Privacy Policy

What the app reads and why

SMS Forwarder reads incoming text messages solely to forward them. It captures new SMS (sender, body, timestamp) and uploads them to the backend server you connect it to. It does not read, index, or upload anything else on your device.

Where your messages go

Messages go only to the backend URL the app is configured with, and from there to the channel you set up (e.g. your Telegram):

• The backend is self-hosted — either your own instance or the official instance at smsforwarder.shuttlelab.org. Message bodies are relayed and then deleted ("relay-and-forget"); only a metadata delivery log (result, time, sender) is kept for the operator.
• Delivery to Telegram uses a shared bot operated by the instance; your Telegram chat id is stored on the backend, tied to your account, so your messages reach only you. If you self-host, you control all of this end to end.

Permissions

SMS Forwarder requests only what it needs: Receive/Read SMS (to capture incoming messages), Internet (to upload them), Foreground Service + Notifications (to keep running and show its status), Receive Boot Completed (to restart after a reboot), and battery-optimization exemption (so the OS doesn't freeze it). It is not a VPN and requests no location, contacts, or storage permissions.

Accounts & retention

Signing in creates an account on the backend, identified by a username and a per-device token (stored only as a hash; revocable). Your channel configuration is stored there. Message bodies are not retained after delivery. Delete your account or revoke a device to remove the associated data.

Children

SMS Forwarder is a general-purpose utility and is not directed at children.

Changes & contact

If this policy changes we will update this page and the date above. Questions: support@shuttlelab.org.