Privacy Policy

1. What SyncMate does

When an online seller receives a mobile-banking payment, the provider (for example bKash or Nagad) sends a confirmation SMS to the seller's phone. SyncMate detects that confirmation SMS and forwards it to the order dashboard account the seller has linked, so the matching order is confirmed automatically.

2. Information the app processes

• Payment-confirmation SMS — the message text, the official sender ID it came from, and the time it arrived. Only messages from recognised official mobile-banking sender IDs (bKash, Nagad, Rocket, Upay) are processed. Filtering happens on the device, before anything is transmitted.
• Pairing credential — a device token created when the seller links the phone to their dashboard account by scanning a QR code (or pasting a pairing token). It is stored on the device in encrypted storage.
• Device name — a label the seller types in (for example "Shop phone") so they can recognise the device in their dashboard.

What the app never reads or collects

• OTPs, bank verification codes, or personal messages — never read, never transmitted.
• SMS already stored on the phone before installation — the app only sees new, incoming messages, and discards every one that is not a recognised payment confirmation.
• Contacts, call logs, photos, files, or location — the app does not request these permissions at all.

3. Consent and permissions

• Receive SMS — the app's core function. Before Android's permission prompt appears, the app shows its own plain-language disclosure describing exactly what will be read and forwarded; the permission is only requested after the seller agrees.
• Camera — used only to scan the pairing QR code. Nothing is photographed or stored.
• Notifications / foreground service — keeps the app running in the background so payment confirmations are not missed.

4. Where the data goes

Forwarded payment confirmations are delivered, over an encrypted (HTTPS) connection, to one place only: the seller-dashboard account that the seller personally linked during pairing. The seller controls that account and sees the same data there as any order record.

SyncMate contains no advertising SDKs and no third-party analytics. Data is never sold, rented, or shared with any third party.

5. Transparency and retention on the device

The app keeps a capped, on-device log of every message it has forwarded, visible to the seller in the app's History tab — so there is never any doubt about what left the phone. Messages that could not be delivered yet (for example while offline) wait in encrypted storage on the device and are sent when connectivity returns.

6. Your controls and data deletion

• Stop forwarding — tap “Remove device” in the app's Settings. Forwarding stops immediately and the pairing credential is deleted from the phone.
• Delete local data — uninstalling the app removes the on-device log, queue, and credential.
• Delete dashboard data — records already delivered to the seller's dashboard are managed from that dashboard account. For help, or to request deletion, email [email protected] — requests are honoured within 30 days.

7. Security

All transmission uses HTTPS. The pairing credential is stored with Android's encrypted storage (AES-256). The app holds no passwords and cannot access the seller's dashboard beyond delivering payment confirmations to it.

8. Children

SyncMate is a business tool for sellers and is not directed at children under 13.

9. Changes and contact

If this policy changes, the new version will be posted at this address with an updated effective date. Questions and requests: [email protected].