Privacy Policy

App “NotAfter” · Last updated: October 2026

The app contains no advertising, no analytics and no tracking. As the developer I receive no data from the app. There is no server of mine that the app talks to.

Data on your device

Your host list, notes, settings, check results and imported certificates are stored only on your device. The app does not keep private keys: when you read a .p12/.pfx file only the certificates are taken over.

Checking your servers

For every host you add, the app opens a connection (TLS, STARTTLS or RDP) and reads the public certificate. No credentials and no payload data are sent. For the network scan this happens for the addresses of the range you choose. The app needs the Local Network permission for that, which iOS asks for the first time. On request the app uses several connections to check which TLS versions a server offers. The connection log of a check (the commands and the server's replies, without credentials) stays on your device only and is not synced through iCloud. The search for mail servers asks for the MX records of the domain you enter through the DNS service your device already uses; nothing is sent to me.

Search in the Certificate Transparency logs

Only when you tap “Search” in the search, the domain you entered is sent to the public service crt.sh (Sectigo) or, if it is down, to Certspotter (SSLMate) to find publicly issued certificates. Technically these services see your IP address. Privacy at crt.sh: sectigo.com/privacy-policy; at Certspotter: sslmate.com/privacy.

iCloud (optional)

If you turn on sync in the settings, the app stores the host list and your own certificates in your private iCloud (CloudKit) to sync them between your devices. I have no access to it; Apple's terms apply.

Webhooks (optional)

If you turn on a webhook in the settings and enter a URL, the app sends a message with host name, group, expiry date and findings to that URL when events occur (reminder threshold reached, certificate expired or renewed, problem detected or resolved). The only recipient is the service you enter yourself (e.g. Slack, Microsoft Teams, Discord or your own server); its privacy terms apply. Without an entry nothing is sent.

Notifications, calendar, widget

Reminders are scheduled locally on the device. A calendar entry is only created on your request; the app has write-only access and does not read events. The widget reads a small file that the app places in the shared folder on your device.

Contact by email

If you email me, I use your address and message only to answer your request.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing and objection, and the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at). You can delete all data of the app at any time by uninstalling it (iCloud data in the iCloud settings).

Controller

Christian Bumberger
Falkenweg 12
4050 Traun, Austria
support@bumberger.at