Back to Home

SMS Gateway App Privacy Policy

Last Updated: October 2026

1. Who this policy covers

This Privacy Policy applies to the SMS Gateway Android app (package com.smsrelay.app) published on Google Play by InfiniReach.

This page is the privacy policy that applies to the SMS Gateway Android app. If anything on our site Privacy Policy differs from this page for the Android app, this page controls.

The site Privacy Policy continues to cover InfiniReach's web dashboard and other channels (such as WhatsApp or iMessage) that are not part of this Android app.

2. What the app does

SMS Gateway is a bring-your-own-SIM Android app. After you link a device to your own InfiniReach web account, the app can send SMS from your SIM when you (or an integration you authorize) initiate a send from your account, and can sync new inbound and native outbound SMS on that SIM to your own dashboard inbox.

The app is not set as your device's default SMS handler. It does not modify or delete messages belonging to other SMS apps on your phone.

3. Android SMS permissions

The Play build of SMS Gateway requests the following SMS permissions. Each is used only for the purpose stated below:

  • SEND_SMS: to send SMS (and MMS where applicable) that you queue from your InfiniReach web account, API, or a connected integration you authorize. Messages are transmitted through your device's own SIM to recipients you specify. The Play build does not include an in-app compose or blast UI.
  • RECEIVE_SMS: to detect when a new SMS arrives on the paired SIM so the app can wake and sync that message to your account.
  • READ_SMS: to read new SMS from the device Telephony provider (and related MMS content for sync) so messages can be uploaded to your own InfiniReach dashboard. The app does not upload your historical inbox on first connect; only messages that arrive after linking are synced.

Sending is account-holder-initiated: the Android app sends only when your linked InfiniReach account (including actions you take in the dashboard, API, or integrations you connect) requests a send. The app does not autonomously generate marketing or promotional campaigns.

Before sensitive permissions are requested, the app shows an in-app disclosure explaining why they are needed. You can revoke permissions in Android settings; revoking SMS permissions will stop gateway send/receive features.

4. Data we process through the app

When you use SMS Gateway linked to your account, we process:

  • Device identifiers and registration details (device ID, app version, device model, Android version)
  • SIM metadata needed for routing (carrier, slot, phone number when available)
  • SMS/MMS content and metadata for messages synced or sent through your gateway (body, sender/recipient numbers, timestamps, delivery-related status)
  • Connection and permission state needed to operate the gateway

This data is synced to your own InfiniReach web account so you can view and manage conversations in your dashboard at app.infinireach.io. Message content is handled to deliver sends you initiate and to mirror traffic on your paired SIM to your account—not for advertising, profiling, or training AI models.

5. Storage and retention

On your device

The app stores local preferences (such as your link token and sync watermarks) and short-lived queues for pending gateway jobs. Pending local job records are deleted after about 7 days once processed.

On InfiniReach servers

We retain information as follows:

  • Account data: while your account is active, and for up to 90 days after you delete the account
  • Message content: while your account is active. We do not currently apply an automatic time-based purge of SMS content. You may request deletion at any time (see Section 6)
  • Payment records: up to 7 years where required for tax and accounting
  • Support tickets: up to 3 years for reference and quality assurance

6. How to delete your data or unlink the app

Unlink this device

In the SMS Gateway app, open Settings and choose the option to connect a different account. That clears the device link token and stops the gateway association with your current InfiniReach account.

Delete account or message data

  1. Prefer the web flow on our Data Deletion Request page (log in to your InfiniReach account and request deletion), or
  2. Email support@infinireach.io with your account email and any device IDs you want removed

We process deletion requests within 30 days, subject to legal and billing retention needs described in Section 5.

7. Data security

We use industry-standard measures to protect information processed through the app and your InfiniReach account, including:

  • Encryption in transit (TLS) between the app and InfiniReach servers
  • Encryption at rest for server-side stored data
  • Authenticated device linking (tokens) so only your linked account receives gateway traffic
  • Access controls and monitoring on InfiniReach infrastructure

No system is completely secure. You are responsible for keeping your account credentials and device secure.

8. Third parties

We do not sell your personal information or SMS content. We share data only as needed to run the service:

  • InfiniReach hosting and API infrastructure (including api.infinireach.io and related websocket services) to operate your account and sync gateway traffic
  • Firebase Cloud Messaging to wake or reconnect the app so pending jobs can be delivered—not to read SMS content
  • GoHighLevel (GHL) only if you connect that integration on your InfiniReach web account; message delivery then follows the connection you configured. GHL is not embedded as an SDK in the Android app
  • Mobile carriers to transmit SMS/MMS over the cellular network from your SIM

We may also disclose information if required by law or to protect rights and safety.

9. Your rights

Depending on your location, you may have rights to access, correct, export, or delete personal data. Contact support@infinireach.io and we will respond within 30 days.

10. Children

SMS Gateway is not intended for users under 18. We do not knowingly collect personal information from children under 18.

11. Changes

We may update this app privacy policy from time to time. The "Last Updated" date at the top will change when we do. Material changes may also be communicated by email or in-product notice where appropriate.

12. Contact

Developer / legal entity: reza azimi, Australia, operating as InfiniReach

Email: support@infinireach.io

Phone: +61 403 930 731

Website: https://infinireach.io