NuraTxt Privacy Policy
The short version. NuraTxt is an SMS and MMS app. Your messages, contacts and attachments are read, organised and stored on your phone, in the app’s private storage, and are never sent to YugCore. We run no server that receives them, there is no NuraTxt account, and the app contains no advertising, analytics or tracking code.
We receive personal data only when you email us; when you choose to email us a crash report you have read first; when Google Play shows us limited details of a subscription purchase, or a rating or review you post; when you join a test of the app; and when you visit this website (ordinary server logs, plus analytics only if you accept). Section 3 shows all of it on one page. Sections 21 and 22 explain your rights wherever you live, and section 26 how to reach our Grievance Officer.
1. Who we are
NuraTxt is an Android messaging app published by YugCore (“YugCore”, “we”, “us”). YugCore’s registered legal name and address: [REPLACE_WITH_LEGAL_ENTITY_AND_ADDRESS]. YugCore publishes the app and this website and decides how the limited personal data described here is used. That makes YugCore the “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023, the “controller” under the EU and UK General Data Protection Regulation, and the business responsible for your information under other laws.
- Privacy questions and requests: [email protected]
- Help with the app and purchases: [email protected]
- Crash reports only: [email protected]
- Grievance Officer: see section 26.
2. Scope
- This Policy covers the NuraTxt app for Android (package
com.yugcore.nuratxt), the website at nuratxt.yugcore.com, and email you exchange with us about them. - It does not cover your mobile operator, Google (Google Play, Android and your Google account), your phone’s maker, the websites links take you to, or other apps on your phone. Each has its own privacy policy.
- It explains two different things, and keeps them apart: information the app handles only on your phone, which we never receive (sections 4 to 6 and 10 to 11), and the small amount of personal data we do receive (sections 7 to 9 and 12).
- NuraTxt is published for Android only, and only on Google Play. There is no iPhone, web or desktop version.
- Our Terms & Conditions govern your use of NuraTxt. This Policy is a notice about information, not a contract.
3. What we receive, at a glance
| Information | Do we (YugCore) receive it? |
|---|---|
| Your messages, drafts and attachments | No, never. They stay on your phone (section 4). |
| Your contacts and phone numbers | No, never. |
| What the app works out from your messages: codes, amounts, bills, reminders, Activity, the money ledger, the search index | No, never. It is computed and kept on your phone. |
| Your search terms and the links in your messages | No, never. |
| Anything you type into the optional AI features | No, never. The AI runs on your phone (section 11). |
| Your name, Google account or payment details | Not from the app. Google Play handles payments; we never see your payment method (section 7). |
| Limited subscription purchase details | Yes, from Google Play: for example the order number, product, price, date, status and country (section 7). |
| Emails you send us | Yes: your email address, what you write and anything you attach (section 8). |
| Crash reports | Only if you choose to email one to us, after reading it (section 9). |
| Ratings and reviews you post on Google Play | Yes: Google shows us the review, your Google Play name and limited device details (section 7). |
| Testing the app before release | Only if you join a test: the email address of the Google account you test with (section 8). |
| Visits to this website | Ordinary server logs; and, only if you press Accept, analytics on the marketing pages (section 12). |
| An advertising ID, location or device identifiers | No, never. |
4. Information that stays on your phone
Everything in this section is read, created and stored on your phone, in storage that belongs to the app and that other apps cannot open. None of it is sent to YugCore, and none of it is “collected” by us.
4.1 Messages
- SMS and MMS: message text, sender and recipient numbers or sender IDs, time stamps, read, starred and archived state, delivery state, and the conversation each message belongs to.
- Drafts and scheduled messages: text you have typed but not sent, and messages you asked the app to send later. A scheduled message is sent by your phone over your mobile operator at the time you chose, never through us.
- Receiving an MMS: when someone sends you a picture message, your operator notifies the phone and the app downloads the message from the address your operator supplied. That download goes to your operator’s messaging service, not to us.
- As your default SMS app: Android expects the default SMS app to write incoming and sent messages to the phone’s shared message store, which every SMS app on the phone reads. NuraTxt does that, as every default SMS app must. It is not a copy sent anywhere.
4.2 Contacts
- With your permission, the app reads names and phone numbers from your address book to show who a conversation is with and to help you choose a recipient. It keeps a copy of those names and numbers in its private storage, refreshed from the address book when the app starts, so conversations show names without delay. It never uploads or changes your address book. Contact photos are held in memory only.
4.3 Attachments
- Photos and files you send or receive by MMS are stored in the app’s private storage on the phone, not in shared storage other apps can browse. Deleting a message hides it in the app, but its file stays in the app’s private storage until you clear the app’s storage or uninstall the app.
4.4 Settings
- Theme, text size, notification and lock-screen choices, pinned, muted and archived conversations, your categories, muted reminder senders, quick replies, how far your message history has been imported, and similar preferences.
- Your recent searches and how often you use them, so the app can suggest them again (Clear all in search removes them).
- A running total of how long the app has been open, used only to decide when to suggest making NuraTxt your default SMS app.
4.5 What the app works out from your messages
NuraTxt reads each message on the phone with fixed rules and stores a short structured reading beside it, so that it can show a one-time code at a glance, group four messages about one order, or remind you about a bill.
- Classifications: what a message is about (money, delivery, travel, an appointment, an offer, a one-time code, a notice or a person), what it says (done, in progress, upcoming, needs you), and details such as an amount, a reference number, a date, or a balance your bank itself stated.
- Events: messages about the same order, bill or trip, grouped for the Activity view.
- Reminders: a date and a short description read from a message, or one you set yourself, with an alarm on the phone. If you choose Add to calendar, the reminder is handed to the calendar app you pick.
- Money ledger: for each account, the balances your bank’s own messages stated and the payments reported since. NuraTxt never calculates a balance of its own, and does not connect to any bank, UPI app or account aggregator.
- Search index: a word index of your messages so that search is fast.
- Link checks: the safety verdict for each link and, if you turn on link previews, each preview’s title and image address.
- AI data (only if you turn the AI on): suggested replies the AI prepared, a numerical index of your messages (section 11), and measurements of how fast the model runs on your phone.
- Subscription bookkeeping: the date until which the smart features are unlocked on this phone, and when the app last checked with Google Play and what it was told (section 7).
- Crash bookkeeping: any crash reports not yet sent, the time of the most recent crash, and when the app started counting days without one (section 9).
These readings are made by rules and can be wrong. They help you find and read your messages; they are not advice, and the original message is always the thing to trust.
4.6 What the app deliberately does not keep
- No log of your message text or phone numbers in released versions of the app.
- No record of what you tap. There is no analytics, telemetry or crash-reporting library in the app, and nothing about how you use the app is ever sent anywhere.
- No account, no device fingerprint and no advertising identifier.
- No copy of the Google Play purchase token beyond the moment it is handed back to Google Play (section 7).
5. Permissions, and why each one
These are the Android permissions the app holds, including the ones that libraries inside the app add. Each exists for the reason stated. You can revoke runtime permissions in Android Settings at any time; the feature that needs the permission stops working and the rest of the app continues.
| Permission | What it is used for |
|---|---|
| Receive SMS, Read SMS, Send SMS, Receive MMS, Write SMS | Being an SMS and MMS app: receiving, reading and sending messages and, as the default SMS app, writing them to the phone’s shared message store (section 4.1). Used only to provide the app’s messaging features, never for advertising or marketing. |
| Read contacts | Showing names instead of numbers and helping you choose a recipient. Optional. Read, never changed, never uploaded (section 4.2). |
| Phone (make calls) | The call button in a conversation and the Call back action on a missed-call reminder, used only when you tap them. |
| Notifications | Showing incoming messages, reminders and the results of scheduled sends. |
| Exact alarms | Sending a scheduled message, and firing a reminder, at the right time. |
| Run at start-up, Foreground service, Wake lock | Staying able to receive messages, and re-arming your scheduled messages and reminders after the phone restarts. Android requires a small, silent notification while this service runs. |
| Request to ignore battery optimisations | Asking you, during setup, to let NuraTxt run in the background so messages and reminders arrive on time. You decide in Android’s own prompt. |
| Internet | Only for: downloading an incoming MMS from your operator (section 4.1); downloading an AI model after you ask for it (section 11); and, only if you turn on link previews, a connectivity check and contacting the website a link points to (section 10). Reading this Policy inside the app makes no network request. |
| Vibrate, Network state, Short foreground service | Added by libraries the app includes: vibrating for a notification, checking whether the phone is online before a download, and short background tasks such as re-arming alarms. None of them reads your data. |
| Google Play Billing | Added by Google’s billing library: lets the Google Play app on your phone sell the subscription and report whether it is active (section 7). |
NuraTxt does not hold any location, camera, microphone, calendar, call-log or advertising-ID permission. The app also carries one permission Android’s support library defines for the app itself, which only stops other apps from sending to the app’s internal components and grants access to nothing.
6. What leaves your phone
This is the complete list of what the app itself sends. If something is not here, the app does not send it.
| What | To whom | When | What it reveals |
|---|---|---|---|
| Texts and picture messages you send | Your mobile operator, then the recipient | When you tap send, or at the time you scheduled | The message, as with any SMS app. Operators carry and keep messages under their own rules and the law. |
| A request to download an incoming MMS | Your operator’s messaging service | When a picture message arrives | Your phone’s connection and the message reference the operator assigned. This is how MMS works. |
| Subscription purchase, restore and status checks | The Google Play app on your phone, and through it Google | When you buy or restore, and when the app opens (at most once a day) | Handled by Google under Google’s own terms and privacy policy (section 7). |
| A request to download an AI model | The public site that hosts the model (today Hugging Face, which serves files through its content delivery network) | Only after you turn the AI on and confirm the download | Your IP address, the time, the file requested and ordinary technical details such as the app’s user agent. Nothing about you or your messages (section 11). |
| Requests to show a link preview | First a connectivity check (a name lookup for google.com, or if that fails cloudflare.com or one.one.one.one, and only if those fail a request to www.google.com), then the website the link points to and the site that serves its preview image; for a YouTube link, YouTube’s own preview service | Only if you turn on Fetch link previews, which is off by default — then for new links and for links already in your messages | The full link, and that your phone fetched that page, identified as NuraTxt, before you tapped it. This is why it is off by default (section 10). |
| A crash report you choose to email us | YugCore, at [email protected], through your own email app and email provider | Only when you tap Email this report and then press Send in your email app | The report exactly as shown on screen, and the email address you send it from. Never message content (section 9). |
| Something you choose to share or open | The app or website you pick | Only when you tap share, add to calendar, call, or open a link or a page such as this Policy online | Whatever you chose to share. The app cannot see what the other app does with it. |
| Where the app was installed from | Nobody. This is a check on the phone | When a released version starts | The app asks Android which store installed it. If Android names a store other than Google Play, the app shows a screen offering NuraTxt on Google Play instead; if Android cannot say, the app opens normally. No request is made (section 19). |
Separately, when you install or update NuraTxt, Google Play processes your Google account and device information under Google’s privacy policy, and may collect crash and performance statistics about the app (Android vitals). We see these as counts and as individual crash reports showing the error, phone model and Android version, never your name or account. Android and Google Play services on your phone may also download system components, such as fonts, under Google’s own policies.
Never leaves your phone: the text of your messages and drafts; your phone number, the numbers you message and your contacts; your attachments; what the app works out from your messages; your search terms; anything you give the AI features. The links in your messages leave the phone only if you turn on Fetch link previews, and then only to the websites they point to (and, for YouTube links, to YouTube). YugCore operates no server that receives your messages. We could not read them even if asked to, because we do not have them.
7. Subscriptions and Google Play
Plain SMS and MMS are free and need no subscription. The smart features need a subscription after a free trial. The subscription is sold, billed, renewed, cancelled, refunded and restored by Google Play under Google’s terms and the Google Privacy Policy, and payments are processed under the Google Payments Privacy Notice. NuraTxt has no account system.
- On your phone, the app stores only: the date until which the smart features are unlocked on that phone, when it last asked Google Play, when it last got an answer, and what the answer was (unlocked, pending, none or unavailable). Not your name, email, plan, price or payment method.
- How it checks: when you open the app, at most once a day, it asks the Google Play app on the same phone whether your subscription is active. If no check succeeds for seven days, the smart features pause until one does. Plain SMS is never affected.
- The purchase token: Google Play gives the app a token identifying the purchase. The app passes it straight back to Google Play to acknowledge the purchase, as Google requires, and never stores, logs or sends it anywhere else.
- What Google Play makes available to us: as the developer, we can see limited details of purchases in the Google Play Console and in Google’s reports, such as the order number (it begins
GPA.), the product and plan, price, currency, tax, date, status, the country or region of purchase and the device model, and, where Google’s reports include them, the buyer’s city, state or postal code. Google may share other purchase details with us as described in the Google Payments Privacy Notice. Google does not give us your payment details. We can also look up an order by its order number, or by the Google account email address if you give it to us. - How we use it: only to provide and support the subscription, handle refunds and complaints, prevent fraud, keep the accounting and tax records the law requires, and meet other legal obligations (sections 14 and 16). We do not combine it with anything else to identify you, and we do not use it for marketing.
- New phone or reinstall: sign in to Google Play with the same Google account and use Settings → Subscription → Restore purchases. We never need to know who you are to restore it.
- Ratings and reviews: if you rate or review NuraTxt on Google Play, Google shows us your review, your Google Play name, its date, your device model, Android version, app version and language, and lets us reply publicly. We use it only to answer you and to improve the app.
- Trust, stated plainly: the app trusts the Google Play app’s answer. We chose not to run a verification server, because running one would mean collecting something about you.
8. Emails and support
When you email support@, privacy@ or [email protected], we receive your email address, your name if your email shows it, what you write, anything you attach, and the ordinary details that come with an email (such as the date and the sending email service).
- We use it only to answer you, to help with the app or a purchase, to handle your request or complaint, to improve the app based on what you tell us, and to keep a record that we did.
- Please do not send us your messages, screenshots of conversations, or other people’s details. We do not need them to help you. If you do, we delete them when we no longer need them for your request.
- Our email is handled by an email service provider acting for us, which may store it outside your country (section 17).
- Testing the app. If you join a test of NuraTxt before release, we hold the email address of the Google account you test with, so that Google Play can give you the test version, and we use any feedback you send us to improve the app.
- We may ask for information that helps us find your records (for example the email address you wrote from, or a Google Play order number). We do not ask for identity documents unless the law requires it to act on a request.
9. Crash reports
If NuraTxt hits an error, it records a short report on your phone: the type of error, where in the app’s code (including the libraries it uses) it happened, which screens you had opened and when (as fixed screen names, never the conversation, a number or a search term), a report number, and your phone model, Android version and app version. It never contains your messages, any part of them, phone numbers, contact names, or anything you typed. The error’s own text is deliberately left out, because it can quote whatever the app was reading at the time.
- Nothing is sent automatically, and the app makes no network request to send it. There is no crash-reporting library in the app.
- In Settings → About → Report a crash you can read the exact text, then either delete it or tap Email this report, which opens your own email app with the report addressed to [email protected]. You press Send there, from your own email account. If no email app opens, you can copy the report and send it yourself.
- Your email app does not tell NuraTxt whether you pressed Send, so the app asks you afterwards. Once you confirm the email went out, the reports that were in it are removed from your phone; until then they stay, any report recorded after you opened the screen is kept for next time, and older ones are eventually replaced by newer ones.
- On your phone only, the app also keeps the time of the most recent crash and when it started counting, so it can show how long it has gone without one. Neither is ever sent.
- We receive a report as an ordinary email, including the address you sent it from, and use it only to find and fix the problem it describes.
Versions of the app made for testers (Google Play’s internal-testing track) also contain developer screens: an AI prompt log, a rewrite-debug view, an AI self-test and a subscription-diagnostics view. The AI screens show, on the phone, the exact text given to the on-device AI model, which can include your draft and, for suggested replies, the last few messages of that conversation. They keep nothing except a report you choose to download, which stays in the app’s cache until cleared, and they make no network request. We build the version of the app published for everyone without these screens.
10. Link safety and link previews
- Link safety is on by default and free. The app checks every link in an incoming message on your phone, using built-in rules that look for warning signs such as a shortened link that hides its destination, an unencrypted address, a look-alike name, a raw IP address or an unusual ending. The result is shown on the notification and in the conversation.
- Your links are never sent to us, to Google or to anyone else for link safety. The checks are rules in the app; they make no request.
- Fetch link previews is a separate setting, off by default. If you turn it on, the app first checks that the phone is online (section 6), then contacts the website a link points to, follows its redirects and reads its title and preview image, identifying itself as NuraTxt. For a YouTube link it asks YouTube’s own preview service. Those sites receive the full link and your IP address and learn that your phone fetched the page before you tapped it, and a one-time link could be used up. When you turn it on, the app also fetches previews for links in messages already in the app. That is why it is off unless you choose otherwise.
- You can turn link safety and link previews off in Settings at any time. A warning is a caution, not a guarantee: it can miss a harmful link or flag a safe one.
11. Optional on-device AI
NuraTxt can offer AI features: rewriting a draft in a different tone, suggesting replies, and understanding questions you ask about your messages. They are off by default, part of the subscription, and run on your phone.
- Third-party models. The AI uses open models made by third-party publishers. Today these are Qwen models by Alibaba Cloud: a language model and a second model that turns text into numbers so the app can compare it, both under the Apache 2.0 licence. We may offer other models in future (for example, models from Google or Meta); the licences page always names the models in use and their licences.
- Nothing happens until you agree. The AI downloads and runs nothing until you turn it on in Settings and confirm the download on a screen that states its size (about 1 GB today). By default the download waits for Wi-Fi.
- The download comes from the public site that hosts the model (today Hugging Face, in the United States, through its content delivery network). Like any download, it reveals your IP address, the time and the file requested to that site, which may keep logs under its own privacy policy. Nothing about you or your messages is sent. The files are checked against a known size and fingerprint before use.
- Everything the model does happens on your phone. It reads the draft you ask it to rewrite; the last few messages of a conversation when it suggests replies; and your question when it helps with a search. While the AI is on, the second model also reads each message you send and receive, on the phone, to keep a numerical index of them; the index stays on your phone and is deleted when you delete the models. Nothing is sent to YugCore or to any AI service, and nothing is used to train any model.
- It can be wrong. Output is a suggestion for you to read before you use it; you choose whether to send anything. The app checks each rewrite and rejects many that change a number, a date or a yes into a no, but it cannot catch every change of meaning, so always read a rewrite before you send it. Search answers are always built from your stored messages, never written by the model.
- Heat and battery. The AI runs only when you ask, or for suggested replies when the phone is cool, not on Battery Saver and the screen is on. If the phone is too warm, it refuses and tells you why.
- Turn the AI off and delete the models in Settings at any time.
12. This website, cookies and analytics
The app never uses analytics. This website asks first.
- Server logs. The company that hosts this website receives, as any web host does, your IP address, the page you asked for, the time, your browser’s user agent and the page you came from. These logs are kept for security and to run the site, for the period the host keeps them and any longer period the law requires (for example, up to 180 days under India’s CERT-In directions); we do not use them to identify anyone.
- Pages without analytics. The Privacy Policy, Terms & Conditions, Your data, Support, Open-source licences and error pages load no analytics and set no cookies.
- Analytics, only with your consent. On the other pages (home, features, how it works, privacy overview, FAQ and subscription), we ask before loading anything. Only if you press Accept do we use Google Analytics, provided by Google LLC (for visitors in the EEA, the UK and Switzerland, by Google Ireland Limited), and PostHog, provided by PostHog, Inc., using its EU cloud (Frankfurt, Germany). They tell us which pages are visited, how visitors arrived, and the type of device, browser, language and approximate location (country or city, derived from the IP address). We have switched off Google’s advertising features, PostHog session recordings and automatic click capture. We use the results only in aggregate, to improve the website.
- Your choice. If you press Reject, nothing is loaded. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a rejection and do not ask. You can change your mind at any time with Cookie settings at the bottom of those pages; withdrawing consent stops the analytics and removes their cookies from this site. Your choice is remembered in your browser for 180 days.
- Google explains how it uses information from sites that use its services at policies.google.com/technologies/partner-sites, including a browser add-on to opt out of Google Analytics everywhere.
- Children. This website is not directed at children. If you are under 18 (or under the age of digital consent where you live), please do not accept analytics.
| Name | Set by | Purpose | Kept for |
|---|---|---|---|
nuratxt-analytics-consent (browser storage) | This website | Remembers your Accept or Reject choice. Strictly necessary; holds no identifier. | Until cleared; you are asked again after 180 days |
nuratxt-theme (browser storage) | This website, only if you use the theme button | Remembers whether you chose the light or dark appearance. Holds no identifier and is not used for analytics. | Until cleared, or until you switch back to System |
_ga | Google Analytics, after Accept | Tells visits from the same browser apart, using a random identifier | Up to 2 years (browsers may shorten it) |
_ga_ followed by an ID | Google Analytics, after Accept | Keeps the state of a visit | Up to 2 years (browsers may shorten it) |
ph_…_posthog (cookie and browser storage) | PostHog, after Accept | A random identifier and the current visit, so visits can be counted | Up to 1 year |
__ph_opt_in_out_… | PostHog, after Accept | Remembers PostHog’s own on/off state | Up to 1 year |
We keep website analytics for no longer than 14 months. Links on this site to email addresses, Google Play and Google’s help pages take you to those services, which have their own policies.
13. Advertising and sale of data: none
- NuraTxt shows no advertising of any kind, and we will not introduce it. The app is paid for by the subscription.
- We do not use an advertising identifier and do not collect device identifiers, location or behaviour for advertising or profiling.
- We do not sell personal information, and we do not “share” it for cross-context behavioural advertising. We share nothing with advertising networks or data brokers.
- We never use message content for advertising, profiling or training anything.
14. Purposes and legal bases
This table covers the personal data we receive. Information that stays on your phone (section 4) is processed by the app on your device for your own use.
| Purpose | Data | Legal basis (EU/UK GDPR) | Basis under India’s DPDP Act |
|---|---|---|---|
| Answering your questions and requests, and supporting you | Emails and what they contain | Performing our contract with you; our legitimate interest in helping people who contact us | Data you voluntarily provided for that purpose (section 7(a)) |
| Finding and fixing bugs | Crash reports you email us | Our legitimate interest in a working app; you choose to send it | Data you voluntarily provided for that purpose (section 7(a)) |
| Subscriptions, refunds, complaints and fraud prevention | Purchase details from Google Play | Performing our contract with you; our legitimate interests | Legitimate uses for the purpose you provided it, and compliance with law |
| Answering ratings and reviews; running tests of the app | Reviews Google shows us; testers’ email addresses | Our legitimate interests; your participation in the test | Data you voluntarily provided for that purpose (section 7(a)) |
| Accounting, tax and other legal duties | Purchase details, correspondence | Legal obligation | Compliance with law (section 7) |
| Running and securing this website | Server logs | Our legitimate interest in a secure, working website; legal obligation | Compliance with law, including logging duties (section 7) |
| Website analytics | Analytics data | Your consent, which you can withdraw at any time | Your consent |
| Establishing, exercising or defending legal claims | Only what is relevant | Our legitimate interests; legal obligation | Compliance with law and court orders |
Where we rely on legitimate interests, we have weighed them against your rights; you can object (section 21). You are never required to email us or to accept analytics, and nothing you do in the app depends on it.
15. Who we share with
- Service providers acting for us: our email provider, our website host, Google (Google Analytics, only after you accept) and PostHog (only after you accept). They may use the data only to provide their service to us.
- Google Play, which sells and manages the subscription as the store and, in many countries, the seller of record, under Google’s own privacy policy.
- Professional advisers, such as lawyers and accountants, under a duty of confidentiality, where needed.
- Authorities and others where the law requires, as described in section 16.
- A successor business. If YugCore or NuraTxt is sold, merged or reorganised, the limited personal data we hold (correspondence and purchase records) may transfer to the new owner, which must keep to this Policy. You would be told.
Your mobile operator, the model host and the websites you open or preview receive information directly from your phone because of how those services work (section 6); we do not send them anything.
16. Legal requests and Google Play
- We disclose personal data to a court, police, regulator or other authority only when we are required to by law, by a valid legal process or order, or where it is necessary to protect someone’s life or safety. We check each request and disclose only what it lawfully requires.
- We can only disclose what we hold: correspondence you have sent us, crash reports you emailed us, and the purchase details Google Play makes available to us (section 7). We do not hold, and cannot produce, your messages, contacts, call history or location. We hold information that may identify you only if you emailed us, posted a Google Play review, joined a test or bought a subscription (section 7).
- Information that Google holds about your Google account, your payments and your use of Google Play is held by Google. We cannot obtain it on request. Anyone who needs it must ask Google, which handles such requests under its own policies (see how Google handles government requests).
- Where the law allows, we will tell you about a request for your data before we disclose anything.
- We may also use the information we hold to enforce our Terms, to protect the rights, property or safety of YugCore, our users or the public, and to respond to fraud or abuse.
17. International transfers
YugCore is based in India, and the personal data we receive is handled in India and by providers who may process it in other countries, including the United States (Google, our email provider) and the European Union (PostHog EU cloud). Where data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions. You can ask us for a copy of the safeguards (section 26). Transfers out of India follow the Digital Personal Data Protection Act and any restrictions made under it.
18. How long we keep data
- On your phone: messages, attachments, settings and what the app works out stay until you delete them in the app, clear the app’s storage, or uninstall. Deleting a message or conversation removes it from every list and search at once and cannot be undone; inside the app’s private storage the record is kept marked as deleted, so that re-importing your history cannot bring it back, until you clear the app’s storage. As your default SMS app, deleting a conversation also asks Android to remove it from the shared message store. Reminders already created from a deleted conversation stay until you mark them done.
- One-time-code clean-up: if you turn on the setting (off by default), the app removes messages it has identified as one-time codes from its lists and search after the period you choose. Like every deletion in NuraTxt, the record is kept marked as deleted in the app’s private storage, and the message is not removed from the phone’s shared message store.
- Attachments: the file of a deleted picture message stays in the app’s private storage until you clear the app’s storage or uninstall.
- Crash reports on your phone: kept until you email them to us and confirm they were sent, or delete them; the time of the most recent crash stays on the phone so the app can say how long it has gone without one.
- Emails and crash reports you send us: for as long as needed to deal with what they concern, then deleted, and in any case for no longer than 2 years after our last exchange, unless the law requires us to keep them longer or they are needed for a legal claim. Where India’s data protection rules require a minimum retention period (currently one year), we keep them at least that long.
- Reviews and test sign-ups: reviews stay on Google Play until you delete them there; testers’ email addresses are removed when the test ends or when you ask.
- Purchase records: Google Play keeps your purchase record under Google’s rules. Our own copies of order and earnings reports are kept for as long as accounting and tax law requires (in India, generally up to 8 years).
- Website: analytics no longer than 14 months; server logs for the short period the host keeps them; your consent choice for 180 days in your browser.
- Earlier Google Drive copies: until 2 September 2026, the app offered an optional, off-by-default feature that uploaded an encrypted copy of your messages to a
NuraTxtfolder in your own Google Drive. It was an encrypted export, not a backup: the key never left the phone, nobody can decrypt those files, and the feature has been retired. On the first launch after the update that retired it, the app turned the feature off and, for people who had used it, signed out of the Google account it had used, which contacted Google once. Any files already in your Drive stay in your Google account until you delete them there; NuraTxt cannot read or delete them.
19. Security and breaches
- Where your data sits. In the app’s private storage on your phone, which Android does not let other apps read.
- Encryption on the phone. That storage is protected by Android’s own file-based encryption, which keeps it unreadable while the phone is locked. NuraTxt does not add its own encryption to its database. On a phone with no screen lock, an unlocked phone in someone else’s hands, or a rooted or infected phone, the app’s data can be read. Please set a screen lock.
- No cloud copy. Because the app sends your messages to no server, there is no copy of them on a server for anyone to breach. NuraTxt also opts out of Android’s automatic app backup and device-to-device transfer.
- Lock screen. You choose whether message text shows on the lock screen. Sending, deleting or marking a reminder done from a notification requires the phone to be unlocked.
- Only from Google Play. If Android reports that a released copy of the app was installed by something other than Google Play, the app shows a button to get NuraTxt from Google Play instead of its normal screens; incoming messages are still received and saved. If Android does not report an installer, the app opens normally. This check is made on the phone and a determined attacker can remove it.
- Data we hold. We protect our email and developer accounts with access controls and two-step sign-in, and limit access to the people who need it.
- If something goes wrong. If a breach affects personal data we hold, we will tell the people affected without undue delay, with what happened and what they can do, and notify the authorities where the law requires — for example the Data Protection Board of India, India’s CERT-In, or an EU or UK supervisory authority, within the time limits their laws set.
- No method of storage or transmission is perfectly secure, and we do not claim otherwise.
20. Children and minimum age
- NuraTxt is a general-purpose messaging app. It is not directed at children under 13, and you must be at least 13 to use it, or older where the law of your country sets a higher age (for example, the age at which you may manage your own Google account, which is 14, 15 or 16 in some countries).
- If you are under 18, or under the age of majority where you live, you may use NuraTxt only with the permission of a parent or guardian, who must agree to the Terms on your behalf and make or approve any purchase. Under India’s Digital Personal Data Protection Act, everyone under 18 is a child.
- The app itself sends no personal data to us from anyone, child or adult. We do not knowingly receive personal data from children, do not track or monitor children’s behaviour, and do not direct advertising at anyone.
- If you are a parent or guardian and believe your child has emailed us or otherwise given us personal data without your consent, write to [email protected] and we will delete it.
21. Your rights
Depending on where you live, you may have the right to: know what personal data we hold about you and receive a copy; have it corrected, completed or updated; have it deleted; restrict or object to our use of it; receive it in a portable form; withdraw consent at any time (without affecting what happened before); nominate someone to exercise your rights if you die or become unable to; and complain to a data protection authority. Section 22 explains the rules in specific places.
- Most of your data is already in your hands. Everything the app holds is on your phone. You can see, change or delete it in the app, and delete all of it by clearing the app’s storage in Android Settings or uninstalling the app, without asking us (see Your data and section 18).
- For data we hold (emails, crash reports you sent, purchase records), email [email protected]. Tell us the email address you wrote from or your Google Play order number so that we can find your records.
- Our response: we acknowledge every request and grievance within 48 hours and resolve it within one month of receiving it. If a request is complex and the law allows more time, we will tell you why within that month.
- Objecting. Where we rely on legitimate interests (section 14), you may object at any time, and we will stop unless we have compelling legitimate grounds or need the data for a legal claim.
- Withdrawing consent: use Cookie settings on the website; turn off link previews, the AI features or the one-time-code clean-up in the app; revoke a permission in Android Settings; or cancel the subscription in Google Play.
- Google’s records of your Google account and purchases are held by Google. Exercise your rights over them with Google, through your Google account.
- We will never treat you differently, charge you more or offer a worse service because you used a right.
22. Rights where you live
India
- Under the Digital Personal Data Protection Act, 2023 and its Rules, you may ask for a summary of the personal data we process and of whom we shared it with, ask for it to be corrected, completed, updated or erased, nominate another person to exercise your rights, and have your grievances addressed. You may withdraw consent as easily as you gave it.
- Contact our Grievance Officer first (section 26). If you are not satisfied with our response, you may complain to the Data Protection Board of India.
- You may ask for this Policy in English or in any language listed in the Eighth Schedule to the Constitution of India.
- Until the Act fully applies, we also follow the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Grievance Officer requirements of the Consumer Protection (E-Commerce) Rules, 2020.
European Economic Area, United Kingdom and Switzerland
- You have the rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent, under the GDPR, the UK GDPR or the Swiss Federal Act on Data Protection.
- You may complain to the data protection authority where you live or work. In the UK this is the Information Commissioner’s Office (ico.org.uk); in Switzerland the FDPIC. We would like the chance to resolve your concern first; we acknowledge complaints within 48 hours and resolve them within one month.
- The legal bases we rely on are in section 14. We do not make decisions about you based solely on automated processing (section 23).
United States
- We do not sell personal information, do not share it for cross-context behavioural advertising, do not process sensitive personal information about you, and do not use or disclose it for profiling.
- Whatever state you live in, you may ask us to tell you what personal information we hold about you, to correct it, or to delete it, by emailing [email protected]. An authorised agent may make a request for you with your written permission. If we decline a request, you may appeal by replying to our answer, and if you are still unhappy you may contact your state attorney general.
- The categories of personal information we receive are: identifiers (an email address, if you emailed us); commercial information (subscription purchase records from Google Play); internet activity (website analytics, only with your consent); and device information (phone model and Android version in a crash report you chose to send). We received them from you and from Google Play, for the purposes in section 14, and disclosed them only as in section 15.
- This website honours Global Privacy Control signals (section 12). We do not disclose personal information to third parties for their own direct marketing.
- NuraTxt is not directed at children under 13, and we do not knowingly collect personal information from them (section 20).
Brazil
- Under the LGPD you may confirm whether we process your data, access, correct, anonymise, block or delete it, receive it in a portable form, learn whom we shared it with, and withdraw consent. Contact our privacy channel at [email protected]. Our legal bases (section 14) correspond to the LGPD’s: consent, performance of a contract, compliance with a legal obligation and legitimate interests. You may also complain to the ANPD (Autoridade Nacional de Proteção de Dados).
Canada
- You may ask to access and correct personal information we hold about you. Our Grievance Officer (section 26) is responsible for our compliance and is the person in charge of the protection of personal information. You may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information. Website analytics are off unless you turn them on.
Australia, Singapore, Japan, South Korea and elsewhere
- You may have similar rights to access and correct your personal information and to complain, for example to the Office of the Australian Information Commissioner, Singapore’s Personal Data Protection Commission, Japan’s Personal Information Protection Commission, Korea’s Personal Information Protection Commission, South Africa’s Information Regulator, Nigeria’s Data Protection Commission or the authority in your country. Write to [email protected] and we will help, whatever the law where you live.
23. Automated decisions
The app’s rules and optional AI help organise your messages on your phone. They do not make decisions about you that have legal or similarly significant effects, and we do not use automated decision-making or profiling on the personal data we receive.
24. Google Play Data safety
Our answers in Google Play’s Data safety section are meant to match this Policy; if they ever differ, this Policy is the one to trust. In summary: message, contact, attachment and phone-number data is processed on the phone so the app can work and is not collected by us; the subscription is handled by Google Play on the phone; the model download is a transfer to the phone that sends nothing about you; the app has no analytics, no crash-reporting library and no advertising identifier; a crash report leaves the phone only when you email it to us yourself. NuraTxt has no account, so there is no account to delete; to delete everything, clear the app’s storage or uninstall it.
25. Changes and revision history
We may update this Policy. When we do, we change the “Last updated” date above and record what changed below. The copy inside the app is updated with the next app release. For a material change, such as a new case in which information leaves the phone or a new use of information, we will also say so in the app’s release notes before the change takes effect, and ask for your consent where the law requires it.
Revision history
- 6 October 2026 — Rewritten for the new website. Added: a one-page summary of what we receive; how purchase details reach us from Google Play and how we use them; emails and support; this website’s cookies and analytics (Google Analytics and PostHog, only with consent, never on the legal and help pages); purposes and legal bases; legal requests, including that Google’s records must be requested from Google; international transfers; retention periods; breach notification; a minimum age of 13 with parental permission below 18; rights by region for India, the EEA, UK and Switzerland, the United States, Brazil, Canada and other countries; a named Grievance Officer with response times; Google Play ratings and reviews and app testers; what the app keeps on the phone about searches and usage time; and that a deleted message’s attachment file stays until the app’s storage is cleared. Clarified that the Play-only check lets the app open when Android cannot name the installer; that link safety uses built-in rules on the phone with no network request, while link previews send the link to its website and can contact YouTube’s preview service; and that the on-device AI uses third-party open models (today Qwen by Alibaba Cloud), downloaded from Hugging Face; while the AI is on, a second model indexes your messages on the phone.
- 5 October 2026 — Crash reports are sent by email instead of through the share sheet: Email this report opens your own email app with the report addressed to [email protected], and you press Send there; the app still makes no network request. The reports are removed from your phone only after you confirm the email went out. The app keeps, on the phone only, the time of the most recent crash and when it started counting days without one.
- 3 October 2026 — Republished as the single source for both the website and the copy inside the app, and rewritten in full: permissions table; what leaves the phone; retirement of the Google Drive copy; the subscription, pending payments and the purchase token; the Play-only installation check; rights under India’s DPDP Act and the GDPR; children; the one-time-code clean-up; developer screens in tester versions. Corrected the same day against the built app.
- 2 October 2026 — Added the subscription for the smart features, sold, recorded and restored by Google Play; the app keeps only an “unlocked until” date on the phone.
- 24 August 2026 — Added the optional crash report; described the Google Drive feature as an encrypted export that could not be restored, not a backup; MMS attachments moved to private storage; the Policy included in the app; privacy contact filled in.
- 17 August 2026 — Removed a “future ad partners” row that contradicted the no-ads section; disclosed the MMS download from the operator.
- 23 July 2026 — First published version.
26. Contact and Grievance Officer
YugCore — NuraTxt Privacy
Email: [email protected]
Postal address: the registered address in section 1
Grievance Officer: [REPLACE_WITH_GRIEVANCE_OFFICER_NAME], Grievance Officer, YugCore
Email: [email protected] (subject line “Grievance”)
We acknowledge every grievance within 48 hours and resolve it within one month of receiving it.
For help using the app, write to [email protected] or see the Support page.