FindMyPhoneSMS is built and operated by Monaï Telecom ("we", "us"), a company registered in Lebanon. This page explains exactly what data the app and this website handle, what we never touch, where things are stored, and your rights over any of it.
The short version: we do not collect, read, store, or upload your SMS messages or any other personal content from your phone. The app reads incoming text messages locally on your device only to check for the secret trigger word you set. Nothing about your messages - including the trigger SMS itself - ever leaves your phone.
1. The Android app - what it sees, what it doesn't
What the app reads
The app uses Android's RECEIVE_SMS permission to look
at incoming text messages only to check whether the body
of the message exactly matches your trigger word. If it does, the
app plays the alarm. If it doesn't, the app discards the message
and moves on.
What the app does not do
- It never stores the contents of your SMS messages.
- It never uploads, transmits, or shares the contents of your SMS messages.
- It does not read your contacts, call log, or any other personal data.
- It does not access location unless you configure and trigger the optional Find-on-map feature.
- It does not access your microphone, camera (other than briefly toggling the LED flash during the alarm), or photos.
- It does not contain advertising trackers or third-party analytics SDKs.
What's stored on your device
Your settings - trigger word, ringtone choice, alarm duration, switches - are stored locally on your phone using Android's EncryptedSharedPreferences (AES-256-GCM). They never leave the device.
2. What the app sends to our servers
For licensing and update notifications, the app talks to our
backend (Firebase Cloud Functions hosted in
us-central1, operated by Google LLC). The
only data sent is:
- Your Android device ID (a pseudonymous identifier provided by the operating system) - used to bind your trial / license to this specific phone.
- Your license code, when you activate one - so we can verify it.
- Trial and activation state - the activation tier, trial model, trial start and expiry, plus aggregate trigger counts used for support and abuse prevention.
- Firebase Cloud Messaging token - a pseudonymous push-notification address used to send you new-version announcements.
- Basic device facts sent with support emails you initiate from the app: Android version, phone model, app version. (Only if you tap "Contact support".)
For the free and Standard app that's the entire list - no name, no email address, no phone number, no location, no message content.
Live location - Pro "Find on map" (optional)
If you use the Pro app and switch on "Find on map", then only after you text your secret location word to your own phone, the app shares that phone's location so you can find it:
- Location (latitude/longitude, accuracy, battery level) is sent to our backend while a tracking session is active, to show on a private
/trackmap link. - That link is protected by a long random token and is sent by SMS only to the number that texted the trigger word.
- If the phone has no internet, nothing is uploaded - instead a Google Maps coordinate link is sent by SMS to that same number.
- Location data is deleted automatically within 24 hours, and the session ends as soon as the phone is marked "found".
Location sharing stays off until you set it up and consent inside the app, and you may only enable it on a phone you own. Using it to track another person without their knowledge is prohibited (see our Terms) and may be unlawful.
3. Payments
When you buy a license, the payment is processed directly by CyberSource (a Visa Inc. company) using their PCI-DSS Level 1 hosted checkout. Card details are entered into CyberSource's iframe and never touch our servers. We receive only the payment outcome (success/decline) and a reference number, plus the billing information you typed (name, email, address) for the receipt.
CyberSource's own privacy policy applies to the card data they handle: cybersource.com/en/privacy.
4. The findmyphonesms.com website
Analytics
We use Plausible Analytics for visitor counts. Plausible is cookieless, does not track individuals across sites, and does not collect personal data. Aggregated counts only - for us to understand which pages are useful. See plausible.io/data-policy.
Cookies
This website does not set any cookies of its own.
Embedded YouTube videos
The install video is embedded from YouTube's "no-cookie" domain
(youtube-nocookie.com) - YouTube does not place
cookies or run tracking until you actively press play. If you do
play it, Google's terms apply.
5. Where data is stored, and who can see it
- Local-only data (your trigger word, settings, SMS your app sees) - on your device only, encrypted at rest.
- License + device-id records - Firestore, hosted on Google Cloud in the United States (
us-central1region). - Payment records - CyberSource's own systems.
- Internal team access - only the founder and named engineers at Monaï Telecom can access the Firestore data, via Google Cloud IAM.
6. Data retention
We retain your license record (device id, license code, activation timestamp) for the lifetime of the license, so we can re-issue it if you change phones. You can ask us to delete it at any time - see "Your rights" below.
7. Your rights
You have the right to:
- Access the data we hold about you. Email support@monaitelecom.com from the address you used at purchase and we'll send you a copy within 30 days.
- Correct anything inaccurate.
- Delete your record from our systems. Note that doing this will deactivate your license. Reinstalling the app does not automatically reset an expired trial.
- Object to any of the limited processing we do above.
EU and UK residents have additional rights under the GDPR / UK GDPR - including the right to lodge a complaint with your local data-protection authority.
8. Children
The app is not directed at children under 13. We do not knowingly collect any data from children under 13.
9. Changes to this policy
If we change this policy in a way that affects how we handle your data, we will update the "Last updated" date at the top of this page and (where reasonably possible) notify you via an in-app message.
10. Contact
Questions, requests, or complaints:
support@monaitelecom.com.
Monaï Telecom - Bourj Hammoud, Central St, Seriani Bldg N41, Lebanon.