SmsHub
العربية
Log in Get started

Privacy Policy

Last updated: 5 October 2026

SmsHub (the website at sms.mohamed-galal.com and its Android app) forwards the text messages (SMS) your phone receives to your own server and shows them in a web dashboard. This policy explains what data we collect, how we use it and how we protect it.

1. Data we collect

Account data

  • Your display name, email address and password (stored only as a salted hash; we cannot read it).
  • If you sign in with Google: we receive your name, email address, profile picture and a unique account identifier from Google. We do not request access to your Gmail, Calendar, Drive or any other data in your Google account.

Phone data

  • Device name, manufacturer, model, Android version and app version, to list the phones linked to your account.
  • The time the phone last contacted the server (to show it as "online").

SMS messages

  • After you grant the Receive SMS (RECEIVE_SMS) permission and link the phone to your account, the app uploads each incoming SMS to your server: the sender, the message text and the time it was received.
  • The app does not read old messages stored on the phone, does not send SMS, and does not access your contacts.

Technical data

  • Server logs (request time, path, response code, errors) and IP address, for security, rate limiting and abuse prevention.
  • Cookies that are needed to keep you signed in and to protect forms, plus your language and theme preferences. We do not use advertising or tracking cookies.

2. How we use the data

  • To sign you in, manage your account and keep it secure.
  • To show your messages and devices to you, and only to you, in the dashboard.
  • To operate and secure the service, fix errors and prevent abuse.

We do not sell your data, use it for advertising, or share it with third parties for marketing. We do not use Google user data or the content of your messages to train AI or machine-learning models.

3. Sharing and disclosure

We do not share your data with anyone except where necessary to (a) comply with a binding law or court order, or (b) sign you in with Google, where data is exchanged between us and Google under Google's own policies. Data is stored on the server that runs SmsHub, in its own database.

4. Security

  • Traffic between your browser or the app and the server is encrypted with HTTPS.
  • Passwords are stored hashed; phone sessions use short-lived tokens that can be revoked.
  • Access to your messages is limited to your account.

5. Retention and deletion

  • Messages and account data are kept for as long as your account exists. You can remove any phone from the dashboard or the app at any time, and it stops forwarding immediately.
  • To have your account and all of its messages and related data deleted, email us at the address below and we will carry it out within a reasonable time.
  • You can also withdraw the SMS permission in Android settings at any time, and remove SmsHub's access at myaccount.google.com/permissions.

6. Children

The service is not directed to children under 13 and we do not knowingly collect their data.

7. Changes to this policy

We may update this policy; the date above shows when it last changed. Continuing to use the service after an update means you accept it.

8. Contact

For privacy questions or to request deletion of your data, contact the owner of sms.mohamed-galal.com.