Privacy Policy
HowlAlert Privacy Policy — how we collect, use, and protect your data.
Effective date: March 17, 2026 Last updated: March 17, 2026
TL;DR — HowlAlert reads Claude Code usage metadata (token counts, costs) locally on your Mac. Only that aggregated data — never conversation content — is sent to our server to deliver push notifications to your devices. We do not sell your data. Ever.
1. Who we are
HowlAlert ("we", "our", "us") is a developer tool published by MrDemonWolf. For privacy inquiries, contact us at privacy@mrdemonwolf.com.
2. What data we collect
2.1 Usage metrics (collected automatically)
When you use HowlAlert with Claude Code, the macOS app reads the local JSONL journal files that Claude Code writes to your device. From those files we extract:
- Token counts (input, output, cache read, cache write)
- Model name (e.g.
claude-sonnet-4-6) - Session identifiers (opaque UUIDs generated by Claude Code)
- Estimated cost in USD
- Event timestamps
We do not read or transmit:
- Conversation content (prompts or responses)
- File names or project paths
- Source code
- Any other content from your Claude Code sessions
2.2 Device information (collected when you register)
When you install the iOS or watchOS app and enable push notifications, we collect:
- APNs device token (a system-assigned identifier used solely to deliver push notifications)
- Platform type (iOS or watchOS)
- Registration timestamp
We do not collect your name, email address, phone number, or any personally identifiable information unless you contact us directly.
2.3 Authentication identifier
We use Sign in with Apple to authenticate requests to our server. Apple provides us with a private relay email and an opaque user identifier (sub claim) that is unique to you within our app. We use this identifier to associate your devices and usage history with your account.
3. How we use your data
| Purpose | Legal basis |
|---|---|
| Deliver push notifications when usage thresholds are met | Legitimate interest / Service delivery |
| Store usage history so you can review it in the app | Legitimate interest / Service delivery |
| Diagnose errors and improve the service | Legitimate interest |
We do not use your data for advertising, profiling, or any purpose other than operating HowlAlert.
4. How we store your data
- Usage event history is stored in Cloudflare D1 (a SQLite-based database hosted on Cloudflare's global edge network), associated with your opaque Apple user identifier.
- Device tokens are stored in Cloudflare KV (key-value store), keyed by your user identifier and device token.
- Data is retained for 365 days from the date of each event. After that it is automatically deleted.
- You may request deletion of all your data at any time (see Section 7).
5. Third-party services
| Service | Purpose | Privacy policy |
|---|---|---|
| Cloudflare | Edge hosting, D1 database, KV storage | cloudflare.com/privacypolicy |
| Apple APNs | Push notification delivery | apple.com/legal/privacy |
| Sign in with Apple | Authentication | apple.com/legal/privacy |
We do not share your data with any other third parties.
6. Children's privacy
HowlAlert is not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us at privacy@mrdemonwolf.com and we will delete it promptly.
7. Your rights
Depending on your jurisdiction, you may have the right to:
- Access — request a copy of the data we hold about you
- Deletion — request erasure of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Restriction — ask us to limit how we process your data
- Objection — object to processing based on legitimate interest
To exercise any of these rights, contact us at privacy@mrdemonwolf.com with the subject line "Privacy Request". We will respond within 30 days.
You can also delete your data directly from the app:
- Open HowlAlert on iPhone
- Go to Settings → Account → Delete My Data
8. California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- The right to know what personal information we collect and how we use it
- The right to delete personal information we hold about you
- The right to opt out of the sale of personal information — we do not sell personal information
- The right to non-discrimination for exercising your rights
To exercise your California rights, contact privacy@mrdemonwolf.com.
9. Data security
We use industry-standard security measures including:
- HTTPS/TLS for all data in transit
- Cloudflare's security infrastructure for data at rest
- No storage of APNs private keys in application code (stored as encrypted Worker secrets)
No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.
10. Changes to this policy
We may update this policy periodically. If we make material changes, we will update the "Last updated" date above and, where required by law, notify you via push notification or in-app alert. Continued use of HowlAlert after changes constitutes acceptance of the updated policy.
11. Contact
MrDemonWolf — HowlAlert Privacy privacy@mrdemonwolf.com
For general inquiries: hello@mrdemonwolf.com