Privacy Policy

Last updated: December 12, 2024

Introduction

Harpoon SMS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application and web services.

Information We Collect

Account Information

When you create an account, we collect:

  • Phone number (for account verification)
  • Email address (optional, for notifications)
  • Name (optional)

SMS Messages

With your explicit permission, our Android app reads SMS messages on your device. Important:

  • All messages are encrypted on your device before transmission
  • We use AES-256 encryption with keys only you control
  • We cannot read your messages - this is zero-knowledge architecture
  • Only encrypted data is stored on our servers

Transaction Data

For Mobile Money (MoMo) messages, our app parses transaction details locally on your device, including:

  • Transaction amounts
  • Sender/recipient information
  • Reference numbers
  • Balance information

This parsed data is also encrypted before being synced to our servers.

How We Use Your Information

We use your information to:

  • Provide and maintain our services
  • Sync your messages across devices
  • Generate transaction reports and analytics
  • Send you service notifications
  • Provide customer support

Data Security

We implement industry-standard security measures:

  • End-to-End Encryption: All message content is encrypted before leaving your device
  • Zero-Knowledge Storage: We cannot decrypt your data even if compelled
  • Secure Transmission: All data is transmitted over HTTPS/TLS
  • Access Controls: Strict internal access controls and audit logging

Data Retention

We retain your encrypted data for as long as your account is active. You can delete your account and all associated data at any time through the app settings.

Third-Party Services

We may use third-party services for:

  • Cloud infrastructure (encrypted data storage)
  • Analytics (anonymized usage data only)
  • Payment processing (for premium subscriptions)

These providers do not have access to your decrypted message content.

Your Rights

You have the right to:

  • Access your data
  • Export your data
  • Delete your account and all data
  • Opt out of non-essential communications

Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: