1. Information We Do Not Collect

We do not collect, log, or have access to:

• Personally identifiable information (such as your name, email address, IP address, or phone number).
• Your Firebase service-account.json files, private cryptographic keys, project IDs, or OAuth2 access tokens.
• The content, titles, payloads, or target topics of the push notifications you compose and send.
• Device identifiers, usage analytics, or behavioral telemetry.

2. How Your Firebase Credentials Are Handled

To send push notifications via the Firebase Cloud Messaging (FCM) HTTP v1 API, the App requires you to import a Firebase service-account.json file from the Apple Files app or iCloud Drive.

1. Local Storage Only: Once imported, your credentials are saved exclusively within the secure, sandboxed storage of your iOS device. They are never uploaded to any external database or server owned by us.
2. Local Cryptographic Signing: When you tap Send Push Notification, the App uses your private key locally on your iPhone to sign an RS256 JWT token.
3. Direct Transmission to Google: Your device exchanges that signed JWT directly with Google’s official OAuth2 server (https://oauth2.googleapis.com/token) to obtain a short-lived access token, and then sends your notification payload directly to Google’s official FCM endpoint (https://fcm.googleapis.com/v1/projects/{project_id}/messages:send).

At no point during this process do we see, intercept, or process your credentials or notification data.

3. Permissions & File Access

Push Studio only accesses the specific .json file that you explicitly select using the native iOS Document Picker (Apple Files app or iCloud Drive). The App cannot browse, read, or access any other files or folders on your device or iCloud account.

4. Third-Party Services

Because Push Studio communicates directly with Google’s Firebase infrastructure at your request, your API requests are subject to Google’s own terms and privacy policies:

• Google Firebase / Google Cloud Platform: https://policies.google.com/privacy
• Apple Inc. & Optional Donations: If you download the App or make an optional tip/donation, the transaction is processed directly by Apple (via In-App Purchase) or our chosen payment processor on our website. We never receive or store your credit card or Apple Pay details.

5. Data Retention and Deletion

Since all data resides exclusively on your device, you have complete control over it:

• You can remove individual Firebase projects from within the App at any time, which immediately deletes their stored credentials from your device.
• Uninstalling Push Studio from your iPhone permanently erases all locally stored data associated with the App.

6. Children’s Privacy

Push Studio is a technical utility intended for software developers and application administrators. We do not knowingly collect any personal information from anyone, including children under the age of 13.

7. Changes to This Privacy Policy

If we update this Privacy Policy in the future, we will post the revised version on https://ipushapp.com and update the “Last Updated” date at the top of this page. Our core commitment to keeping your private keys 100% local on your device will never change.

8. Contact Us

If you have any questions about this Privacy Policy or the security architecture of Push Studio, please contact us: