Notilist Privacy Policy

For the Android app Notilist (notification history), package app.notilist.notification.history.
Effective 25 October 2026. Published by Morocode LLC.

Who we are

Morocode LLC, a limited liability company registered in Wyoming, United States, publishes Notilist on Google Play. Our registered address is 30 N Gould St Ste R, Sheridan, WY 82801, United States. You can reach us at support@morocode.com about anything in this policy.

What the app holds, and where

Notilist stores the following on your device, in storage that belongs to the app and that other apps cannot read:

• Notifications your phone receives. The app title, text, sender, icon, time and, when you turn picture saving on, images attached to a notification.
• Your own settings: which apps are recorded, muted words, how long history is kept, the screen lock PIN and the theme.

All of it stays on the phone. It is not transmitted, and we have no way to see it.

Notification access, in plain terms

Notilist only does its job because you grant it Android's notification access. That permission lets it read the notifications that arrive on your phone, which is the entire point of a notification history app, and it is also the most sensitive permission on the list. So:

• Notifications are written to a database on your phone and nowhere else.
• Your notifications are never uploaded. Not their text, not who sent them, not the app they came from, not the pictures attached to them. The app has no feature that sends them anywhere, no account to sync them to, and no server of ours to send them to. The only thing Notilist transmits is described under What the app sends to Google below: whether the app crashed, and anonymous counts of which screens get used.
• You choose which apps are recorded. The default is all of them, and you can narrow it to a list you pick, or exclude any app at any time.
• You can delete any entry, everything from one app, or the entire history, at any moment.
• Notilist is a record of your own phone, for you. It is not designed for, and must not be used for, monitoring another person.

What the app sends to Google

Notilist includes two Google services, and they are the only things it reports about itself:

• Crashlytics — when the app crashes or freezes, it sends Google a report describing where in our code it went wrong, along with the device model, the Android version, the app version and how much memory and storage were free. We read these to fix the bug. They never contain what you typed.
• Google Analytics for Firebase — counts of things like the app being opened, a screen being viewed, or a feature being used, together with the device model, language, country (worked out from the network, not from GPS — the app has no location permission), app version and a randomly generated installation identifier. It tells us how many people use the app and which parts they use.

What is never included: the text of a notification, who sent it, which app it came from, any picture attached to it, or anything else from your history. The events are counts and names of features, not your records.

The installation identifier is a random number created when you install the app. It is not your phone's serial number, not your advertising ID and not anything that identifies you as a person. It is reset if you clear the app's data or reinstall it.

These reports are processed by Google on our behalf under Firebase's data-processing terms and Google's Privacy Policy. We can see totals and charts. We cannot see an individual person.

Turning it off. Android's own Settings › Google › Ads lets you opt out of personalised advertising, and Settings › Google › Usage & diagnostics governs what Google collects from your device generally. Whatever these settings say, no notification of yours is ever part of a report — the app has no feature that sends one.

Google Play

The app is distributed through Google Play, and two things there involve Google rather than us:

• Crash and performance reports. Google Play collects these from Android devices for every app, under your own Android and Google account settings, not ours. They tell us how often the app crashed. They contain no content from inside the app.
• The review prompt. When the app offers you Google Play's rating sheet, that sheet is Google's, and anything you write in it goes to Google Play, not to us.

Both are governed by Google's Privacy Policy.

Permissions, and why

• Notification access to read and store the notifications you asked it to keep.
• Notifications to show you the daily summary and deleted-message alerts you switch on.
• Start at boot so your history keeps recording after the phone restarts.
• Biometrics only to unlock the app, if you turn the app lock on. Your fingerprint never leaves the phone's own secure hardware and is never seen by the app.
• Internet only for the crash and usage reports described above. Your notification history is never sent over it.

Android asks you for the sensitive ones, and you can withdraw any of them at any time in your phone's settings. The app keeps working with whatever you allow.

Files you create yourself

When you export or back up from inside the app, the file is written wherever you choose, using Android's own file picker. From that moment the file is an ordinary document under your control, and anything you do with it, such as putting it in a cloud drive or sending it to someone, is outside the app and outside this policy.

Keeping and deleting your data

Your data stays until you remove it. You can delete individual entries or clear everything from inside the app, and uninstalling Notilist removes its database and settings from the phone. Because nothing is ever uploaded, there is no copy anywhere else for us to delete on request.

Children

Notilist is a general-purpose tool and is not directed at children under 13. We do not knowingly collect anything from anyone, of any age, since we collect nothing at all.

Your rights

Privacy laws such as the GDPR and the CCPA give you rights of access, correction, deletion and portability over personal data held by a company. We hold none: your data never leaves your device, so you already have complete and direct access to all of it, you can correct or delete any of it in the app, and the export feature gives you a portable copy. There is no request to make of us, and nothing we could disclose about you even if we were compelled to.

Changes to this policy

If the app ever starts handling data differently, this page will be updated before that version is released, and the effective date at the top will change. Material changes will also be described in the Google Play release notes.

Contact

Questions about this policy: support@morocode.com.
Morocode LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States