Privacy Policy

SMS Messages: Text & Chat is a replacement messaging application for Android that lets you send and receive text and multimedia messages using your mobile carrier’s SMS/MMS network.

We do not access, read, or store the content of your SMS or MMS messages on our servers. Message content is transmitted only between your device and your mobile carrier, and is stored locally on your device. We do not have a server-side copy of your messages.

We do not use your message content, or anything derived from it, for advertising, analytics, profiling, or any purpose other than operating the messaging features you use. We do not sell it, and we do not share it with any third party.

We access your device’s contacts locally, on-device only, to display names and photos next to conversations and to help you compose new messages. Your contact list is not uploaded to or stored on our servers; contact matching happens entirely on your device.

You can review or revoke most of these at any time in your device’s Settings. If you decline a permission, the App will continue to work; the specific feature that needs that permission will be unavailable, and we will tell you which one. We will not prevent you from using the App because you declined a permission that is not essential to sending and receiving messages.

The following are stored only on your device. None of it is transmitted to or stored on our servers:

• Archive, Recycle Bin, Scheduled Messages — organisational states for your conversations.
• Chat Theme and Appearance settings — your customisation preferences.
• Private Box — hidden conversations, and any PIN, password, or pattern you set to protect them, are stored and secured on your device only. We cannot access, view, or recover your Private Box contents or credentials, including if you forget them.
• App Lock— any lock credential (PIN, pattern, or biometric) is validated locally by your device’s own security systems. We do not receive or store it.

Cloud backup is not currently available in the App. We are planning to introduce this feature in a future update. When it becomes available:

• It will be opt-in — nothing will be backed up unless you actively enable it.
• We will update this Policy in advance to describe exactly what is backed up, where it is stored, who can access it, and how to delete a backup.
• Where required by law, we will request your explicit consent before enabling backup.

Until that update is published, the statements elsewhere in this Policy that your messages and contacts stay on your device are accurate and current.

SMS Messages: Text & Chat is supported by advertising. To show and measure ads, and to keep the App stable, our advertising and analytics partners may collect:

• Android Advertising ID (AAID)
• IP address
• Device model, operating system version, language, screen resolution and orientation
• Mobile carrier and network or connection type
• App interaction events related to ads (views, clicks) and crash and diagnostic data

The identifiers described above — including your Android Advertising ID and IP address — are treated as personal dataunder the GDPR, UK GDPR, CCPA/CPRA, and India’s Digital Personal Data Protection Act, 2023. We do not describe them as anonymous or non-personal, because they can be linked to your device and, in some circumstances, to you. Sections 13 to 17 explain the rights you have over this data.

Location is not collected by or shared with our advertising partners. The precise location permission described in Section 3 is used solely for the in-App feature that lets you share your current location within a message. It is not used for advertising targeting, delivery, or measurement.

Message content and contacts are never used for advertising or analytics.

You can opt out of personalised advertising at any time:

• In the App: Settings → Privacy Consent
• On your device: Settings → Google → Ads → Delete advertising ID, or Opt out of Ads Personalisation
• Digital Advertising Alliance · Network Advertising Initiative · Your Online Choices (EU)

Opting out means the ads shown to you will no longer be personalised. You will still see ads in the App.

Attribution and marketing analytics. We are evaluating a mobile attribution provider to measure which marketing channel led to your app install. This is not currently active in the App. Before it is enabled, we will update this Policy to name the provider, link its privacy policy, describe the data involved, and update our Google Play Data Safety declaration.

We do not sell your personal information. We share limited data only with:

• Advertising partners(Google AdMob and its mediated networks) — to serve and measure ads (Sections 6 and 7). Depending on your consent choices, this may be treated as “sharing” for cross-context behavioural advertising under CPRA — see Section 16.
• Analytics providers (Firebase) — to find and fix bugs and understand aggregate usage.
• Google Play Billing — to process any purchases you make.
• Law enforcement or government authorities — only where legally required, for example under a valid subpoena or court order.
• A successor entity — in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not share message content or your contact list with any of the above, because we never collect them in the first place (Sections 1 and 2).

If you email us for support — for example a bug report, feedback, or a screenshot — we use that information solely to respond to and resolve your enquiry. We retain support correspondence only as long as needed to address the issue and for a reasonable period afterwards for reference, then delete or anonymise it. We do not use your support email for marketing without your separate consent.

Retention.Message content, contacts, and locally stored feature data exist only on your device, for as long as you keep the App installed or until you delete that data within the App. Technical and advertising data collected by our partners is retained according to those partners’ own retention policies (see the links in Section 7). Support correspondence is handled as described in Section 9.

Deleting your data.SMS Messages: Text & Chat does not offer account creation, and we hold no user account for you.

• To delete all local data:uninstall the App, or clear the App’s data through Android Settings → Apps → SMS Messages: Text & Chat → Storage → Clear data. Either action removes everything the App has stored on your device. We cannot recover it afterwards.
• To delete individual items: delete conversations, scheduled messages, or Private Box contents from within the App.
• To delete advertising and analytics data held by our partners: reset or delete your Android Advertising ID in Android Settings → Google → Ads. To request deletion of crash and analytics records associated with your installation, email developer@finflowsai.com and we will pass the request to the relevant provider.
• To delete support correspondence: email developer@finflowsai.com and we will delete it, subject to any period we are required to retain it by law.

We take reasonable technical and organisational measures to protect data associated with the App. Data transmitted between the App and our partners’ servers is encrypted in transit using industry-standard encryption. Message content sent through your carrier’s SMS/MMS network is subject to your carrier’s own practices, which are outside our control.

Message content and sensitive local features (Private Box, App Lock) rely on your device’s own operating-system security and storage protections. Data you send us by support email is handled with reasonable care.

No system is perfectly secure, and we do not claim otherwise.

Our advertising, analytics, and billing partners (Google) operate data centres globally, including in the United States and the European Union. Where data is processed outside your country of residence, these partners maintain appropriate safeguards, such as Standard Contractual Clauses, consistent with applicable law.

Depending on where you live, you may have the right to know what data is processed about you, to access it, to correct it, to delete it, to obtain a copy of it, to object to or restrict processing, to opt out of personalised advertising, and to withdraw consent at any time.

Because your messages and contacts never leave your device, most of these rights are exercised directly on your device — see Section 10. For rights over advertising and analytics data held by our partners, use the opt-out tools in Section 6, or contact us at developer@finflowsai.com.

Withdrawing consent is as easy as giving it. You can change your advertising consent at any time in the App under Settings → Privacy Consent. Withdrawal does not affect processing already carried out before you withdrew.

We will respond to any request within 30 days, or sooner where the law of your country requires it. We may ask you to confirm your identity before we act on a request.

If you are in India and have a concern about how your personal data is handled, or wish to exercise a right under the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer:

We will acknowledge your grievance within 24 hours of receiving it, and aim to resolve it within 15 days. If a complex request needs longer, we will tell you why and give you a revised timeline.

If you are not satisfied with our response, or if we do not respond within that period, you may complain to the Data Protection Board of India established under the Digital Personal Data Protection Act, 2023.

Nomination. Under the Act you may nominate another individual to exercise your rights on your behalf in the event of your death or incapacity. To register a nomination, email developer@finflowsai.com with the nominee’s name and contact details. Because the App holds no user account and stores your messages only on your device, a nomination applies to any personal data we hold about you through support correspondence and through our advertising and analytics partners.

If you are in the European Economic Area or the United Kingdom, our Google UMP-powered consent form appears the first time you use the App, letting you choose whether to allow personalised advertising. You can change this choice at any time in the App under Settings → Privacy Consent, or by resetting your Android Advertising ID.

We process personal data on the following legal bases:

• Consent — for personalised advertising, and for optional analytics.
• Legitimate interests — for crash reporting, fraud prevention, and keeping the App secure and stable, where those interests are not overridden by your rights.
• Legal obligations — where processing is required by law.

You have the right to lodge a complaint with your local data protection supervisory authority.

We do not sell personal information as defined under the CCPA/CPRA. However, serving interest-based ads through AdMob may constitute “sharing” for cross-context behavioural advertising under the CPRA unless you opt out.

You can exercise your opt-out right using the tools in Section 6, or in the App under Settings → Privacy Consent. California residents may contact us at developer@finflowsai.com to submit a privacy request.

If you are a resident of Colorado, Virginia, Connecticut, Utah, Texas, Oregon, Montana, or another state with a comprehensive privacy law, you have similar rights to access, correct, and delete your data, and to opt out of targeted advertising and profiling. We do not sell personal data.

Contact us at developer@finflowsai.com to exercise these rights. We will respond within the timeframe required by applicable law.

SMS Messages: Text & Chat is intended for a general adult audience. In Google Play Console we have declared that the App’s target audience does not include children, and we do not design or market the App to appeal to children.

We do not knowingly collect personal data from a child. If you are a parent or guardian and believe a child has provided us with personal data, contact developer@finflowsai.com and we will delete it.

• India: under the Digital Personal Data Protection Act, 2023, a child is a person under 18 years of age. We do not knowingly process the personal data of a child in India, and we do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
• European Economic Area and United Kingdom: the age of digital consent varies between 13 and 16 depending on the country. We do not knowingly process the personal data of a user below the applicable age in their country without parental consent.
• United States:we comply with the Children’s Online Privacy Protection Act (COPPA) and do not knowingly collect personal data from children under 13.

The App may link to third-party websites or services. We are not responsible for their privacy practices. Review their policies before providing information to them.

We may update this Policy from time to time. The “Last Updated” date above reflects the latest revision. Material changes — including the Section 5 cloud backup update, and the Section 7 attribution provider, once either ships — will be communicated in the App, or through an updated consent prompt where the law requires it. Continued use of the App after changes take effect means you accept the revised Policy.

For grievances under India’s Digital Personal Data Protection Act, 2023, see Section 14.