Privacy Policy
Last updated: 15 October 2026
This policy explains what the 1stReply app, provided by , collects, why, and the choices you have.
1. Information we collect
- Account: your name and mobile number. Your password is handled by Google Firebase Authentication; we never see it.
- Device identifier: used to keep your subscription active on one phone at a time.
- App settings: your reply messages (English and Marathi), language, Do Not Disturb hours, daily limit and on/off status.
- Numbers you add: your blacklist and per-contact replies (phone numbers and messages). These are encrypted on your phone before they are backed up.
- Usage statistics: how many auto-replies were sent each day and the numbers they were sent to (encrypted), so the same number is not replied to twice in a day.
- Subscription: plan status, expiry date and, for online payments, the order and payment IDs from Razorpay. We never receive card, UPI or bank details.
2. How the app uses phone permissions
- Phone state and call log: to detect when an incoming call ends and read the caller's number, so the reply goes to the right person.
- Send SMS: to send your reply from your own SIM.
- Run at startup: so auto-reply keeps working after the phone restarts.
Your call history and SMS inbox are not uploaded. The app does not record calls or read the content of your messages.
3. Where your data is stored
Data is stored on your phone and backed up to Google Firebase (Cloud Firestore and Authentication) so your settings can be restored when you log in on a new phone. Data is sent over encrypted connections, and access rules allow each account to read only its own data.
4. Sharing
We do not sell or rent your data. It is shared only with the service providers that run the Service — Google Firebase (storage and login) and Razorpay (payments, when used) — or when required by law.
5. Retention and deletion
We keep your data while your account exists. To delete your account and its data, message us on WhatsApp from your registered number, or email us, using the details on our Contact page. We delete it within 30 days.
6. Children
The Service is not intended for anyone under 18.
7. Changes
We may update this policy; the "Last updated" date shows the latest version.
8. Contact
For privacy questions, see our Contact page.