SMS Gateway API

Privacy Policy

Last updated: June 2026

SMS Gateway API ("the App") is developed by SimpApp. This Privacy Policy describes how we collect, use, and protect your information when you use our Android application. The app is designed as a non-default-SMS utility that sends SMS from the user's own device and can optionally forward newly received SMS to a user-configured endpoint.

1. Information We Collect

We collect the following data to provide the service:

Google Account: Your Google account email is used for authentication via Firebase Auth.
API Key: A generated API key stored in your Firebase Firestore account.
SMS Metadata: Sent/received SMS counts and delivery statuses are stored in Firestore for statistics.
Webhook URL: Your configured webhook URL is stored in Firestore.
Device Information: Basic device info (model, OS version) stored in Firestore for device management.

2. SMS Content

SMS message content is never stored on our servers. Messages are transmitted directly from your device via your SIM card. Incoming SMS forwarded to your webhook are sent directly from the app to your server only when you configure that feature — we do not sync or store a full SMS inbox on our servers.

2.5. RCS Message Support (Optional)

The app optionally supports RCS (Rich Communication Services) messages from Google Messages. When you grant "Notification Access" permission in Android Settings, the app can detect incoming RCS messages from the Google Messages app and forward them to your configured webhook endpoint — similar to SMS forwarding. This feature is entirely optional and requires a separate permission that you control in Android Settings. The app does NOT access notifications from other apps, does NOT store RCS message content on our servers, and does NOT share RCS data with third parties. You can revoke notification access at any time through Android Settings.

3. How We Use Your Data

Authenticate your Google account
Store and retrieve your API configuration
Display SMS statistics in the app
Manage your active subscription via Google Play Billing

4. Third-Party Services

Firebase (Google): Authentication, Firestore database, Cloud Functions
Google Play Billing: Subscription management

5. Data Security

All data is stored in Firebase Firestore with security rules restricting access to authenticated users only. API keys are treated as sensitive credentials.

6. Data Retention & Account Deletion

Your data is retained as long as your account is active. You can permanently delete your account and all associated data directly from the App:

Open SMS Gateway API
Go to Settings
Tap Delete Account (under Account & Sync)
Confirm deletion

This will immediately delete your API key, webhook configuration, SMS statistics, and Firebase Auth account. Alternatively, you may request deletion by contacting us at support@simpapp.com.

7. Contact

For privacy questions: support@simpapp.com