Privacy Policy
Last updated: January 2026
Overview
SMSPilot is designed with privacy as a core principle. All your data stays on your device. This privacy policy explains what permissions we request, how we use them, and how your data is protected.
Permissions We Request
📱 SMS/MMS Permissions
- RECEIVE_SMS: To receive customer booking requests
- SEND_SMS: To send booking confirmations and automated replies
- READ_SMS: To access message history for context and customer management
- WRITE_SMS: To save drafted replies
- RECEIVE_MMS: To receive multimedia messages
Why we need this: SMSPilot is an SMS assistant app. These permissions are essential for the core functionality of receiving, understanding, and responding to customer messages.
🎤 Microphone Permission (Optional)
- RECORD_AUDIO: To record voice messages
Why we need this: Only used when you actively choose to record and send a voice message. Audio is not stored; it's sent directly via MMS.
📸 Storage/Media Permissions
- READ_MEDIA_IMAGES (Android 13+): To attach images to MMS
- READ_EXTERNAL_STORAGE (Android 12 and below): To access media files for MMS attachments
Why we need this: To allow you to attach photos and media files when sending MMS messages.
🔔 Notification Permission (Android 13+)
- POST_NOTIFICATIONS: To notify you of new messages and booking requests
Why we need this: To alert you when customers send messages or when appointments are approaching.
What We Don't Do
- We do not upload your SMS messages to any cloud server
- We do not read your messages for advertising or analytics
- We do not collect your contacts list
- We do not track your location
- We do not sell any data to third parties
- We do not share your messages with anyone
Data Storage
All SMS messages, booking data, customer information, schedules, and settings are stored locally in a SQLite database on your Android device. This data never leaves your phone unless you explicitly choose to:
- Export your data for backup purposes
- Use optional cloud features (see below)
AI Processing
SMSPilot uses on-device AI (TensorFlow Lite with ONNX models) to understand message intent and generate responses. All AI processing happens locally on your phone — no messages are sent to any cloud AI service for analysis.
Optional Cloud Features
If you choose to enable optional subscription features, minimal data is sent to our backend server:
- Subscription status: To verify your subscription and provide premium features
- Device identifier: Anonymous identifier to link your subscription
- Email address: Only if you provide it for subscription management
We never send your SMS message content, customer data, or booking information to our servers.
Third-Party Services
SMSPilot may interact with the following third-party services:
- Google Play Billing: For in-app purchases and subscriptions (governed by Google's privacy policy)
- Firebase Cloud Functions: For subscription management only (no message data)
Data You Control
Export Your Data
You can export all your data at any time from Settings > Backup & Export. This creates a file on your device that you can save or share as you choose.
Delete Your Data
To delete all your data:
- Clear app data: Go to Android Settings > Apps > SMSPilot > Storage > Clear Data
- Uninstall the app: Uninstalling SMSPilot permanently deletes all local data
If you have an active subscription, you can cancel it through Google Play Store. Your subscription data on our servers will be deleted within 90 days of cancellation.
Default SMS App
SMSPilot can function as your default SMS app. This is required to provide full message management features. When set as default:
- SMSPilot will handle all incoming and outgoing SMS/MMS
- You can use SMSPilot just like any other SMS app
- All messages remain private and stored locally
- You can switch back to another SMS app anytime in Android Settings
Analytics
We may collect anonymous, aggregated usage statistics such as:
- Feature usage counts (e.g., how many auto-replies were sent)
- App crash reports (for debugging)
- Performance metrics (app load time, etc.)
This data cannot identify you personally and helps us improve the app. No message content is ever included in analytics.
Children's Privacy
SMSPilot is not intended for children under 13 years of age. We do not knowingly collect personal information from children. SMSPilot is designed for business use by adults.
Security
We take security seriously:
- All data is stored in an Android SQLite database with OS-level security
- Network communications use HTTPS encryption
- We follow Android security best practices
- No passwords or sensitive credentials are stored in plain text
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of significant changes through:
- In-app notification
- Update to this page with a new "Last updated" date
- Email (if you have provided one)
Continued use of the app after policy updates constitutes acceptance of the changes.
Your Rights
Depending on your location, you may have rights under data protection laws such as:
- Right to access your data
- Right to correct inaccurate data
- Right to delete your data
- Right to data portability (export)
- Right to object to certain data processing
Since all data is stored locally on your device, you have full control and can exercise these rights at any time through the app's settings or by uninstalling the app.
Contact Us
If you have questions or concerns about this privacy policy or your data:
We typically respond within 48 hours.
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), our legal basis for processing your data is:
- Contract: Processing necessary to provide the app's services
- Consent: You grant permission when accepting permissions requests
- Legitimate Interest: To improve the app and fix bugs
← Back to home