🔒 Privacy Policy - GoodSMS

Last Updated: November 14, 2025

Effective Date: November 14, 2025

1. Information We Collect

1.1 What We DO Collect

Nothing. GoodSMS does not collect, store, or transmit any personal information or user data to our servers or any third-party servers.

1.2 Data That Stays on Your Device

The following data is stored locally on your device only:

• SMS Messages: Your text messages are stored in Android's system database (standard for all SMS apps)
• Contacts: Contact information is accessed from Android's system contacts (never sent anywhere)
• AI Model: The language model file (~2.3GB) is stored in app-specific private storage (no special permissions required)
• App Settings: Your preferences (theme, notifications, etc.) are saved in app-specific storage
• Conversation History: Message threads are stored in Android's SMS database

2. How We Use Your Information

2.1 On-Device Processing

All features work entirely on your device:

• AI Reply Generation: The AI model runs locally on your device to analyze conversations and generate suggestions
• Message Search: Search functionality queries local database only
• Contact Integration: Contact names are read from your device's contacts app
• Notifications: Generated locally by your device

2.2 No Cloud Services

GoodSMS does not:

• ❌ Send your messages to any server
• ❌ Upload any data to the cloud
• ❌ Use analytics or tracking services
• ❌ Collect usage statistics
• ❌ Require an account or login
• ❌ Connect to the internet for AI features

3. Data Sharing and Disclosure

3.1 We Never Share Your Data

Zero data sharing. Since we don't collect any data, we have nothing to share with anyone.

We do not:

• Sell your data to third parties
• Share data with advertisers
• Provide data to analytics companies
• Use tracking pixels or cookies
• Integrate with ad networks

3.2 Legal Requirements

Since we don't collect or store any user data on our servers, we have no data to provide even if legally required to do so. Your messages exist only on your device and in Android's system SMS database (outside our control).

4. Permissions Explained

GoodSMS requests the following Android permissions for app functionality:

4.1 Required Permissions

• READ_SMS: To read your messages and understand conversation context for AI suggestions
• SEND_SMS: To send text messages on your behalf
• RECEIVE_SMS: To receive incoming messages
• WRITE_SMS: To save messages to your device
• RECEIVE_MMS: To receive picture/video messages
• READ_CONTACTS: To display contact names in conversations

4.2 Optional Permissions

• POST_NOTIFICATIONS: To show message notifications (Android 13+)
• VIBRATE: For notification vibrations
• INTERNET: To download the AI model during initial setup (optional, model can also be installed manually)
• ACCESS_NETWORK_STATE: To check network connectivity for model downloads

Important: All these permissions are used solely for app functionality. No data accessed through these permissions is ever transmitted off your device. The AI model is stored in app-specific storage (no storage permissions needed).

5. Data Security

5.1 On-Device Security

Your data is protected by:

• Android System Security: Messages are stored in Android's secure SMS database
• App Permissions: Other apps cannot access your GoodSMS data without proper permissions
• App-Specific Storage: AI model and settings are stored in app-private storage (protected by Android, no special permissions needed)
• No External Storage Access: App does not request access to shared storage or all files
• No Network Exposure: Data never transmitted over the internet

5.2 No Server-Side Vulnerabilities

Since we don't use servers, your data cannot be compromised through:

• Server breaches
• Database hacks
• Man-in-the-middle attacks
• Cloud storage leaks

6. Third-Party Services

We use zero third-party services.

GoodSMS does not integrate with:

• Analytics services (e.g., Google Analytics, Firebase)
• Advertising networks
• Crash reporting services
• Cloud storage providers
• Social media platforms
• Any other third-party services

7. Children's Privacy

GoodSMS does not collect any personal information from anyone, including children under 13. Since the app doesn't collect data, it is safe for use by children. However, as a messaging app, parental supervision is recommended.

8. International Users

GoodSMS works identically for all users worldwide. Since all processing is local:

• No data crosses international borders
• No GDPR concerns (no data collection)
• No CCPA concerns (no data sale)
• Compliant with all privacy regulations

9. Your Rights

Since we don't collect any data, traditional "data rights" don't apply. However, you have complete control:

• Data Access: All your data is on your device - you have full access
• Data Deletion: Uninstall the app to remove all app data
• Data Portability: Your messages are in Android's standard SMS database
• Data Correction: Edit or delete messages directly in the app

10. Changes to Privacy Policy

If we update this privacy policy, we will:

• Update the "Last Updated" date
• Post the new policy on our website
• Notify users through app updates (if significant changes)

Our Commitment: We will never change our core privacy principle of zero data collection without explicit user consent.

11. Open Source Transparency

We believe in transparency. Our privacy practices are:

• Clearly documented in our code
• Verifiable by security researchers
• Built into the app architecture
• Not dependent on policies - it's how the app is built

12. Technical Details

12.1 AI Model

• Model: Phi-3 Mini (Microsoft)
• Storage: Stored in app-specific storage on device (~2.3GB) - no special permissions required
• Processing: All inference runs on-device
• Updates: Manual updates only (user controlled)
• Data Access: Only accesses messages you explicitly open
• No External Storage: All files stored in private app directory, inaccessible to other apps

12.2 Message Storage

• Messages stored in Android's system SMS content provider
• Same database used by all SMS apps
• Protected by Android system permissions
• Can be backed up using Android backup features

13. Compliance

GoodSMS complies with:

• GDPR: No personal data collection
• CCPA: No data sale or sharing
• COPPA: No data collection from children
• Android Privacy Requirements: All permissions documented
• Google Play Policies: Transparent data practices

---

GoodSMS - Privacy-First Messaging
© 2025 GoodSMS Team. All rights reserved.
Version 1.0 | November 2025