Developer: H TECH
Last updated: 29 July 2026
Your SMS messages are read on your phone, not on our servers. SMT-Cash reads bank and wallet messages on the device to turn them into transactions for you. By default the text of those messages is never uploaded anywhere — only the resulting transaction is saved. If you want your message text saved to your account as well (so it follows you to a new phone), there is a switch for that in Settings. It is off unless you turn it on, and turning it off again deletes everything it saved. We never sell your data and we show no ads.
SMT-Cash ("the app") is a personal finance tracker. This policy explains what the app collects, why, and what it never does.
Automatic SMS tracking is the app's core feature: it reads bank and wallet messages so your spending is recorded without typing anything by hand.
How it works:
The permission is requested only when you switch "Automatic SMS tracking" on yourself. The rest of the app works fully without it.
Only messages containing one of your finance keywords (e.g. "transaction", "خصم", "تحويل") are looked at. Everything else — OTPs, personal texts, promotions — is discarded before it reaches the reader.
Messages are parsed entirely on your device. By default, only the resulting transaction (amount, direction, sender name, date) is saved to your own private account. The message text itself stays on the phone.
When a screen needs to show you the original message, the app reads it live from your phone's own inbox at that moment and does not keep a copy.
Teaching the app (correcting a misread message, or telling it to ignore a kind of message) saves only the sender name and the rule you chose — never an excerpt of the message.
Settings → SMS tracking contains a switch called "Save message text to your account". It is OFF by default and nothing is saved until you turn it on and confirm.
If you turn it on:
The text of your finance messages is saved to your own private area of the database, so you can still see the original message on a new phone, after reinstalling, or if you delete the message from your handset.
Turning it on also copies the text of messages already recorded, read from your phone's inbox at that moment. Messages you have already deleted from the phone cannot be recovered.
The text is transmitted over encrypted connections and stored encrypted at rest. Security rules mean no other user of the app can read it. It is never sold, never used for advertising and never shared with third parties.
It is not end-to-end encrypted: as the operator of the database, H TECH is technically able to access it, and does not do so except where required to investigate a fault you have reported or to comply with a legal obligation.
If you turn it off:
Every message text already saved to your account is deleted immediately.
The app keeps working exactly as before, reading messages on the device only.
You are always in control:
Turn SMS tracking off at any time from Settings.
Tell the app to permanently ignore a kind of message.
Delete any recorded transaction, or erase everything with "Start over".
When you create an account or sign in, you are asked to accept the Terms and this Privacy Policy before the app opens. Saving message text (section 2) is a separate, additional consent asked for at the moment you turn that switch on, and it can be withdrawn at any time by turning the switch off.
Your data is stored in your own private area of Google Firebase (Firestore), readable only by your signed-in account:
Account — name and email address (or your Google account details if you sign in with Google).
Financial records you create — transactions, accounts, budgets, goals, bills and categories.
App settings — language, theme, keywords and the preferences you've taught the app.
Message text — only if you switched the option in section 2 on.
Invite data — your own referral code, the code you were invited with (if any), and a record of accounts that signed up using your code. No personal details of your invitees are shared with you — only the number.
Notification token — so reminders can reach your device.
Crash reports — technical diagnostics via Firebase Crashlytics when the app fails, so it can be fixed. These contain no message content.
We never upload or store the content of your SMS messages unless you have explicitly turned on the option described in section 2.
We never sell, rent or share your personal data with advertisers or data brokers.
We show no ads and run no advertising trackers.
We never access your contacts, call log, photos, camera or location.
Data travels over encrypted connections (HTTPS/TLS) and is stored in Google Firebase, encrypted at rest, under security rules that allow only your own account to read or write it. Sensitive local values are kept in the device's encrypted storage, and your balance can be hidden behind your fingerprint or device PIN.
Access — everything you record is visible to you in the app at any time.
Erase your data — "Start over" in Settings erases all your financial data while keeping your account.
Delete your account — Settings → Delete account removes your account and all of its data permanently and immediately, from inside the app. No request or waiting period is needed. If you cannot access the app, email us at the address below and we will delete it within 30 days.
Withdraw consent — turn off message-text saving to delete everything it stored, or revoke the SMS permission from your Android settings whenever you like; the app keeps working without it.
SMT-Cash is not directed at children under 13, and we do not knowingly collect data from them.
The app uses Google Firebase (Authentication, Firestore, Cloud Messaging and Crashlytics) and Google Sign-In. Their handling of data is governed by Google's Privacy Policy: https://policies.google.com/privacy
If this policy changes, the date at the top is updated and the new version is published here.
Questions, requests or complaints: kh.zaki2817@gmail.com
© 2026 SMT-Cash — H TECH