Last updated: October 2026
This Privacy Policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Legislative Decree 196/2003 as amended, and in compliance with Google Play Store Developer Policies regarding the use of high-risk permissions (Default SMS Handler, READ_SMS, SEND_SMS, RECEIVE_SMS, READ_CONTACTS, READ_PHONE_STATE).
The Data Controller is the entity that determines the purposes and means of the processing of personal data:
Pursuant to Article 28 of the GDPR, the Data Controller utilizes third parties designated as Data Processors:
The GenioSms application is designed to operate as a local SIM-based SMS Gateway (SIM-based SMS Gateway / App Bridge) with bidirectional communication (A2P and P2A) between the mobile device and the Cloud/CRM server.
The application does not store, save, or maintain any historical archive of SMS messages or contacts in the internal memory or local databases of the mobile device. The App receives sending commands and processes incoming messages on the SIM exclusively in volatile memory (RAM) for the sole purpose of forwarding them via API/Socket to the server, clearing the memory immediately after execution.
To ensure real-time synchronization, the App uses resilient background services and system WakeLock management (operating even in Deep Doze state when the screen is off). These system resources are used exclusively to maintain network connectivity and process SMS messages, without tracking geographical location or collecting unrelated data.
To fulfill its primary functions as an SMS Gateway and Bridge, GenioSMS requires the activation of the following high-risk Android permissions:
Justification: Android requires any application intended for automated sending, receiving, and rerouting of SMS messages over the cellular network to be set by the user as the default SMS app. Without this role, the Gateway service cannot function.
RECEIVE_SMS, SEND_SMS, READ_SMS, RECEIVE_MMS):
Justification: Required to intercept incoming SMS messages on the SIM (for forwarding to the CRM server) and to physically execute SMS delivery commanded by the platform or programmatic automations. (Note: To protect privacy, the app does not use the WRITE_SMS permission, confirming the absence of modifications or writing to the device's local message store).
READ_CONTACTS):
Justification: Used exclusively to associate the sender/recipient identifier (name/surname) in the address book with the phone number during message transit to the Dashboard. Contacts are never saved locally, sold, or profiled.
READ_PHONE_STATE):
Justification: Detects cellular network status, SIM card operational status, and signal strength to prevent routing errors and ensure load balancing.
For incoming messaging flows (P2A - Person to Application): SMS messages received on the SIM (e.g., survey responses or opt-out commands like "STOP") are forwarded to the CRM server. Data is processed solely to execute the automated action requested by the user (e.g., Opt-In subscription or Opt-Out list removal).
Users may at any time exercise their rights under the GDPR regarding the Data Controller (Access, Rectification, Erasure/Right to be Forgotten, Data Portability, and Revocation of permissions by uninstalling the app or removing it as the default SMS app).
To exercise these rights, users may write to: geniosms.com@gmail.com. Users also have the right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).
The Data Controller reserves the right to update this Privacy Policy to adapt it to regulatory developments or technical changes in the App. Updates will be published on the official web page with the revised date.