Last updated: 29 July 2026
ntfy NextGen is an open-source iOS client for the ntfy notification service, published by Legitimate LLC. This policy explains what the app does with your data.
The publisher operates no servers for this app, no accounts, and no analytics. We cannot see your topics, your messages, or how you use the app. There is no tracking, no advertising, and no data broker relationship. The app contains no analytics SDK and no crash reporter.
This is stored locally on your device, in a database inside a container shared with the app’s notification extension. Deleting the app deletes it.
To be specific about credentials: usernames and passwords you enter for a server are currently kept in that local database rather than in the iOS Keychain. The container sits inside the app’s sandbox and is covered by the device’s file encryption, but it is included in unencrypted local device backups. If that matters to you, encrypt your device backups. We intend to move credential storage to the Keychain.
Your ntfy server. The app connects to whichever server you tell it to — ntfy.sh by default, or
your own if you configure one. It sends the topic names you subscribe to, and any credentials you
entered for that server. What that server logs is governed by whoever runs it. If you self-host,
that is you. If you use ntfy.sh, see the ntfy project’s own policy.
Apple Push Notification service and Firebase Cloud Messaging. To deliver notifications while the app is closed, the app registers for a push token and sends it to Firebase Cloud Messaging, operated by Google, which relays through Apple’s Push Notification service. A push token is a device identifier. Message content routed this way passes through these services in transit. This is how push notification delivery works on iOS and cannot be avoided while push is enabled.
If you would rather not involve Firebase, you can self-host ntfy and use the app without push delivery, at the cost of instant notifications.
The app is not directed at children and collects nothing, so no children’s data is processed.
Material changes to this policy will be published at this URL with an updated date.
Questions, bug reports and privacy requests go through the support page, which lists the project’s Discord.