Privacy Policy

Last updated: 9 April 2026

Who we are

DillAlerts is a push notification service for Apple devices, operated from Stamford, United Kingdom, as part of the Mustard Tees product suite. When this policy refers to "we", "us", or "our", it means DillAlerts.

What data we collect

We only collect data that is necessary to provide the service. We do not use analytics, tracking pixels, or advertising cookies.

Account information

  • Email address
  • User key (a unique identifier for receiving notifications)

Device information

  • Device name (chosen by you, e.g. "iPhone" or "MacBook")
  • Device operating system (iOS, macOS, or watchOS)
  • Apple Push Notification service (APNs) device token

Application data

  • Application names and API tokens you create
  • Application icons (if uploaded)

Message data

  • Message content, titles, priority levels, and timestamps
  • Image attachments (up to 2.5 MB per message)
  • Supplementary URLs and URL titles
  • Emergency receipt tracking data (acknowledgement status, callback URLs)

Billing information

  • Your Stripe customer ID and subscription status, managed entirely by Stripe — we do not store payment card details

How we use your data

  • To deliver push notifications to your registered Apple devices
  • To retry and track emergency-priority messages until acknowledged
  • To stream real-time notifications via WebSocket connections
  • To send you authentication emails (magic links) so you can sign in
  • To manage your subscription to DillAlerts
  • To enforce rate limits and message quotas
  • To fire webhook callbacks for emergency message receipts

Authentication

We use passwordless magic link authentication. When you sign in, we send a one-time link to your email that expires after 15 minutes. We do not store passwords. A session secret is issued upon verification and used to authenticate subsequent requests. You can revoke it at any time by logging out.

Third-party services

We share data with the following services only as needed to operate the platform:

Apple Push Notification service (APNs)

We use APNs to deliver push notifications to your Apple devices. Data shared with Apple includes device tokens and notification payloads (message content, titles, sounds, and priority). Apple's privacy policy is available at apple.com/legal/privacy.

Stripe

We use Stripe to process subscription payments for your DillAlerts account. Data shared with Stripe includes your email address and subscription details. We do not store your payment card information. Stripe's privacy policy is available at stripe.com/privacy.

Mailgun

We use Mailgun's EU infrastructure to send transactional emails, including magic link sign-in emails. Data shared with Mailgun includes recipient email addresses and email content. Mailgun's privacy policy is available at mailgun.com/legal/privacy-policy.

Cookies and tracking

We do not use cookies, tracking pixels, or third-party analytics on our marketing site or application. The only client-side data we store is your session secret, which is removed when you log out.

Data security

  • Authentication tokens are cryptographically random and magic link tokens are hashed with SHA-256 before storage
  • API tokens for your applications are generated as 30-character alphanumeric strings
  • All connections to third-party services use HTTPS
  • APNs communication uses token-based HTTP/2 authentication
  • Email is sent via Mailgun's EU infrastructure

Message retention

Messages are retained until you delete them from your devices, or until their TTL (time-to-live) expires if one was set by the sender. Emergency receipt data is retained for auditing purposes. If you delete your account, all associated messages, devices, applications, and receipts are permanently removed.

Your rights

Under UK data protection law, you have the right to access, correct, or delete your personal data. You may also request a copy of the data we hold about you. To exercise any of these rights, contact us at the address below.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

Contact

If you have questions about this privacy policy or how we handle your data, please email us at support@dillalerts.com.