Your Push Data.
100% On-Device. Zero Cloud.

Modern smartphone software routinely turns push notification feeds into behavioral advertising dossiers. GhostRead was engineered as an uncompromising technical countermeasure: an air-gapped personal notification vault running strictly on your local Android hardware. We do not store, process, or monetize a single byte of your life.

Under European GDPR (Article 4(7)), California CCPA/CPRA, and global data privacy frameworks, you are the sole Data Controller and Custodian of all push alerts recorded on your device. GhostRead is an offline software tool with zero cloud infrastructure.

GhostRead operates via Android's native NotificationListenerService IPC API. When a third-party app (e.g., WhatsApp, Telegram, Instagram) dispatches a system alert, Android broadcasts an onNotificationPosted binder transaction directly to GhostRead's sandboxed process.

Transparency is absolute. GhostRead stores notifications inside a relational SQLite engine. Below is the exact, unredacted DDL schema for the internal tables used in production.

-- -------------------------------------------------------------------------
-- TABLE: notifications // Primary Notification Event Ledger
-- -------------------------------------------------------------------------
CREATE TABLE IF NOT EXISTS notifications (
    id                INTEGER PRIMARY KEY AUTOINCREMENT,
    package_name      TEXT NOT NULL,         -- E.g., 'com.whatsapp'
    sender_title      TEXT,                  -- Contact name or group title
    message_body      TEXT,                  -- Notification preview content
    received_at       INTEGER NOT NULL,      -- Unix epoch timestamp in ms
    is_retracted      INTEGER DEFAULT 0,     -- 1 if sender deleted message later
    priority_lane     TEXT DEFAULT 'NORMAL', -- 'VIP', 'NORMAL', 'MUTED'
    checksum_sha256   TEXT NOT NULL          -- Cryptographic payload integrity
);

CREATE INDEX IF NOT EXISTS idx_pkg_timestamp 
ON notifications (package_name, received_at DESC);

-- -------------------------------------------------------------------------
-- TABLE: sender_profiles // Local contact metadata
-- -------------------------------------------------------------------------
CREATE TABLE IF NOT EXISTS sender_profiles (
    sender_id         INTEGER PRIMARY KEY AUTOINCREMENT,
    display_name      TEXT NOT NULL,
    total_alerts      INTEGER DEFAULT 0,
    vip_status        INTEGER DEFAULT 0,
    last_active_at    INTEGER NOT NULL
);

-- -------------------------------------------------------------------------
-- TABLE: retention_policies // Automated cleanup rules
-- -------------------------------------------------------------------------
CREATE TABLE IF NOT EXISTS retention_policies (
    policy_id         INTEGER PRIMARY KEY,
    max_age_days      INTEGER DEFAULT 30,    -- Purge alerts older than X days
    auto_vacuum       INTEGER DEFAULT 1,     -- Cryptographic secure_delete
    last_cleanup_at   INTEGER
);

Many deceptive apps masquerade as utilities while collecting location traces, audio recordings, or address books in the background. GhostRead enforces an ironclad Forbidden Perimeter: six critical smartphone capabilities that our binary is prohibited by code from touching.

Security is not a single setting; it is a multi-layered defense architecture. GhostRead leverages the Android Linux kernel, hardware cryptographic enclaves, volatile memory scrubbing, and biometric APIs.

Aggressive OEM task-killers (Samsung, Xiaomi, Huawei) frequently terminate background services, causing missed notifications. GhostRead operates an ultra-low-power Foreground Service with an unobtrusive persistent notification. Follow the manufacturer-specific guides below to lock GhostRead in memory.

When a sender uses "Delete for Everyone" on WhatsApp, Telegram, or Signal, the sender's app sends a replacement push notification instructing the client to purge the bubble. Because GhostRead already received and committed the original push alert to your private SQLite vault, the original text remains preserved for you locally.

Not all push notifications carry equal urgency. GhostRead separates notification streams into two distinct operational corridors: the Fast-Track VIP Lane for urgent communications and the Silent Buffer Lane for marketing spam.

You decide how long messages exist. Configure automated FIFO rolling cleanup (7 days, 30 days, 90 days, or unlimited), or trigger our unrecoverable Nuclear Instant Purge, executing a cryptographic overwrite and SQLite VACUUM.

GhostRead is an independent utility created to restore user sovereignty over Android notifications. GhostRead is not affiliated with, endorsed by, or sponsored by Meta Platforms, Telegram FZ-LLC, Signal Foundation, or any other messaging platform.

GhostRead is safe for family devices and tablets. Because GhostRead collects zero data, children under 13 (or under 16 in the European Union) are fundamentally immune from surveillance, profiling, or data harvesting while using this software.

Under Regulation (EU) 2016/679 (General Data Protection Regulation), data subjects enjoy specific statutory rights. Because your data is stored solely on your smartphone, you do not need to submit formal DPO tickets; you execute these rights immediately within the application.

Under the California Consumer Privacy Act (Cal. Civ. Code § 1798.100 et seq.) and the California Privacy Rights Act (CPRA), California residents are guaranteed statutory protections against data sale and cross-context behavioral advertising.

Because GhostRead's zero-custody architecture stores all notification data locally on the user's device, our system achieves seamless compliance across international privacy frameworks without cross-border data transfer friction.

We welcome security researchers and ethical auditors. If you identify a vulnerability in our local encryption or sandboxing logic, submit encrypted reports using our verified PGP key below. We commit to a 24-hour triage SLA.

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: OpenPGP.js v5.1.0
Comment: GhostRead Security Response Team <security@ghostread.app>

mQINBGY2K2UBEAC8dG9W8qG0x3Kj6mN4oP8rS2tU4vW6xY8zA0bC2dE4fG6hI8jK
0lM2nO4pQ6rS8tU0vW2xY4zA6bC8dE0fG2hI4jK6lM8nO0pQ2rS4tU6vW8xY0zA2
bC4dE6fG8hI0jK2lM4nO6pQ8rS0tU2vW4xY6zA8bC0dE2fG4hI6jK8lM0nO2pQ4
=k9Z1
-----END PGP PUBLIC KEY BLOCK-----

Privacy policies should never be secretly modified. GhostRead version-controls all revisions in public Git commits with cryptographic author signatures.

Have an inquiry regarding this privacy documentation or our technical architecture? Contact our dedicated security and legal officers. We guarantee an initial substantive response within 48 business hours.