Privacy Policy

AutoPay Alert ("we", "our", "the app") is committed to protecting your privacy. This policy explains what data we collect, why, and how we handle it.

Last updated: 18 May 2026

1. Data We Collect

Account info: Name, email address, and Firebase authentication token (via Google Sign-In or Truecaller).
SMS messages: The app reads incoming SMS on your device only to detect recurring payment notifications. SMS content is processed locally and never uploaded to our servers.
UPI app notifications (premium, optional): With your explicit permission, the app reads notifications from a fixed whitelist of UPI payment apps (PhonePe, Google Pay, Paytm, BHIM, Amazon Pay, BharatPe, and major bank apps) to detect payments and warn you before any autopay debit. Notification content is parsed on your device only and never uploaded to our servers.
Subscription data: Payment status, subscription ID, and transaction amounts managed through Razorpay.
Referral codes: If you use or share a referral code, we store the referral relationship.

2. How We Use Your Data

To authenticate you and manage your account.
To process subscription payments via Razorpay.
To track referral rewards.
To send conversion events to Meta (Facebook) and Google Ads for ad attribution. Personal identifiers (email, user ID) are SHA-256 hashed before transmission; your IP address and browser/app user-agent are also forwarded to Meta in their raw form, as required by Meta's Conversions API for ad attribution and event matching.

3. Data Sharing

We do not sell your personal data. We share limited data with:

Firebase (Google): Authentication and push notifications.
Razorpay: Payment processing.
Meta Conversions API: Hashed (SHA-256) email and user ID, plus raw IP address and user-agent string, for ad attribution only.

Important: SMS content and UPI app notification content are never shared with any third party — they are processed only on your device.

4. SMS Permission

AutoPay Alert requests SMS read permission solely to detect recurring payment notifications on your device. SMS content is parsed locally using on-device pattern matching. No SMS data is transmitted to any server.

5. UPI Notification Access (Premium Feature, Optional)

With your explicit permission, AutoPay Alert reads notifications only from a fixed whitelist of 21 known UPI payment apps (PhonePe, Google Pay, Paytm, BHIM, Amazon Pay, BharatPe, SBI Pay, SBI YONO, HDFC Bank, ICICI Bank, Axis Mobile, PayZapp, iMobile Pay, MobiKwik, Freecharge, Airtel Thanks, and select others). Notifications from any other app are filtered out before any text extraction occurs.

From these UPI app notifications we extract only: transaction amount, direction (credit, debit, or upcoming autopay), the last 4 digits of the bank account when present, and the name of the UPI app. This data is stored on your device only and is never transmitted to our servers or shared with third parties.

This permission is optional and only requested from premium subscribers. You can revoke it at any time: Settings → Notifications → Special access → Notification access → AutoPay.

6. Data Retention

Account data is retained while your account is active. You can request deletion at any time by contacting us. On-device data (SMS- and notification-derived transactions) is removed when you uninstall the app or clear app data.

7. Security

All server communication uses HTTPS/TLS. Passwords are never stored; authentication is handled by Firebase. Sensitive identifiers sent to third parties are SHA-256 hashed before transmission.

8. Children's Privacy

The app is not intended for children under 13. We do not knowingly collect data from children.

9. Your Rights

You may request access to, correction of, or deletion of your personal data by emailing us.

10. Contact

Email: panicquantum@gmail.com

11. Changes

We may update this policy from time to time. Changes will be reflected on this page with an updated date.