Privacy Policy
Last updated: March 2026
One91 Networks Pte. Ltd. ("we", "us", or "our") operates the SMS SoundBox mobile application (the "App"). This Privacy Policy explains how we handle information when you use our App.
Our core principle: Your data never leaves your phone. SMS SoundBox processes all data locally on your device. We do not collect, transmit, store, or have access to your personal data, SMS messages, or any other information on your device.
1. Information We Collect
We do not collect any personal information. The App does not require registration, accounts, email addresses, phone numbers, or any personal identifiers.
The App reads your incoming SMS messages solely on your device to identify banking transactions and OTPs. This data is:
- Processed entirely on your device using on-device algorithms
- Never transmitted to any server, cloud service, or third party
- Never uploaded, synced, or backed up by the App
- Stored only in a local Room database on your device
2. How Your Data Is Used
SMS content is processed locally for the following purposes only:
- Transaction Alerts: Parsing banking SMS to identify credits, debits, and balances, then announcing them via text-to-speech
- OTP Detection: Identifying one-time passwords, displaying them, reading them aloud, and copying to clipboard
- Fraud Detection: Analysing SMS patterns on-device to flag potential phishing or scam messages
- Smart Learning: On-device machine learning to improve SMS parsing accuracy based on your corrections
3. Data Storage
- All data is stored in a local Room database on your Android device
- No data is stored on external servers, cloud storage, or any remote location
- Transaction history is kept locally until you choose to clear it
- OTPs are automatically deleted after 7 days
- Uninstalling the App removes all stored data completely
4. No Cloud Services
SMS SoundBox does not use:
- Cloud storage (no AWS, Google Cloud, Firebase Storage, etc.)
- Remote databases
- User tracking or analytics services
- Advertising networks or SDKs
- Crash reporting that includes personal data
5. No OTP Forwarding
SMS SoundBox never forwards, shares, or transmits OTPs to any external service, server, or third party. OTPs are displayed and read aloud on your device only. The clipboard copy feature is local to your device.
6. Third-Party Services
The App may use the following third-party services in limited capacity:
- Google Play Billing: If you purchase a premium subscription, Google handles the payment. We do not see or store your payment details. Google's privacy policy applies to this transaction.
- Firebase Analytics (optional): If enabled by you, anonymous usage statistics (e.g., which features are used most) may be collected by Google Firebase. This contains no personal data, SMS content, or financial information. You can opt out in the App settings.
7. Permissions Explained
- RECEIVE_SMS: Required to detect incoming SMS messages in real-time and announce banking transactions
- READ_SMS: Required to read SMS content for parsing transaction details and OTPs
- SYSTEM_ALERT_WINDOW: Required to display OTP overlays and transaction popups over other apps
- POST_NOTIFICATIONS: Required to show notification alerts for transactions and OTPs
All permissions are used solely for on-device functionality. No data obtained through these permissions is transmitted off your device.
8. Data Retention
- OTPs: Automatically deleted after 7 days
- Transaction history: Kept locally until you manually clear it from the App settings
- ML model data: Stored locally, deleted when you clear App data or uninstall
- App settings: Stored locally in SharedPreferences, removed on uninstall
9. Your Rights
Since all data stays on your device, you have full control:
- Delete all data: Use "Clear Data" in the App settings, or clear via Android Settings
- Remove the App: Uninstalling removes all App data from your device
- Revoke permissions: You can revoke SMS permissions at any time via Android Settings. The App will stop reading SMS but will continue to function for manual use.
- Export: Transaction history can be exported as a local file on your device
10. Children's Privacy
SMS SoundBox is not directed at children under the age of 13. We do not knowingly collect any information from children. Since the App collects no personal information from any user, there is no risk of children's data being collected.
11. Singapore PDPA Compliance
This App complies with the Singapore Personal Data Protection Act (PDPA) 2012. As we do not collect, use, or disclose any personal data, the obligations under the PDPA regarding consent, purpose limitation, and data protection are met by design. No personal data is processed beyond your device.
12. GDPR Compliance
For users in the European Economic Area: Since SMS SoundBox does not collect, process, or store any personal data on our servers, GDPR obligations regarding data processing are met by design. There is no data controller or processor relationship, as all processing occurs locally on your device under your control.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this page periodically. Continued use of the App after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy, please contact us:
- Email: support@smssound.in
- Company: One91 Networks Pte. Ltd.
- Address: 276 Yishun Street 22, #03-260, Singapore 760276