diff --git a/app/Http/Controllers/Admin/NotificationController.php b/app/Http/Controllers/Admin/NotificationController.php
new file mode 100644
index 0000000..f58e7f5
--- /dev/null
+++ b/app/Http/Controllers/Admin/NotificationController.php
@@ -0,0 +1,81 @@
+<?php
+
+namespace App\Http\Controllers\Admin;
+
+use App\Http\Controllers\Controller;
+use App\Models\User;
+use App\Notifications\InAppNotification;
+use Illuminate\Http\RedirectResponse;
+use Illuminate\Http\Request;
+use Illuminate\Notifications\DatabaseNotification;
+use Illuminate\Support\Facades\Notification;
+use Illuminate\View\View;
+
+class NotificationController extends Controller
+{
+    public function index(Request $request): View
+    {
+        if ($request->user()->isAn('admin')) {
+            return view('admin.notifications.index', [
+                'users' => User::query()->orderBy('first_name')->get(),
+                'notifications' => $request->user()->notifications()->latest()->limit(10)->get(),
+            ]);
+        }
+
+        return view('notifications.index', [
+            'notifications' => $request->user()->notifications()->latest()->get(),
+        ]);
+    }
+
+    public function store(Request $request): RedirectResponse
+    {
+        abort_unless($request->user()->isAn('admin'), 403);
+
+        $validated = $request->validate([
+            'title' => ['required', 'string', 'max:255'],
+            'body' => ['required', 'string', 'max:2000'],
+            'target' => ['required', 'in:all,role,users'],
+            'role' => ['required_if:target,role', 'in:admin,user'],
+            'user_ids' => ['array'],
+            'user_ids.*' => ['integer', 'exists:users,id'],
+        ]);
+
+        $notification = new InAppNotification(
+            title: $validated['title'],
+            body: $validated['body'],
+            url: route('notifications.index'),
+        );
+
+        $recipients = match ($validated['target']) {
+            'all' => User::query()->get(),
+            'role' => User::query()->whereIs($validated['role'])->get(),
+            'users' => User::query()->whereIn('id', $validated['user_ids'] ?? [])->get(),
+        };
+
+        Notification::send($recipients, $notification);
+
+        return back()->with('status', 'Notification sent.');
+    }
+
+    public function markRead(Request $request, DatabaseNotification $notification): RedirectResponse
+    {
+        if ($notification->notifiable_id !== $request->user()?->id) {
+            abort(403);
+        }
+
+        $notification->markAsRead();
+
+        return back();
+    }
+
+    public function markUnread(Request $request, DatabaseNotification $notification): RedirectResponse
+    {
+        if ($notification->notifiable_id !== $request->user()?->id) {
+            abort(403);
+        }
+
+        $notification->markAsUnread();
+
+        return back();
+    }
+}
diff --git a/app/Notifications/InAppNotification.php b/app/Notifications/InAppNotification.php
new file mode 100644
index 0000000..9d12fe6
--- /dev/null
+++ b/app/Notifications/InAppNotification.php
@@ -0,0 +1,31 @@
+<?php
+
+namespace App\Notifications;
+
+use Illuminate\Bus\Queueable;
+use Illuminate\Notifications\Notification;
+
+class InAppNotification extends Notification
+{
+    use Queueable;
+
+    public function __construct(
+        public string $title,
+        public string $body,
+        public ?string $url = null,
+    ) {}
+
+    public function via(object $notifiable): array
+    {
+        return ['database'];
+    }
+
+    public function toArray(object $notifiable): array
+    {
+        return [
+            'title' => $this->title,
+            'body' => $this->body,
+            'url' => $this->url,
+        ];
+    }
+}
diff --git a/database/migrations/2026_04_10_111853_create_notifications_table.php b/database/migrations/2026_04_10_111853_create_notifications_table.php
new file mode 100644
index 0000000..d738032
--- /dev/null
+++ b/database/migrations/2026_04_10_111853_create_notifications_table.php
@@ -0,0 +1,31 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::create('notifications', function (Blueprint $table) {
+            $table->uuid('id')->primary();
+            $table->string('type');
+            $table->morphs('notifiable');
+            $table->text('data');
+            $table->timestamp('read_at')->nullable();
+            $table->timestamps();
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::dropIfExists('notifications');
+    }
+};
diff --git a/resources/views/admin/dashboard.blade.php b/resources/views/admin/dashboard.blade.php
index df68027..526bfae 100644
--- a/resources/views/admin/dashboard.blade.php
+++ b/resources/views/admin/dashboard.blade.php
@@ -44,6 +44,11 @@
             'href' => route('admin.users.index'),
             'icon' => 'heroicon-o-users',
         ],
+        [
+            'label' => 'Notifications',
+            'href' => route('admin.notifications.index'),
+            'icon' => 'heroicon-o-bell',
+        ],
         [
             'label' => 'Roles',
             'href' => route('admin.roles.index'),
diff --git a/resources/views/admin/notifications/index.blade.php b/resources/views/admin/notifications/index.blade.php
new file mode 100644
index 0000000..a40e8bf
--- /dev/null
+++ b/resources/views/admin/notifications/index.blade.php
@@ -0,0 +1,106 @@
+@php
+    $toolbarItems = [
+        [
+            'label' => 'Ideas',
+            'href' => route('home'),
+            'icon' => 'heroicon-o-light-bulb',
+        ],
+        [
+            'label' => 'Planning',
+            'href' => route('planning.index'),
+            'icon' => 'heroicon-o-clipboard-document-list',
+        ],
+        [
+            'label' => 'Development',
+            'href' => route('development.index'),
+            'icon' => 'heroicon-o-code-bracket-square',
+        ],
+        [
+            'label' => 'Testing',
+            'href' => route('testing.index'),
+            'icon' => 'heroicon-o-beaker',
+        ],
+        [
+            'label' => 'Security',
+            'href' => route('security.index'),
+            'icon' => 'heroicon-o-shield-check',
+        ],
+        [
+            'label' => 'Ops',
+            'href' => route('ops.index'),
+            'icon' => 'heroicon-o-command-line',
+        ],
+    ];
+
+    $contextItems = [
+        ['label' => 'Dashboard', 'href' => route('admin.dashboard'), 'icon' => 'heroicon-o-squares-2x2'],
+        ['label' => 'Users', 'href' => route('admin.users.index'), 'icon' => 'heroicon-o-users'],
+        ['label' => 'Notifications', 'href' => route('admin.notifications.index'), 'current' => true, 'icon' => 'heroicon-o-bell'],
+        ['label' => 'Roles', 'href' => route('admin.roles.index'), 'icon' => 'heroicon-o-shield-check'],
+    ];
+@endphp
+
+<x-layouts.app-shell
+    title="Notifications"
+    :toolbar-items="$toolbarItems"
+    :context-items="$contextItems"
+    :show-admin-entry="true"
+>
+    <div class="mx-auto max-w-5xl space-y-8">
+        <x-ui.page-header
+            eyebrow="Admin"
+            title="In-app notifications"
+            description="Send a private in-app notification to all users, a role, or selected users."
+        />
+
+        <div class="grid gap-6 lg:grid-cols-[minmax(0,2fr)_minmax(18rem,1fr)]">
+            <x-ui.panel title="Compose notification" subtitle="Notifications stay inside the app and appear in each user's inbox.">
+                <form method="POST" action="{{ route('admin.notifications.store') }}" class="space-y-5">
+                    @csrf
+
+                    <x-ui.input label="Title" name="title" required />
+                    <x-ui.textarea label="Body" name="body" rows="6" required />
+
+                    <x-ui.select label="Target" name="target" required>
+                        <option value="all">All users</option>
+                        <option value="role">Role</option>
+                        <option value="users">Specific users</option>
+                    </x-ui.select>
+
+                    <x-ui.select label="Role" name="role">
+                        <option value="admin">Admin</option>
+                        <option value="user">User</option>
+                    </x-ui.select>
+
+                    <x-ui.select label="Users" name="user_ids[]" multiple size="6">
+                        @foreach ($users as $user)
+                            <option value="{{ $user->id }}">{{ $user->name }} ({{ $user->email }})</option>
+                        @endforeach
+                    </x-ui.select>
+
+                    <x-ui.button type="submit">Send notification</x-ui.button>
+                </form>
+            </x-ui.panel>
+
+            <x-ui.panel title="Recent inbox items" subtitle="The admin account can also review its own in-app notifications here.">
+                <div class="space-y-3">
+                    @forelse ($notifications as $notification)
+                        <div class="space-y-2 rounded-md bg-main px-4 py-4">
+                            <div class="flex items-start justify-between gap-4">
+                                <div>
+                                    <p class="font-medium text-copy">{{ $notification->data['title'] ?? 'Notification' }}</p>
+                                    <p class="text-sm text-muted">{{ $notification->data['body'] ?? '' }}</p>
+                                </div>
+                                <x-ui.badge :tone="$notification->read_at ? 'neutral' : 'accent'">
+                                    {{ $notification->read_at ? 'Read' : 'Unread' }}
+                                </x-ui.badge>
+                            </div>
+                        </div>
+                    @empty
+                        <p class="text-sm text-muted">No notifications yet.</p>
+                    @endforelse
+                </div>
+            </x-ui.panel>
+        </div>
+    </div>
+</x-layouts.app-shell>
diff --git a/resources/views/notifications/index.blade.php b/resources/views/notifications/index.blade.php
new file mode 100644
index 0000000..ef728ac
--- /dev/null
+++ b/resources/views/notifications/index.blade.php
@@ -0,0 +1,86 @@
+@php
+    $toolbarItems = [
+        [
+            'label' => 'Ideas',
+            'href' => route('ideas.index'),
+            'icon' => 'heroicon-o-light-bulb',
+        ],
+        [
+            'label' => 'Planning',
+            'href' => route('planning.index'),
+            'icon' => 'heroicon-o-clipboard-document-list',
+        ],
+        [
+            'label' => 'Development',
+            'href' => route('development.index'),
+            'icon' => 'heroicon-o-code-bracket-square',
+        ],
+        [
+            'label' => 'Testing',
+            'href' => route('testing.index'),
+            'icon' => 'heroicon-o-beaker',
+        ],
+        [
+            'label' => 'Security',
+            'href' => route('security.index'),
+            'icon' => 'heroicon-o-shield-check',
+        ],
+        [
+            'label' => 'Ops',
+            'href' => route('ops.index'),
+            'icon' => 'heroicon-o-command-line',
+        ],
+    ];
+
+    $contextItems = [
+        ['label' => 'Inbox', 'href' => route('notifications.index'), 'current' => true, 'icon' => 'heroicon-o-bell'],
+    ];
+@endphp
+
+<x-layouts.app-shell
+    title="Notifications"
+    :toolbar-items="$toolbarItems"
+    :context-items="$contextItems"
+>
+    <div class="mx-auto max-w-5xl space-y-8">
+        <x-ui.page-header
+            eyebrow="Inbox"
+            title="Notifications"
+            description="Private in-app notifications for your account."
+        />
+
+        <x-ui.panel title="Recent items" subtitle="Unread items stay visible until you mark them read.">
+            <div class="space-y-3">
+                @forelse ($notifications as $notification)
+                    <div class="space-y-3 rounded-md bg-main px-4 py-4">
+                        <div class="flex items-start justify-between gap-4">
+                            <div>
+                                <p class="font-medium text-copy">{{ $notification->data['title'] ?? 'Notification' }}</p>
+                                <p class="text-sm text-muted">{{ $notification->data['body'] ?? '' }}</p>
+                            </div>
+                            <x-ui.badge :tone="$notification->read_at ? 'neutral' : 'accent'">
+                                {{ $notification->read_at ? 'Read' : 'Unread' }}
+                            </x-ui.badge>
+                        </div>
+
+                        <div class="flex gap-3">
+                            @if ($notification->read_at)
+                                <form method="POST" action="{{ route('notifications.unread', $notification->id) }}">
+                                    @csrf
+                                    <x-ui.button variant="secondary" type="submit">Mark unread</x-ui.button>
+                                </form>
+                            @else
+                                <form method="POST" action="{{ route('notifications.read', $notification->id) }}">
+                                    @csrf
+                                    <x-ui.button variant="secondary" type="submit">Mark read</x-ui.button>
+                                </form>
+                            @endif
+                        </div>
+                    </div>
+                @empty
+                    <p class="text-sm text-muted">You have no notifications yet.</p>
+                @endforelse
+            </div>
+        </x-ui.panel>
+    </div>
+</x-layouts.app-shell>
diff --git a/routes/web.php b/routes/web.php
index fa0bd40..0a5f6c3 100644
--- a/routes/web.php
+++ b/routes/web.php
@@ -1,6 +1,7 @@
 <?php
 
 use App\Http\Controllers\Admin\ImpersonationController;
+use App\Http\Controllers\Admin\NotificationController;
 use App\Http\Controllers\Admin\UserController;
 use App\Http\Controllers\IdeaController;
 use Illuminate\Support\Facades\Route;
@@ -13,6 +14,9 @@
     Route::resource('ideas', IdeaController::class)->except(['show']);
     Route::post('/ideas/{idea}/refine', [IdeaController::class, 'refine'])->name('ideas.refine');
     Route::post('/ideas/{idea}/propose', [IdeaController::class, 'propose'])->name('ideas.propose');
+    Route::get('/notifications', [NotificationController::class, 'index'])->name('notifications.index');
+    Route::post('/notifications/{notification}/read', [NotificationController::class, 'markRead'])->name('notifications.read');
+    Route::post('/notifications/{notification}/unread', [NotificationController::class, 'markUnread'])->name('notifications.unread');
 });
 
 Route::view('/planning', 'section-placeholder', ['title' => 'Planning'])->name('planning.index');
@@ -31,5 +35,9 @@
     Route::put('/users/{user}', [UserController::class, 'update'])->name('users.update');
     Route::post('/users/{user}/impersonate', [ImpersonationController::class, 'store'])->name('users.impersonate');
     Route::delete('/impersonation', [ImpersonationController::class, 'destroy'])->name('impersonation.destroy');
+    Route::get('/notifications', [NotificationController::class, 'index'])->name('notifications.index');
+    Route::post('/notifications', [NotificationController::class, 'store'])->name('notifications.store');
+    Route::post('/notifications/{notification}/read', [NotificationController::class, 'markRead'])->name('notifications.read');
+    Route::post('/notifications/{notification}/unread', [NotificationController::class, 'markUnread'])->name('notifications.unread');
     Route::view('/roles', 'section-placeholder', ['title' => 'Roles'])->name('roles.index');
 });
diff --git a/tests/Feature/Admin/NotificationsTest.php b/tests/Feature/Admin/NotificationsTest.php
new file mode 100644
index 0000000..60c60cf
--- /dev/null
+++ b/tests/Feature/Admin/NotificationsTest.php
@@ -0,0 +1,77 @@
+<?php
+
+use App\Models\User;
+use App\Notifications\InAppNotification;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\Notification;
+
+uses(RefreshDatabase::class);
+
+it('allows admins to send notifications to all users', function (): void {
+    Notification::fake();
+
+    $admin = User::factory()->create();
+    $admin->assign('admin');
+    $users = User::factory()->count(2)->create();
+
+    $this->actingAs($admin)
+        ->post(route('admin.notifications.store'), [
+            'title' => 'System update',
+            'body' => 'We have a new internal update.',
+            'target' => 'all',
+        ])
+        ->assertRedirect();
+
+    Notification::assertSentTo($users[0], InAppNotification::class);
+    Notification::assertSentTo($users[1], InAppNotification::class);
+    Notification::assertSentTo($admin, InAppNotification::class);
+});
+
+it('allows admins to target notifications by role or user list', function (): void {
+    Notification::fake();
+
+    $admin = User::factory()->create();
+    $admin->assign('admin');
+    $targetAdmin = User::factory()->create();
+    $targetAdmin->assign('admin');
+    $targetUser = User::factory()->create();
+
+    $this->actingAs($admin)
+        ->post(route('admin.notifications.store'), [
+            'title' => 'Role update',
+            'body' => 'This is for admins only.',
+            'target' => 'role',
+            'role' => 'admin',
+        ])
+        ->assertRedirect();
+
+    Notification::assertSentTo($admin, InAppNotification::class);
+    Notification::assertSentTo($targetAdmin, InAppNotification::class);
+    Notification::assertNotSentTo($targetUser, InAppNotification::class);
+
+    Notification::fake();
+
+    $this->actingAs($admin)
+        ->post(route('admin.notifications.store'), [
+            'title' => 'Chosen people',
+            'body' => 'Only specific users should get this.',
+            'target' => 'users',
+            'user_ids' => [$targetUser->id],
+        ])
+        ->assertRedirect();
+
+    Notification::assertSentTo($targetUser, InAppNotification::class);
+    Notification::assertNotSentTo($admin, InAppNotification::class);
+});
+
+it('forbids non-admins from sending notifications', function (): void {
+    $user = User::factory()->create();
+
+    $this->actingAs($user)
+        ->post(route('admin.notifications.store'), [
+            'title' => 'Nope',
+            'body' => 'Should not send.',
+            'target' => 'all',
+        ])
+        ->assertForbidden();
+});
diff --git a/tests/Feature/Notifications/InboxTest.php b/tests/Feature/Notifications/InboxTest.php
new file mode 100644
index 0000000..6d46f8a
--- /dev/null
+++ b/tests/Feature/Notifications/InboxTest.php
@@ -0,0 +1,54 @@
+<?php
+
+use App\Models\User;
+use App\Notifications\InAppNotification;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+
+uses(RefreshDatabase::class);
+
+it('shows unread and read notifications in the inbox', function (): void {
+    $user = User::factory()->create();
+
+    $user->notify(new InAppNotification(
+        title: 'Welcome',
+        body: 'Your inbox is ready.',
+        url: route('home')
+    ));
+
+    $notification = $user->notifications()->first();
+
+    $this->actingAs($user)
+        ->get(route('notifications.index'))
+        ->assertSuccessful()
+        ->assertSee('Welcome', false)
+        ->assertSee('Mark read', false);
+
+    $this->actingAs($user)
+        ->post(route('notifications.read', $notification))
+        ->assertRedirect();
+
+    $notification->refresh();
+
+    expect($notification->read_at)->not->toBeNull();
+
+    $this->actingAs($user)
+        ->get(route('notifications.index'))
+        ->assertSuccessful()
+        ->assertSee('Mark unread', false);
+});
+
+it('blocks users from changing other users notifications', function (): void {
+    $owner = User::factory()->create();
+    $other = User::factory()->create();
+
+    $owner->notify(new InAppNotification(
+        title: 'Private',
+        body: 'Only one account should see this.'
+    ));
+
+    $notification = $owner->notifications()->first();
+
+    $this->actingAs($other)
+        ->post(route('notifications.read', $notification))
+        ->assertForbidden();
+});