𝗣𝗥𝗜𝗩𝗔𝗖𝗬 𝗣𝗢𝗟𝗜𝗖𝗬 𝗙𝗢𝗥 𝗦𝗠𝗦 𝗙𝗢𝗥𝗪𝗔𝗥𝗗𝗘𝗥

Effective date: 24 August 2026

This privacy policy explains what SMS Forwarder ("the App") collects, why, and what you can do about it. The App is operated by MobileXapps.

If you have questions or want to exercise any of the rights described below, write to support@mobilexapps.com.

𝟭. 𝗜𝗡 𝗦𝗛𝗢𝗥𝗧

SMS Forwarder exists to take text messages that arrive on one iPhone and deliver them to other people you have put in a group. That means the content of the messages you choose to forward passes through our servers and is shown to the other members of that group. That is the whole purpose of the App, and it is the most important thing to understand before you use it.

We do not use analytics, advertising, trackers or third-party SDKs of any kind. The App contains no code from any company other than Apple and us.

𝟮. 𝗪𝗛𝗔𝗧 𝗪𝗘 𝗖𝗢𝗟𝗟𝗘𝗖𝗧

𝗔𝗰𝗰𝗼𝘂𝗻𝘁 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻. The username you choose when you register, and your password. The password is stored only as a bcrypt hash — we never store or have access to the password itself. We use this to create your account and sign you in. We do not ask for your name, email address or phone number.

𝗧𝗵𝗲 𝗖𝗼𝗻𝘁𝗲𝗻𝘁 𝗢𝗳 𝗠𝗲𝘀𝘀𝗮𝗴𝗲𝘀 𝗬𝗼𝘂 𝗙𝗼𝗿𝘄𝗮𝗿𝗱. If you set up the Shortcuts automation described in the App, each text message that arrives on that iPhone is sent to our servers. We receive and store:

• the text of the message,
• the sender label you configured in the automation,
• the time the message was received.

We store this so that members of the group can read the message history in the App, and we deliver it as a push notification to the other members of that group. Anyone the group owner has added to the group can read these messages. The phone that forwarded the message does not receive a push notification for its own message.

𝗚𝗿𝗼𝘂𝗽 𝗜𝗻𝗳𝗼𝗿𝗺𝗮𝘁𝗶𝗼𝗻. Group names, which accounts belong to which group, who owns each group, and the times these were created.

𝗣𝘂𝘀𝗵 𝗡𝗼𝘁𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗧𝗼𝗸𝗲𝗻. The device token Apple issues for your device, so that we can ask Apple to deliver notifications to you. It is stored against your account and deleted when you delete your account.

𝗦𝗲𝗿𝘃𝗲𝗿 𝗟𝗼𝗴𝘀. Our servers keep operational logs of requests: a request identifier, the time, the HTTP status, the group involved, the sender label, and the IP address the request came from. The text of your messages is not written to these logs. We use logs to keep the service running and to investigate errors and abuse. Logs are retained for up to 30 days and then deleted automatically.

𝟯. 𝗪𝗛𝗔𝗧 𝗪𝗘 𝗗𝗢 𝗡𝗢𝗧 𝗖𝗢𝗟𝗟𝗘𝗖𝗧

We do not collect your name, email address, phone number, postal address, contacts, calendar, photos, location, health data, financial data or browsing history. We do not use cookies, advertising identifiers, pixels, analytics services or crash reporting services. We do not build profiles of you.

We do not track you across other apps or websites, and we do not sell or share your personal information. We do not use your information to send you marketing.

𝟰. 𝗬𝗢𝗨𝗥 𝗥𝗘𝗦𝗣𝗢𝗡𝗦𝗜𝗕𝗜𝗟𝗜𝗧𝗬 𝗙𝗢𝗥 𝗪𝗛𝗔𝗧 𝗬𝗢𝗨 𝗙𝗢𝗥𝗪𝗔𝗥𝗗

You decide which phone forwards messages and who is in the group. The people who send you text messages have not agreed to anything with us. Only forward messages you have the right to share, and only add people who should be allowed to read them. Do not use the App to intercept or redistribute someone else's messages where the law requires their consent.

𝟱. 𝗣𝗨𝗥𝗖𝗛𝗔𝗦𝗘𝗦

The subscription is sold through Apple's In-App Purchase. Apple processes the payment; we never receive your payment details, card number or Apple ID. We only learn from Apple's on-device receipt whether your subscription is currently active.

𝟲. 𝗪𝗛𝗘𝗥𝗘 𝗬𝗢𝗨𝗥 𝗗𝗔𝗧𝗔 𝗜𝗦 𝗦𝗧𝗢𝗥𝗘𝗗, 𝗔𝗡𝗗 𝗪𝗛𝗢 𝗣𝗥𝗢𝗖𝗘𝗦𝗦𝗘𝗦 𝗜𝗧

Your data is stored on Google Cloud Platform / Firebase infrastructure (Cloud Firestore, Cloud Functions and Cloud Logging) in the us-central1 region in the United States. Google acts as our service provider and does not use your data for its own purposes.

Apple's Push Notification service is used to deliver notifications. Apple receives the notification content in order to deliver it.

If you use the App from outside the United States — including from the European Economic Area, the United Kingdom or Switzerland — your data is transferred to the United States. Where the law requires safeguards for such transfers, we rely on the European Commission's Standard Contractual Clauses or another legally recognised mechanism.

𝟳. 𝗛𝗢𝗪 𝗟𝗢𝗡𝗚 𝗪𝗘 𝗞𝗘𝗘𝗣 𝗜𝗧

• Your account, your groups, group membership, messages and device tokens are kept until they are deleted. Deleting a group permanently deletes that group's messages and membership. Deleting your account permanently deletes your account, every group you own together with all of its messages and members, your membership in groups owned by other people, and your device tokens. This happens immediately and cannot be undone.
• Server logs are kept for up to 30 days.

𝟴. 𝗬𝗢𝗨𝗥 𝗖𝗛𝗢𝗜𝗖𝗘𝗦

You can do all of these yourself, without contacting us:

• Delete your account and everything in it — Settings tab → Delete Account.
• Leave a group you were added to — open the group → Leave Group.
• Remove a member from a group you own — swipe the member's row.
• Stop forwarding messages — delete the automation in Apple's Shortcuts app on the source iPhone. Nothing further will reach us.
• Turn off notifications — iOS Settings → Notifications → SMS Forwarder.

𝟵. 𝗬𝗢𝗨𝗥 𝗥𝗜𝗚𝗛𝗧𝗦

Depending on where you live, you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict how we use it, to receive a copy in a portable format, and to withdraw consent where our use is based on consent. Write to support@mobilexapps.com and we will respond within the period required by applicable law.

𝗜𝗳 𝗬𝗼𝘂 𝗔𝗿𝗲 𝗜𝗻 𝗧𝗵𝗲 𝗘𝗲𝗮, 𝗧𝗵𝗲 𝗨𝗸 𝗢𝗿 𝗦𝘄𝗶𝘁𝘇𝗲𝗿𝗹𝗮𝗻𝗱. Our legal basis for processing your account data, the messages you forward and your push token is the performance of our contract with you — this is what the App does. Our legal basis for keeping server logs is our legitimate interest in operating a secure and reliable service. You also have the right to lodge a complaint with your local data protection authority.

𝗜𝗳 𝗬𝗼𝘂 𝗔𝗿𝗲 𝗔 𝗖𝗮𝗹𝗶𝗳𝗼𝗿𝗻𝗶𝗮 𝗥𝗲𝘀𝗶𝗱𝗲𝗻𝘁. You have the right to know what personal information we collect and why, the right to delete it, the right to correct it, the right to opt out of its sale or sharing, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information, so there is nothing to opt out of. To exercise your other rights, use Delete Account in the App or write to support@mobilexapps.com.

𝟭𝟬. 𝗦𝗘𝗖𝗨𝗥𝗜𝗧𝗬

Traffic between the App and our servers uses HTTPS. Passwords are stored as bcrypt hashes. Access to your account requires a token issued at sign-in, kept in the iOS Keychain on your device. Each group has a secret webhook token that is shown only to the group owner — treat it like a password, because anyone holding it can post messages into that group.

No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authorities as required by law.

𝟭𝟭. 𝗖𝗛𝗜𝗟𝗗𝗥𝗘𝗡

The App is not directed to children under 13, or the equivalent minimum age in your jurisdiction, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, write to support@mobilexapps.com and we will delete it.

𝟭𝟮. 𝗖𝗛𝗔𝗡𝗚𝗘𝗦 𝗧𝗢 𝗧𝗛𝗜𝗦 𝗣𝗢𝗟𝗜𝗖𝗬

We may update this policy. When we make a material change we will post the updated policy with a new effective date, and where the law requires it we will ask for your consent before the change takes effect. Earlier versions are available on request from support@mobilexapps.com.

𝟭𝟯. 𝗖𝗢𝗡𝗧𝗔𝗖𝗧

MobileXapps — support@mobilexapps.com