🔒 Privacy Policy
AI SMS Forwarder — forward SMS to multiple phone numbers & email with AI voice filters.
✨ 1. Introduction
Welcome to AI SMS Forwarder. Your privacy is not a feature we bolt on — it is the foundation of how this app works. This Privacy Policy explains what information the app processes, why, how long it stays around, and the choices you have. It applies to users worldwide.
🏢 2. Who We Are
🎯 3. Scope of this Policy
This Policy covers the AI SMS Forwarder Android application, our website at aifuturegen.in, and any supporting backend services we operate for this app (collectively, the "Service"). It does not cover third-party services that you choose to integrate (e.g., OpenAI, your own SMTP provider, your carrier) — those are governed by their own policies.
📥 4. Data We Collect
We design the app to collect as little as possible. The table below shows the full picture.
| Category | What | Where it lives | Why |
|---|---|---|---|
| 📨 SMS content | Sender, body, timestamp of received SMS | On your device (local). Only sent to our servers if you enable cloud AI or email forwarding. | Match your filters and forward |
| 🔢 Recipient phone numbers | Numbers you configure | On your device | Outbound SMS forwarding |
| ✉️ Recipient emails | Addresses you configure | On your device; transmitted with the forwarded content through our SMTP relay at send-time only | Email forwarding |
| 🎙️ Voice recordings | Recordings you make to create voice-based filter rules | On-device if you use Android transcription; on our server if you use Backend AI | Turn speech into filter logic |
| 🔑 OpenAI API key | The key you save in Preferences | On your device, encrypted | Call OpenAI directly from your phone |
| 💳 Wallet & billing | Purchase history, top-ups, usage counts | Our servers (for paying users) | Run your wallet & plan |
| 🧾 Account identifiers | Email, device ID, app version | Our servers (for paying users) | Authentication & support |
| 📊 Diagnostics | Crash logs, non-identifying performance data | Our servers | Keep the app stable |
🛠️ 5. How We Use Your Data
- 🎯 Filter SMS by date range, keywords, sentences, sender code, OTP patterns, or AI-generated rules.
- 📤 Forward matching SMS to the phone numbers and email addresses you configure.
- 🤖 Interpret voice commands into filter/forward rules, either on-device or via Backend AI.
- 💰 Operate the wallet, subscription plan, and pay-per-use billing you opted into.
- 🛡️ Detect abuse, spam blasting, and security threats to the Service.
- 📞 Respond when you contact support.
- ⚖️ Meet legal obligations we are subject to.
📲 6. On-Device vs Cloud Processing
🟢 Stays on device (no data leaves you)
- SMS filtering by date, keyword, sentence, sender, OTP
- Phone-to-phone SMS forwarding
- Voice filter built with Android on-device transcription
- OpenAI API calls made using your own key (go direct to OpenAI, not through us)
🔵 Uses our servers
- Email forwarding (we relay via SMTP)
- Backend AI voice filter (we transcribe/parse on our servers)
- Wallet and billing
- Crash & diagnostic reporting
🤖 7. AI & Voice Commands
The app offers two ways to turn your spoken instruction (e.g., "forward any SMS from my bank to my wife and my email") into a working filter rule:
🗣️ Option A — Android on-device transcription (free)
Your phone does the speech-to-text locally. The audio never reaches our servers.
☁️ Option B — Backend AI (paid, higher accuracy)
The audio is streamed to our server, transcribed, and converted into a filter rule. The audio is processed in memory and the rule is returned to your device. We do not keep the raw audio beyond the processing window (see Retention below), and we do not use your audio to train models.
🔑 Your own OpenAI key
If you save an OpenAI API key in Preferences, calls go from your phone to OpenAI directly — we do not see the key or the responses. Alternatively you can add money to our wallet and we bill you per API request, or enroll in a monthly plan.
✉️ 8. Email Forwarding (SMTP)
When you enable email forwarding, matched SMS content is transmitted from your device to our SMTP relay over TLS. We send the email to the recipient(s) you configured and then discard the body within 24 hours. We log only minimal metadata (timestamp, destination domain, delivery status) to operate the service and bill correctly.
💳 9. Billing, Wallet & API Keys
- 🎁 30-day free period. After it ends, you pay per email forwarded (SMTP cost) and per Backend AI voice-filter request.
- 👛 Wallet model. Top up a prepaid balance; we debit per request.
- 📦 Monthly plans. Fixed allowance of Backend AI requests per month.
- 🔑 BYO OpenAI key. Stored encrypted on your device. We never transmit or read it.
- 💼 Payment processors handle card data — we never store card numbers.
⏳ 10. Data Retention
| Data type | Retention on our servers |
|---|---|
| 📨 Forwarded SMS content (email path) | Less than 24 hours, then permanently deleted |
| 🎙️ Voice recordings (Backend AI) | Less than 24 hours, then permanently deleted |
| 🧾 Wallet / billing records | As long as required by tax and accounting law (typically 7 years in India) |
| 📊 Crash & diagnostic logs | Up to 90 days |
| ✉️ Support emails | Up to 24 months |
🤝 11. Data Sharing
We do not sell your personal information. Ever. We share data only with:
- 🛰️ Infrastructure providers (cloud hosting, SMTP relay, AI providers) strictly to deliver the feature you requested.
- 💳 Payment processors to handle top-ups and subscriptions.
- ⚖️ Authorities, when we are legally compelled by a valid order from a competent authority.
- 🏢 A successor entity in case of merger, acquisition, or asset sale — with equivalent or stronger protections.
🛡️ 12. Security Measures
- 🔐 TLS 1.2+ for all transmissions between the app and our servers.
- 🧱 Encrypted storage of sensitive fields (API keys, credentials) on device.
- 🧼 Short retention windows so there is simply less data to breach.
- 🚪 Principle of least privilege for employee access.
- 🧪 Regular security reviews of our backend.
🌍 13. International Data Transfers
Our primary data processing takes place in India. When you use Backend AI or email forwarding, your data may transit through servers located in other regions (including the EU and the United States) operated by our infrastructure providers. Where required, we rely on lawful transfer mechanisms — for EU/UK users, Standard Contractual Clauses (SCCs) and the UK Addendum; for other regions, the mechanisms recognised under local law.
⚖️ 14. Your Rights by Region
Regardless of where you live, you can always email contact@aifuturegen.in to access, correct, or delete your data, withdraw consent, or close your account. Below are the additional rights granted by the main privacy laws around the world.
🇪🇺European Economic Area & United Kingdom — GDPR / UK GDPR
Rights of access, rectification, erasure, restriction, portability, objection, and to lodge a complaint with your Supervisory Authority (e.g., the ICO in the UK, the CNIL in France). Our lawful bases are contract, legitimate interests, consent (for AI voice & marketing), and legal obligation.
🇮🇳India — DPDP Act 2023
Right to access, correction, erasure, grievance redressal, and nomination. You may contact our Grievance Officer at contact@aifuturegen.in.
🇺🇸United States — CCPA/CPRA (California), and state equivalents (VA, CO, CT, UT, TX)
Right to know, delete, correct, opt-out of sale/sharing, limit use of sensitive personal information, and non-discrimination. We do not sell or share personal information as those terms are defined under CCPA.
🇨🇦Canada — PIPEDA & Quebec Law 25
Access, correction, withdraw consent, and file a complaint with the Office of the Privacy Commissioner of Canada.
🇧🇷Brazil — LGPD
Confirmation, access, correction, anonymisation, portability, deletion, and to lodge a complaint with the ANPD.
🇲🇽Mexico & LATAM
ARCO rights (Access, Rectification, Cancellation, Opposition) under the Federal Law on Protection of Personal Data (LFPDPPP).
🇯🇵Japan — APPI
Right to disclosure, correction, discontinuance, and a complaint to the PPC.
🇰🇷South Korea — PIPA
Access, correction, deletion, suspension of processing, and complaint to the PIPC.
🇨🇳China — PIPL
Right to know, decide, access, copy, correct, delete, and to object. Cross-border transfer conditions apply.
🇸🇬Singapore — PDPA
Access and correction, withdraw consent, and complaint to the PDPC.
🇹🇭Thailand — PDPA
Access, rectification, erasure, restriction, portability, objection, and complaint to the PDPC.
🇦🇺Australia & New Zealand — Privacy Act / IPPs
Access, correction, and complaint to the OAIC (AU) or OPC (NZ).
🇿🇦South Africa — POPIA
Access, correction, objection, and complaint to the Information Regulator.
🇦🇪UAE, Saudi Arabia & GCC
Rights under the UAE PDPL, Saudi PDPL, and equivalent laws — access, correction, deletion, objection.
👶 15. Children's Privacy
AI SMS Forwarder is not directed at children under the age of 16 (or the age of digital consent in your country, whichever is higher). We do not knowingly collect data from children. If you believe a child has provided us data, please contact us and we will delete it.
⚠️ 16. Disclaimers & Limitations
🔴 Wrong recipient risk. If you configure the wrong phone number or email, your SMS — including OTPs and other sensitive content — may be forwarded to the wrong person. You are solely responsible for verifying recipients. AI Future Gen Pvt Ltd cannot be held responsible for loss, harm, or unauthorized access arising from incorrect recipient configuration.
🔴 Security incidents. Although we implement industry-recognised safeguards, no system is immune to compromise. To the maximum extent permitted by law, we cannot be held liable for losses arising from hacking, unauthorized access, or compromise of our systems, your device, your email provider, your carrier, or the networks between them.
🔴 Third-party services. OpenAI, SMTP providers, mobile carriers, and operating system vendors all have their own policies. We are not responsible for their acts or omissions.
Nothing in this Policy excludes liability that cannot be excluded under applicable law (for example, liability for gross negligence, willful misconduct, or death/personal injury under local consumer laws).
🔄 17. Changes to this Policy
We may update this Policy to reflect new features, legal requirements, or operational practices. When we make material changes, we will notify you through the app or by email before the change takes effect. The "Last updated" date at the top of this page always reflects the current version.
📧 18. Contact Us
For all data requests, please include your app account email and the country you reside in so we can route your request correctly.