Privacy
Last updated September 29, 2026.
bonk is built to know as little about you as possible.
What we store
For each phone with the app installed:
- its push token, the address Apple or Google use to reach the app;
- its platform (iOS or Android);
- one-way hashes of its URL secret and of a key only the app knows;
- when it registered and when the app was last opened.
We don't collect names, email addresses, phone numbers, contacts, or location. There are no accounts.
To enforce rate limits, the server keeps IP addresses in memory for about a minute. They aren't written to disk.
Your messages
When someone sends a notification to your URL, the message passes through our server to Expo's push service (expo.dev/privacy) and then to Apple or Google, who deliver it to your phone. We don't store or log message contents. Messages aren't end-to-end encrypted, so don't send anything you wouldn't want those services to handle.
Deleting your data
Regenerating your URL in the app makes the old one stop working at once. Uninstalling the app stops delivery; its record is deleted the next time a notification to it fails, or after 90 days in which the app wasn't opened and no notification reached it.
Website analytics
This website uses Umami to count visits and clicks (such as App Store links and copied examples). Umami doesn't use cookies or collect personal data. The app contains no analytics.