Privacy Policy

Last updated: June 21, 2026

Textuoso never sends your messages, media, call log, or contacts to any server — not the developer's, and not any third party's — unless you optionally choose to use a third-party cloud service for your backups. Apart from that choice, they stay on your own devices, where the app processes them, and the developer never receives or stores that content — so there is nothing for the developer to read or sell. This policy explains what happens with your data and describes the single backend service, which exists only to help your two devices connect to each other.

How your data moves between your devices

Textuoso has two parts: the Textuoso Android app (installed on your phone) and the Textuoso Web app (which runs in a web browser on your own computer or device). When you move data between them, it travels directly from your phone to the browser on your own device over an encrypted, peer-to-peer connection across your local network. Both devices must be on the same local network (for example, the same Wi-Fi); Textuoso does not support connections between separate networks. Your data is not uploaded to a website, relayed through a server, or stored in the cloud. "Sent to your browser" refers to a browser running on a device you own — such as Textuoso open on your own computer — and nowhere else.

The signaling service used to connect your devices

To establish that direct connection, the two devices first have to find each other. Textuoso uses a signaling service for this: when you scan the QR code, it relays the connection-establishment information the two devices need to find each other and set up their direct, encrypted link, and then takes no further part. The signaling service receives only that connection-setup information; it never receives your messages, media, files, call log, or contacts — none of your personal content passes through it.

To protect this service from abuse, it applies rate limiting without persistently storing your IP address. Your IP address is never written to a database or any other persistent storage. Instead, when a connection is set up, the IP address is converted into a hash that is held only briefly in temporary, in-memory key-value storage and then expires automatically after a short time window. This is a standard rate-limiting technique: the temporary hash exists only to count recent connection attempts within that window, is not reversed back into your IP address, and is not used to identify or track you. The signaling service does not retain connection metadata after the temporary rate-limiting window expires.

Information the Textuoso Android app accesses on your device

To do its job, the app accesses the following on your phone, only to provide the features you ask for, and only locally:

• SMS, MMS, and RCS messages — their text, attachments (photos, video, audio), timestamps, and addresses, including Samsung Messages RCS chats and their attachments where present.
• Call log — phone numbers, dates, durations, and call types.
• Contacts — names and numbers, used to label conversations and calls, and (when you choose to) to restore contacts to your device.
• Your device's phone number — used so group conversations are grouped and restored correctly.

How your data is used

This information is read on your device and used solely to display, search, clean up, back up, transfer, and restore your messages, call log, and contacts at your direction. All processing happens on your own devices.

What Textuoso does not do

• It does not send your messages, media, files, call log, or contacts to the developer or to any server, unless you optionally choose to use a third-party cloud service for your backups (see Optional backups to third-party services below).
• It contains no advertising and no third-party analytics or tracking.
• It does not sell or share your personal information.

Permissions and why they are needed

• Read SMS / Receive SMS & MMS — to read and back up your messages.
• Send SMS — to write messages back to the device during a restore (the app must temporarily act as the default SMS app to do this).
• Read / Write Call Log — to back up and restore your call history.
• Read / Write Contacts — to show names instead of bare phone numbers, and to restore contacts to your device.
• Phone state — to read your device's own phone number for correct grouping.
• Camera — to scan the pairing QR code shown by the Web app.
• Internet / network & Wi-Fi state — to establish the encrypted, direct connection to the browser on your own device.
• Foreground service, wake lock, notifications — to keep a long backup or restore running reliably and to show its progress.

The SMS, MMS, RCS, call log, and contact permissions are used only to provide the features you choose — such as viewing, searching, backing up, transferring, and restoring your data. The content accessed through these permissions is processed on your own devices and is not transmitted to the developer.

Data retention

Because your messages, media, call log, and contacts are never sent to or stored by the developer or any server, there is no copy of that content for us to retain. On your own device, the Textuoso Android app may keep a single staged backup file that you pushed from the Web app, so that you can restore it; this file stays on your device until it is overwritten by a newer push or removed.

Your control over data stored by the app

You can remove any Textuoso data stored on your device — including the staged backup file — by clearing the app's storage in Android settings or by uninstalling the app.

Security

The connection between the Textuoso Android app and the Textuoso Web app is established directly between your devices, through QR-code pairing, and uses encrypted communication during transfer. Textuoso's device-to-device transfer does not send your backups through the developer's servers.

Optional backups to third-party services

Textuoso produces backup files, and you may choose to keep those files in a third-party storage or cloud service (for example, Google Drive or OneDrive). If you do, the backup is stored by that service under your own account and is handled according to that service's own privacy policy and terms — it is no longer solely on your device, and that service may be able to access its contents. Whether to use such a service, and which one, is entirely your choice, and it is separate from Textuoso's direct, device-to-device transfer described above.

Children

Textuoso does not collect personal information from any user. It is a general-purpose tool for managing data on your own devices and is not directed at children. If you are under the age required to use online services in your jurisdiction, use of the app should occur with the involvement of a parent or guardian.

Changes to this policy

This policy may be updated from time to time, and the "last updated" date above reflects the most recent version. If the policy changes materially, significant changes may also be announced within the app or on the project's website.

Contact

Questions about this policy can be sent to textstudio@stitt-hub.com.