SMS Locker Admin Panel

1. Our Privacy Promise

SMS Locker™ was built around a simple promise: your messages stay yours. We never sell, rent, or share your message content with advertisers, brokers, or any third party. This Privacy Policy explains exactly what we do collect, why, and how you can control it.

2. What “Your Data” Means

Message content data — text messages, voicemails (including transcripts and audio), attachments, and contacts you import from your iPhone backup or sync between your devices. This is “Your Data.”

Account data — email address, password hash, optional profile fields you choose to enter (first/last name, phone, mailing address), license key, two-factor secret, trial and subscription status.

Operational data — server logs, error reports, app version, operating system, device fingerprint used for license enforcement, and aggregated usage metrics that help us run the Service.

3. How We Store It

Local first. The desktop and mobile apps store Your Data locally on your own device. If you never enable cloud sync, your message content never leaves your device.
Cloud sync (opt-in). When you turn on sync, Your Data is transmitted over TLS to our servers and stored in your private account. It is not commingled with other users’ data and is not used for training, analytics, or advertising.
Backups. We take encrypted, daily off-site backups of the database for disaster recovery only. Backups are deleted after a fixed retention window.
Encryption at rest is on our roadmap — this Policy will be updated when it ships.

4. How We Use It

To provide the Service: import, search, render, sync, and back up Your Data.
To enforce license terms (device counts, trial windows, paid status).
To send transactional emails (purchase receipts, security alerts, password reset).
To detect and prevent fraud, abuse, and security incidents.
To debug crashes and improve product quality (operational data only).

We do not use Your Data to train machine-learning models. We do not show you advertisements. We do not analyze your message content for marketing.

5. Third-Party Services We Use

We rely on a small number of well-known providers to operate the Service. Each is bound to keep Your Data confidential and to use it only as instructed by us:

Stripe — payment processing and subscription billing.
Backblaze B2 — encrypted off-site backups.
Resend (planned) — transactional email (verification, receipts, password reset).

6. Your Rights

Whether or not you live in a jurisdiction that mandates them (GDPR, CCPA, etc.), we extend these rights to all users:

Access & Export. Download a complete JSON export of Your Data from the Account page at any time.
Correction. Edit profile fields and account email from the Account page.
Deletion. Delete your account from the Account page. This permanently wipes Your Data from our servers (subject to a short backup-retention tail) and ends the Service for you.
Portability. Your export is in standard JSON suitable for moving to another tool.
Object & Restrict. You can disable cloud sync at any time without losing local data.

7. Children

The Service is not intended for users under 13. We do not knowingly collect data from children under 13. If you believe we have, contact us and we will delete it.

8. International Users

Our servers are located in the United States. By using the Service, you consent to your data being transferred to and processed in the United States.

9. Security

We use TLS for all network traffic, bcrypt-hashed passwords, JWT-based session tokens, optional TOTP two-factor authentication, and a minimum- privilege server architecture. No security is perfect — if you spot a vulnerability, please report it to security@smslocker.com.

10. Changes to This Policy

We will update this Policy as the Service evolves. Material changes will be announced in-app and may require renewed acceptance before continued use.

11. Contact

Privacy questions? Email privacy@smslocker.com. General support: support@smslocker.com.