How Noti2Hook handles data.

Data the app can access

After the user grants Notification Access, Noti2Hook can access notification title, text, source application package, and time, including while the app is closed. The app does not request SMS permissions and is not registered as an Android Share target.

When configuring a rule, Noti2Hook locally lists user-installed apps that expose a launcher activity. System and preinstalled apps are filtered out. The list is not transmitted. Only package names selected for a rule are stored locally.

How data is used and shared

Events are evaluated against forwarding rules on the Android device. When a rule matches, selected event content is sent directly from the device to the HTTPS webhook configured in that rule. Noti2Hook does not operate a relay server and does not receive a copy of notification content. Webhook operators process received data under their own terms and privacy practices.

A fresh installation has no free forwarding time. When the user explicitly chooses to watch a rewarded ad, a successfully earned reward unlocks forwarding for three days. The access start and expiry times are stored locally. A user may repeat this after expiry or during the final 24 hours of an active pass. Google Play Billing processes the optional lifetime purchase and returns ownership status to the app.

Google Mobile Ads may automatically collect and share IP address, product interactions such as app launches, taps, and ad views, diagnostic information, and device or account identifiers for advertising, analytics, and fraud prevention. Google User Messaging Platform requests and stores consent required for the user's region and provides privacy options when required. Noti2Hook removes Android advertising-ID and AdServices permissions from its merged manifest. Notification content, rules, webhook URLs, credentials, delivery history, and Google Play purchase data are not sent to the advertising service.

Local storage and security

Rules, credentials, queued event payloads, delivery history, rewarded-access times, and cached purchase state are stored locally. Sensitive values are encrypted using AES-GCM with key material held by Android Keystore. Android cloud backup and device-transfer backup are disabled. Network security configuration blocks cleartext HTTP.

Users can create a password-encrypted portable backup of rules and selected preferences. It excludes license data, notification previews, delivery history, device ID, and gateway pairing secrets.

Local delivery records are retained for the period selected by the user. Users can delete all local data from Settings or by uninstalling the app. Deleting app data or reinstalling removes a local rewarded pass and does not create new free time. Lifetime ownership can be restored from Google Play when the purchasing account is available.

Accounts, advertising, and analytics

Noti2Hook does not create a developer-operated account and does not include a developer-operated analytics or crash-reporting SDK. Google Mobile Ads is used only for the optional, user-initiated rewarded-ad flow. Purchase-related data is processed by Google Play under Google's privacy policy.

User controls

Forwarding remains unavailable until the user earns a three-day pass or owns lifetime access, accepts the in-app disclosure, grants Notification Access, and enables forwarding. Notification Access can be revoked in Android Settings. Each rule can be disabled or deleted independently. Ad privacy options are shown when required.

Children

Noti2Hook is not directed to children under 13.

Contact