Legal

ifText ("we", "our", "us") provides an intelligent SMS filtering service that helps you detect spam and categorize messages. We value your privacy and handle data responsibly.

1. Information We Collect

When you enable ifText:

• Message Content (unknown senders only): Portions of received SMS/MMS from unknown senders may be uploaded for classification.
• Sender Number: Collected together with message content.
• IP Address: Collected for abuse prevention and security auditing.
• Anonymous Customer ID: Random token used to link entitlement and device anonymously.
• Purchase/Subscription Status: Metadata (active, expired) to verify access.
• Telemetry & Diagnostics: App version, crash logs, general usage data — collected only in aggregate form, not linked to any individual or message.

We do not use IDFA or advertising identifiers and do not collect contacts or location.

2. How We Process and Store Data

• Messages are processed transiently and never stored in original form.
• Before external analysis, we apply reduction and masking (redacting phone numbers, URLs, identifiers).
• Masked data may be sent to third-party LLM providers under strict agreements; these partners have no data-retention policies and communication is always encrypted via TLS and at rest.
• We may use masked spam examples to train and improve our own detection models.
• IP addresses are kept ≤ 90 days.
• Spam sender numbers are retained up to 24 months to refine detection.
• Anonymous ID & subscription info retained while subscription is active + 12 months for audit.

3. Legal Basis for Processing

Depending on your region, processing is based on:

• Consent (when you enable ifText);
• Contract necessity (providing subscription features);
• Legitimate interests (spam prevention, security).

4. Cross-Border Data Transfers

Primary processing occurs in Singapore. For users in the EEA, UK, Japan, we rely on Standard Contractual Clauses (SCCs) and technical safeguards (TLS, encryption at rest, restricted access) to protect cross-border transfers.

5. User Rights (GDPR / CCPA / APPI)

You may:

• Request access, correction, deletion, or portability of your data.
• Withdraw consent or object to processing.
• Request a copy of the SCCs used for your data transfers.

Contact: iftext@codingmiao.com.
We will verify identity and respond within 30 days (extendable to 90 if complex).

6. Security Measures

We employ:

• TLS in transit, encryption at rest;
• Least-privilege access;
• Segregated stores (e.g., IP logs separate from message data);
• Audit logs and continuous monitoring.

7. Data Breach Notification

If a security incident occurs that materially affects your data, we will notify affected users and regulators as required by law.

8. Children and Age Restrictions

The service is intended for adults (18+). We do not knowingly collect data from minors.

9. Changes

We may update this Policy periodically. The latest version is always available on our website.

10. Contact

Email: iftext@codingmiao.com