Dutch privacy law sets (UAVG art. 5). anypush is not directed at children under 16.
Changes
When this notice changes, the date at the top changes with it. If a change affects what we do with your data, we tell you in the app before it applies. Earlier versions are available on request.