SMS Gateway App Privacy Policy

The yAppointment SMS Gateway App is an Android application that enables businesses to send appointment reminders and booking confirmations via SMS directly through the phone's SIM card. The app acts as a bridge between the yAppointment backend server and the device's native SMS functionality.

The app holds no permission to read incoming SMS messages. It requires the following permissions:

• SEND_SMS – Required to send appointment reminders and booking confirmations via the device's SIM card
• READ_PHONE_STATE / READ_PHONE_NUMBERS – Used during pairing to pre-fill the phone number of the SIM card in this device
• CAMERA – Used only to scan the pairing QR code shown in the yAppointment admin panel
• INTERNET – Required to communicate with the yAppointment backend server
• ACCESS_NETWORK_STATE – Used to check whether a network connection is available before contacting the server, and to decide when to retry; no identifier is read from it
• FOREGROUND_SERVICE – Keeps the SMS gateway service running reliably
• FOREGROUND_SERVICE_REMOTE_MESSAGING – Declares the type of the existing FOREGROUND_SERVICE permission, required since Android 14: that the service maintains the connection to the server to receive messages to send
• POST_NOTIFICATIONS – Shows the ongoing service notification and alerts about failed messages
• VIBRATE – Lets notifications also alert with vibration, for example when a message failed to send or the connection to the server was lost
• WAKE_LOCK – Keeps the device awake while messages are being processed
• RECEIVE_BOOT_COMPLETED – Allows the app to restart automatically after device reboot

The app processes the following data:

• Recipient phone numbers – Received from the yAppointment server for SMS delivery
• Message content – Appointment reminders and booking confirmation text
• Delivery status – Success or failure status reported back to the server
• This device's own phone number – Read from the SIM card during pairing and stored with the paired device, so you can tell which phone sends your messages
• Device identifier and device details – A generated identifier plus model, manufacturer and Android version, used to distinguish paired devices
• Device token – A unique authentication token to identify the authorized device
• Push token – A Firebase Cloud Messaging token used to wake the app when a message needs to be sent

The app communicates exclusively with the yAppointment backend server over encrypted HTTPS connections. Phone numbers and message content are received from the server, sent via SMS through the device, and delivery status is reported back. The app does not send data to any other third party.

The app does not permanently store personal data on the device. Message content and phone numbers are processed transiently and are not saved to local storage after SMS delivery. The authentication token is stored securely on the device using Android's encrypted SharedPreferences.

All communication between the app and the yAppointment server uses HTTPS encryption. The app uses token-based authentication to ensure only authorized devices can send SMS messages. The authentication token is stored using Android's encrypted storage mechanisms.

The app uses Google's Firebase Cloud Messaging (FCM) to receive push notifications that trigger SMS sending. FCM may process device identifiers and push tokens. Google's privacy policy applies: https://policies.google.com/privacy

As a data subject, you have the right to access, correct, or delete your personal data processed through this app. Business operators can manage their SMS gateway settings through the yAppointment admin panel. End recipients of SMS messages can exercise their rights by contacting the business that sent the message or by contacting us directly.

For questions about this privacy policy: LohiSoft s.r.o. Komenskeho 317/135, Sturovo, 943 01, Slovak Republic Email: info@yappointment.com