Privacy Policy

AnyCodeSMS is operated by Standard Holdings Group LLC, a North Carolina limited liability company.

If you have questions about this Privacy Policy or our data practices, contact us at: support@anycodesms.com

We collect the following categories of information to operate the Service:

Account Information

When you register for an account, we collect your email address through Supabase authentication.

Phone Numbers

When you subscribe, we provision a U.S. phone number for you through our telephony provider, Telnyx. We store the E.164-formatted phone number and associated Telnyx identifiers on our servers.

Inbound SMS Content

Text messages sent to your AnyCodeSMS number are received through our telephony provider and stored on our servers so you can view them in the app. This includes:

• The sender's phone number
• The message body
• Timestamps

Call Metadata

When you place or receive calls through AnyCodeSMS, we store:

• Caller and recipient phone numbers
• Call direction (inbound or outbound)
• Call duration
• Start and end timestamps
• Call status

Call audio is not recorded or stored, except for voicemail recordings as described below.

Voicemail Recordings

When a call goes unanswered, a voicemail recording may be captured by our telephony provider. We store a reference to the recording and make it available for playback in the app.

Device Information

When you enable push notifications, we store:

• Your Firebase Cloud Messaging (FCM) token
• Device platform (for example, Android)
• An optional device name you provide

This information is used solely to deliver push notifications to your device.

Subscription and Billing Data

We store Google Play subscription state, product IDs, and a hashed version of your purchase token. We do not store your credit card number or payment method details. Google Play handles payment processing directly.

OTP Failure Reports

If you report that a verification code did not arrive, we store:

• The service name you attempted to verify with
• The sender type
• The country
• Any notes you provide

Call Quality Telemetry

The app may send anonymized call quality metrics including jitter, packet loss, round-trip time, audio levels, network type, and codec information.

Webhook Event Metadata

We receive event notifications from our telephony provider. We store event identifiers, event types, processing status, and timestamps. Raw event payloads are retained temporarily.

Contacts (On-Device Only)

If you grant the Contacts permission and choose to import contacts, phone numbers and display names are read and stored locally on your devicein the app's private storage.

Contact data is never transmitted to AnyCodeSMS servers. This data remains entirely on your device and is cleared when you log out, delete your account, or uninstall the app.

• Outbound SMS content — outbound messaging is not currently available
• Location data
• Advertising identifiers
• Contact data — contacts remain on your device only
• Credit card or payment method details — handled by Google Play

We use the information we collect to:

• Provide the AnyCodeSMS service, including delivering SMS messages, enabling voice calls, providing voicemail playback, and provisioning phone numbers
• Process billing and manage your subscription through Google Play
• Send push notifications about incoming messages, calls, and voicemail
• Provide customer support when you contact us
• Enforce our Acceptable Use Policy and protect the Service from abuse
• Monitor and improve service quality and reliability

We share information only with the service providers necessary to operate AnyCodeSMS:

We do not sell your personal information. We do not share your information for advertising purposes. We do not use your information for automated decision-making or profiling.

We may also disclose information if required by law, such as in response to a valid legal process, or to protect the rights, safety, and security of our users, the public, or AnyCodeSMS.

We retain your data only as long as necessary to provide the Service:

Message metadata (sender, recipient, timestamps) and call metadata (participants, duration, timestamps) are retained indefinitely to preserve your history.

When you delete your account, all data is permanently deleted.

We implement the following security measures:

• Encryption in transit: All data transmitted between the app and our servers is encrypted using TLS.
• Database security: Row-level security (RLS) is enabled on all database tables.
• Webhook verification: Inbound webhooks are verified using Ed25519 digital signatures.
• Log redaction: Sensitive data is automatically redacted from application logs.
• On-device security: Authentication tokens are stored using Android's EncryptedSharedPreferences.

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.

You can delete your account at any time:

• In the app: Go to Settings and select Delete Account.
• On the web: Visit our account deletion page.

When you delete your account:

• Your phone number is released back to the telephony provider
• We attempt to cancel your Google Play subscription
• All user data is permanently deleted from our database
• Your authentication identity is removed
• Orphaned webhook records are cleaned up on a best-effort basis

Account deletion is permanent and cannot be undone.

AnyCodeSMS is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information. If you believe a child under 13 has provided us with personal information, please contact us at support@anycodesms.com.

All Users

You may request access to, correction of, or deletion of your personal information by contacting us at support@anycodesms.com. You can also delete your account and all associated data at any time through the app.

California Residents

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal information we collect, use, and share
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell your data)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at support@anycodesms.com. We will respond to verifiable requests within the timeframes required by applicable law.

We may update this Privacy Policy from time to time. When we make changes, we will update the “Effective Date” at the top of this policy. We may also notify you through the app or by email.

Your continued use of AnyCodeSMS after changes take effect constitutes your acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy, contact us at:

Standard Holdings Group LLC
Email: support@anycodesms.com