Privacy Policy

Missed Call Text Back — Android app and web portal
Operated by NT Digital, Auckland, New Zealand
Contact: https://web.missedcall.co.nz/

Last updated: June 9, 2026

This policy explains what data the Missed Call Text Back app and web portal collect, why, and what we do with it. We’ve tried to write it in plain language. If anything is unclear, contact us at the link above.

The short version

The app sends SMS replies using your own phone number and SMS plan. We do not route SMS through any server. Your carrier sees the message; we don’t.
We store your auto-reply templates, your activity log (which numbers you replied to and when), and your account details on our server so they sync to other devices and the web portal. We do not store the content of inbound SMS or anyone’s contact list.
We do not sell or share your data with third parties for advertising. We use Stripe for payments and Google Play for delivery — both have their own privacy policies.
You can delete your account at any time. Contact us at the link above and we will remove your data within 30 days.

What the app accesses on your phone, and why

Permission	What it’s used for
`READ_CALL_LOG`	To detect when you missed a call (no answer for X seconds). Required for the core feature.
`READ_PHONE_STATE`	To know when the phone rings and stops ringing without being answered.
`SEND_SMS`	To send the auto-reply text from your own number.
`POST_NOTIFICATIONS`	To show you a notification when a reply has been sent.
`INTERNET` / `ACCESS_NETWORK_STATE`	To sync your templates and account with our server.
`FOREGROUND_SERVICE` / `FOREGROUND_SERVICE_DATA_SYNC`	To keep the missed-call listener running reliably in the background.
`RECEIVE_BOOT_COMPLETED`	To restart the missed-call listener after your phone reboots.
`REQUEST_IGNORE_BATTERY_OPTIMIZATIONS`	To ask Android not to kill the listener on aggressive battery savers.

The app does not access your contact list, photos, microphone, camera, location, or files. The READ_CALL_LOG access is used only to detect the missed-call event; we don’t read your call history beyond the most recent ring event, and we don’t send it to our server.

What we collect on our server

Account: your email address, a password hash (we never see your password in plain text), your name, and your business name if you provided one
Plan and billing state: your subscription tier, trial dates, and (if you’ve paid) a Stripe customer ID
Auto-reply templates: the text of the templates you’ve written, plus metadata like time-of-day rules and whether each is active
Activity log: records of replies sent — the phone number replied to (which we receive from your phone, since that’s the number that called you) and the timestamp. Retention depends on your plan (Starter: 3 days, paid plans: longer). We do not store inbound SMS content.
Team membership: if you’re a manager, the list of staff linked to your account; if you’re staff, the manager you’re linked to

We do not collect device identifiers, location, advertising IDs, contact lists, photos, or any analytics about how you use the app. We do not embed third-party SDKs that track you.

Who we share data with

Stripe — only the data needed to process your subscription (your email, the plan you chose, your payment method). Stripe stores your card details, not us. https://stripe.com/privacy
Google Play — distribution of the app itself, governed by Google’s policies.

That’s the entire list. We do not sell your data, share it with advertisers, or use it for any purpose other than running the service for you.

How long we keep your data

While your account is active: as described above (activity-log retention follows your plan).
After you delete your account or stop paying: we keep account-level data for up to 90 days for billing-dispute and abuse-investigation purposes, then delete it. Templates and activity are deleted within 30 days.
If you ask us to delete your data immediately, we will do so within 30 days, except where legally required to keep specific records (e.g. tax records related to your payments).

How to delete your account or data

Two ways:

Email or message us via the contact link at the top of this page, asking for account deletion.
(If signed in) Log into the web portal at https://web.missedcall.co.nz/ and use the account-deletion option, when available.

We will confirm the deletion in writing and remove your data within 30 days.

Security

All connections between the app, the web portal, and our server use HTTPS.
Passwords are stored as salted hashes using WordPress’s built-in hashing (currently PHPass / bcrypt).
Session tokens used by the app are bound to your account and can be revoked individually if you sign out from a device.

We can’t guarantee perfect security — no online service can — but we follow standard practices and we don’t store anything we don’t need to.

Children

This is a business tool for missed-call handling. It is not directed at children under 13, and we do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it.

International transfers

We are based in New Zealand and our server is hosted on infrastructure in New Zealand or Australia. Stripe processes payments in their regions, which may include the United States. If you use the app from another country, your data is transferred to and processed in our region.

Your rights

Depending on where you live, you may have rights under your local privacy law (e.g. New Zealand Privacy Act 2020, the EU GDPR, Australian Privacy Act 1988) to:

Request a copy of the data we hold about you
Ask us to correct inaccurate data
Ask us to delete your data (subject to limits above)
Object to or restrict certain types of processing
Lodge a complaint with your local privacy regulator

To exercise any of these rights, contact us at the link at the top.

Changes to this policy

We may update this policy when we change features that affect what we collect or how we handle it. The “Last updated” date at the top reflects the latest change. If the change is significant, we’ll let you know in the app or by email.