Last updated 9 September 2026
Notification Forwarder reads notifications from the apps you choose and forwards them to you by the method you select. What leaves your device depends entirely on which method you pick.
Nothing is sent to us. Notification titles and text are processed on your device and stored there in encrypted preferences and local databases. Messages go out through your own mobile carrier, or through the email account whose server details you entered. We operate no server in this path and receive no data from you.
Cloud SMS is optional. If you turn it on, messages are sent through our servers and through our SMS provider, Twilio, which requires us to hold a small amount of information about your account.
| What we store | Why |
|---|---|
| Your Google account email address and account identifier | To identify your account when you sign in |
| The phone number you verify | To know where to send your forwarded notifications |
| Your credit balance, and a record of credits bought and used | To run the credit system and to answer billing questions |
The text of each forwarded notification passes through our servers to Twilio so that it can be delivered as a text message. We do not keep that text after the message is handed over. Twilio processes it as our provider, under its own terms.
Signing in with Google is required only for Cloud SMS. When you sign in, the app receives your email address, your Google account identifier, and your basic profile information. It requests nothing else. It does not request or receive access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google service.
| Google user data | How we use it |
|---|---|
| Email address | To identify your account, to contact you about it, and to make sure the free starter credits are given once per person |
| Google account identifier | To attach your credit balance and your verified phone number to your account and to nobody else |
| Basic profile information | To show which account is signed in on the account screen |
We do not sell, rent, or transfer your Google user data to anyone. It is not shared with our SMS provider or our payment provider, who never receive it. We disclose it only where the law requires, or to the extent strictly necessary for the security or operation of the service.
Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
We do not use Google user data for serving advertisements of any kind, including targeted, retargeted, or personalised advertising. We do not use it to train or improve generalised or non-personalised artificial intelligence or machine learning models. We do not sell it to data brokers, information resellers, or anyone else. We do not use it for determining creditworthiness or for lending purposes.
Everything the app sends to our servers travels over an encrypted HTTPS connection. Account records are held in Google Cloud Firestore, and the security rules on that database allow a signed-in person to read only their own record and allow no application user to write to it at all. Every change to a balance is made by our server code, never by the app.
Credentials for our SMS and payment providers are held in a managed secret store on the server and are never included in the app, so they cannot be extracted from a copy of it. On your device, settings such as your forwarding address are kept in encrypted storage.
Verification codes are stored only as a one-way hash, expire after a short period, and are removed once used.
Credits are bought through Stripe. Stripe handles the payment and your card details go to Stripe, never to us. We receive only a confirmation that a payment succeeded, the amount, and which account to credit.
The app requires notification access in order to work at all. It reads notifications only from the apps you have selected, and only while forwarding is enabled and within the schedule you set. It does not read your messages, contacts, files, or browsing activity.
You can export an encrypted backup of your settings. Backups are created only when you ask for one, are encrypted, and are saved wherever you choose on your own device or storage. We never receive them.
Uninstalling the app removes everything held on the device. While your Cloud SMS account exists we keep the records listed above. We do not keep them for longer than the account lasts, except where this policy says otherwise.
To delete a Cloud SMS account, open the Cloud SMS Account screen in the app and tap Delete account. Your balance, your verified phone number, your credit history and your sign-in are removed immediately. Any unused credits are lost.
Two things outlive the deletion. Records we must keep for accounting, such as proof of a payment, are retained only as long as the law requires. And a one-way scrambled form of your email address is kept so that the free starter credits cannot be claimed repeatedly by deleting and recreating an account. It cannot be turned back into your address and is not used for anything else.
If this policy changes in a way that affects you, the date at the top of this page will change and the new version will be published here.
Questions, or a request to delete your data: [email protected]
