Privacy Policy
Privacy Policy — OneReply: Auto Reply for All
1. What OneReply does
OneReply is an auto-reply app for Android. With your permission, it reads incoming notifications from messaging apps you choose (WhatsApp, WhatsApp Business, Telegram, Facebook Messenger, Instagram, and SMS) and sends automatic replies on your behalf using Android's built-in notification reply feature. The app does not use official messaging APIs and is not affiliated with WhatsApp Inc., Meta, or Telegram.
2. Data we collect and why
2.1 Notification content (messages)
- What: the text of incoming message notifications, sender names, the messaging app they came from, and timestamps — only for the messaging apps you explicitly enable.
- Why: this is the core function of the app — without reading the notification, it cannot generate a reply.
- Where it goes: processed locally on your device. It is stored in the app's private on-device database only to show your reply log, and never transmitted to our servers.
2.2 Your reply rules and settings
- What: the auto-reply rules, schedules, keywords, and preferences you create.
- Why: to execute your rules. Stored only on your device.
2.3 Purchase information
- What: when you buy PRO, Google Play processes the payment. We receive only a purchase token and subscription status from Google Play Billing — we never see or store your card or payment details.
2.4 Diagnostics (optional)
- What: if you opt in, anonymous crash reports and basic usage statistics (e.g., which features are used) to fix bugs and improve the app.
- Diagnostics never include message content or sender names.
3. Permissions we request — and why
- Notification access — the essential permission. Used solely to read incoming message notifications from the apps you enable and to send replies. We do not read notifications from apps you did not enable.
- Run in background / ignore battery optimizations — so auto-reply keeps working when your screen is off. You can revoke this anytime; the app will simply pause.
- Internet — used only for optional features you turn on: AI smart replies and license verification. Core auto-reply works fully offline.
4. AI smart replies (optional, off by default)
AI replies are off by default and only run when you explicitly enable them per rule.
- Bring-your-own-key mode: if you enter your own API key (OpenAI, Google Gemini, or a custom provider), message text is sent directly from your device to that provider to generate a reply. We never see it. That provider's privacy policy then applies.
- Included AI quota: if you use the AI quota included with PRO, requests go through our secure proxy which enforces your quota and strips unnecessary personal details. We do not store your messages on the proxy.
- We never train AI models on your messages.
5. What we NEVER do
- We never sell, rent, or share your messages or personal data with advertisers or data brokers.
- We never upload your message content or contact list to our servers.
- We never read notifications from apps you did not enable.
- We never revoke or downgrade a purchase you made — lifetime PRO stays lifetime.
6. Data retention and deletion
- Your messages, reply log, and rules live in the app's private storage on your device.
- Deleting the app permanently deletes all of it. You can also clear the reply log anytime inside the app (Log tab → Clear).
- Purchase records are kept by Google Play under Google's own policy.
7. Data security
Because message data stays on your device, there is no central server of your chats to be breached. The app's local database is private to the app (other apps cannot read it), and any network calls (AI, license checks) use encrypted HTTPS connections. No method of transmission or storage is 100% secure, but we minimize risk by minimizing collection.
8. Children's privacy
OneReply is not directed at children under 13, and we do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
9. Your rights
Depending on your region (including GDPR in the EU/UK and similar laws), you may have the right to access, correct, delete, or restrict processing of your personal data. Since your data stays on your device, you can exercise these rights directly: view everything in the app's Log and Rules screens, delete it there, or uninstall the app. For anything else, email us at the address above.
10. Changes to this policy
We may update this policy as the app evolves. Material changes will be announced in the app and the "Effective date" above will be revised. Continued use of the app after changes means you accept the updated policy.
11. Contact us
Questions about this policy or your data: mjtechbharat@gmail.com. We aim to reply within 7 days.