SMS Permission Notice

This notice explains the personal data Inly collects when you grant SMS permission so the app can turn eligible financial messages into expense insights.

Shown before or when Inly requests READ_SMS (and related) permission, including the in-app SMS disclosure.

Full policy: Privacy Policy · All privacy notices

1. Personal data collected

• SMS message content for messages that Inly classifies as relevant (for example: transactions, banking, bills, subscriptions, delivery, travel, and appointments)
• Sender ID / sender address of those messages
• Transaction references and extracted entities (such as amounts, merchants, account or card hints, booking or tracking IDs, and due dates, where present in the message)
• Derived spending categories and related money insights generated from eligible financial SMS
• OTP-category SMS metadata may sync only after OTP / PIN digits are masked on-device (raw OTP or PIN codes are not uploaded)
• Sync metadata (for example sync type, device timestamp, language preference, and install source) together with account / device identifiers needed to associate the sync with your install

2. Purpose of collection

• Classify financial and transactional alerts on your device
• Extract spending, bills, subscriptions, and related money signals
• Generate summaries, insights, and spending analysis
• Sync eligible classified messages (encrypted in transit) so features such as chat context and cross-device continuity can work

3. Required or optional

Optional. SMS permission is optional. You can decline or choose “Not now.” Without SMS access, automatic expense tracking and SMS-based insights will not work as designed; other parts of the app may still be available.

4. Full Privacy Policy

See the full Privacy Policy at https://inly.digital/privacy/.

5. Withdrawing consent

• Revoke SMS permission anytime in Android: Settings → Apps → Inly → Permissions.
• You may also decline the in-app SMS disclosure and enable permission later.
• Local classified data is removed when you uninstall the app. For server-side deletion requests, email apps@appkhichadi.com.

Additional notes

• Inly reads SMS on-device to classify them. Personal / conversational SMS, promotional, alert, and fraud categories stay on the device and are not uploaded.
• Raw OTP / PIN values are masked before any OTP-category sync. Never share an OTP with anyone, including Inly support.

Data Fiduciary: Appkhichadi DXP Private Limited (Inly). Questions: apps@appkhichadi.com.