Privacy Policy — TextHook

Last updated: 29 June 2026

1. Who We Are

TextHook is developed and operated by Narrative Systems Ltd ("we", "us"). For any questions or requests about this privacy policy, contact us at texthook_support@narratem.com.

2. Data We Access On Your Device

TextHook accesses the following data on your device solely to provide its core forwarding functionality:

Incoming SMS messages — the message body and the sender's phone number, to evaluate whether they match filter rules you have configured.
Contact display names — looked up locally on your device when you configure a rule that matches by contact name (Pro feature). Contact data is not stored beyond the match operation.
Notification permission — used to show an ongoing notification letting you know TextHook is active and listening for incoming SMS (and, if you enable it, notifications from the apps you select). This is a transparency signal only; TextHook does not run a foreground service.

TextHook does not read your SMS history, sent messages, draft messages, or any messages that do not match a rule you have configured.

3. What Is Transmitted Off Your Device, To Whom, and When

When an incoming SMS matches a filter rule you have configured, TextHook transmits the following data to the HTTP webhook URL you explicitly specified in the app:

The SMS message body
The sender's phone number
The contact display name associated with the sender (only if your rule is configured to include it — Pro feature)
The timestamp of the message

This data is sent only to the URLs you have entered in TextHook. Those URLs may point at your own server or at a third-party service you use — for example a Discord or Telegram channel, a Slack workspace, or an automation tool. You are responsible for the privacy and security practices of those endpoints. TextHook has no influence over, and is not responsible for, how third-party webhook services handle your data.

4. Notification Content (Optional, Pro)

If you enable app-notification monitoring, TextHook reads notifications from the apps you select (for example WhatsApp, Telegram, or any other app that posts notifications) on your device, solely to forward those messages to the destination you configure. This content is processed on your device and transmitted only to your chosen endpoint (your webhook, Discord channel, Telegram bot, or email). We do not collect, store on our servers, sell, or share it. The feature is off by default, is limited to the apps you turn on, and can be disabled at any time in Settings or by revoking notification access in your device settings.

5. TextHook Has No Servers

TextHook does not operate any servers or backend infrastructure. No SMS content, phone numbers, or personal data is ever sent to us. All data processing occurs on your device, and all forwarded data goes only to endpoints you have configured.

6. Third-Party Services Within the App

Google Play Billing — used to process the optional one-time Pro upgrade purchase. Purchase data is handled entirely by Google. See Google's Privacy Policy.

TextHook does not include any analytics, crash-reporting, or advertising SDKs.

7. On-Device Data Retention

TextHook keeps a local log of forwarding activity (which rules matched and whether the webhook call succeeded). Free users' logs are retained for 7 days. Pro users can configure retention between 1 and 90 days. Logs are stored only on your device and are never uploaded to us.

Pending retries (queued forwards waiting for a network connection) are automatically discarded after 7 days if undelivered.

8. Children

TextHook is not directed at children under the age of 13. We do not knowingly collect any information from children. If you believe a child has used the app, contact us and we will assist with data deletion.

9. Your Rights and How to Delete Your Data

Your data stays on your device. You can remove it at any time:

In-app: Settings → Delete all data. This permanently wipes all rules, webhooks, logs, and preferences from your device.
Uninstall: uninstalling the app removes all local data.

TextHook runs no servers and keeps no copy of your data, so there is nothing held on our side to delete on request. For any privacy questions, contact texthook_support@narratem.com.

As a UK resident, you have rights under the UK GDPR and Data Protection Act 2018, including rights of access, rectification, erasure, restriction, portability, and objection. To exercise any of these rights, contact us at the email above.

10. Data Security

In transit: all webhook calls use HTTPS. Cleartext HTTP is not permitted, so your data never leaves the device in unencrypted form.
At rest: custom header values you add to a webhook (for example an Authorization header) are encrypted using AES-256-GCM via the Android Keystore. The webhook URL itself — which for some services such as Discord or Telegram contains an access token in the address — and your other rules and settings are held in the app's private, non-exported storage. The app does not allow its data to be backed up off the device.

11. Changes to This Policy

If we make material changes to this policy, we will update the "Last updated" date above. We recommend checking this page periodically. Continued use of the app after a change constitutes acceptance of the updated policy.

12. Contact and Complaints

For privacy questions, data-deletion requests, or any complaints, contact: texthook_support@narratem.com.

If you are not satisfied with our response, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.