Privacy Policy — Nail It

Your messages stay on your phone. Full stop.

Nail It is an Android app that keeps a private history of the messages shown in your notifications. This page explains, in plain words, what the app does and does not do with data.

What Nail It stores, and where

Nail It reads the notifications that chat apps show on your device (with the notification-access permission you grant) and stores the message text, sender name, chat name, time and, when the chat app attaches one, the image, in a database inside the app's private storage on your phone. If you switch on Media Rescue, the app also copies photos, videos, voice notes and documents that chat apps save to your phone into the same private storage. All of this stays on the device. It is excluded from Android backups.

Encrypted at rest. Since version 1.7.0 the database is encrypted with SQLCipher (AES-256) and every saved media file with AES-256-GCM. The keys are random, generated on your phone and wrapped by a master key inside the Android Keystore (hardware-backed where the device supports it), so they never leave the phone and cannot be read by other apps. A database or media file copied off the phone is unreadable without it.

What Nail It never does

No account, no sign-up, no email, no phone number.
No cloud, no server, no sync. We do not operate any backend that receives your messages.
No analytics or tracking SDK inside the app. We cannot see what you capture. The one third-party component is Google's ad SDK for the small banner, described below; it never receives your messages.
No access to the chat apps' own databases, no Accessibility service, no root.
Nothing is sent to anyone unless you choose to share a message or an export through Android's share sheet.

Nail It's own network requests

The version of Nail It downloaded from this website checks once a day whether a newer version exists by downloading the public file notakeback.com/releases.json. The request carries no identifiers, no version number and no data about you or your messages. Once a day it also sends an empty "someone opened Nail today" request so we can count daily users as a plain number; it carries no identifier and nothing about you. Both can be switched off in Settings → Updates.

The ad banner

Nail It is free and shows ads served by Google AdMob: one small banner at the bottom of the screen, and a short video ad that you start yourself when you choose to reveal a deleted message or the history of an edited one (a "rewarded ad"; once revealed, a message stays revealed). After the first week of use, at most one full-screen "app open" ad per day may be shown when you open the app; there are no other full-screen ads. To show and measure ads, Google's SDK may collect your device's advertising ID, approximate location derived from your IP address, and technical information about the device and the app (such as model, OS version, and ad interactions). This is collected and used by Google under Google's privacy policy and how Google uses data from partner apps. The ad code is kept apart from your message history and is never given message text, sender names, chat names or media. In the EEA, UK and Switzerland you are asked for consent before any ad is shown, and you can change your choice at any time in Settings → Privacy → Ad privacy options. Elsewhere you can limit ad personalisation or reset your advertising ID in Android's Settings → Google → Ads.

Permissions

Notification access: required to read incoming chat notifications. This is the core function.
Notifications: to alert you when a captured message was deleted or edited by its sender.
Photos, videos and audio (optional, Media Rescue): to copy chat media before it can be deleted. Nail does not request "All files access".
Biometrics (optional): to lock the app with your fingerprint, face or PIN.
Microphone (optional, Urgent words): only when you choose to record your own alert sound. The recording is saved in the app's private storage on your phone, played back only on your phone, and never uploaded.

Your control

You choose which apps and which conversations are captured, how long history is kept (1 day to forever), and you can delete any message, any conversation or everything with one tap. Uninstalling the app deletes all data.

Children

Nail It is not directed at children under 13 and does not knowingly collect data from them. Nail It itself collects no data from anyone; the ad SDK is configured as not directed at children.

This website

notakeback.com counts page visits and APK downloads as anonymous totals (a number, no IP addresses or identifiers stored by us) and uses Vercel's hosting, which may log requests for security and performance under Vercel's privacy policy.

Changes and contact

If this policy changes, the new version is published here with a new effective date. Questions: open an issue or contact the publisher through the Google Play listing.