Privacy Policy

1. Scope, identity and interpretation

This Privacy Policy (the “Policy”) describes the information-handling practices applicable to Nolvune SMS for Android (the “Application”), its optional backup and purchase functionality, the website at nolvune.com (the “Website”) and related support correspondence. The Application and Website are provided by Sunisoft Limited (“Sunisoft”, “we”, “us” or “our”). Privacy enquiries may be directed to support@sunisoft.com.

For the purposes of this Policy, “processing” includes access, use, storage, transmission and deletion, as the context requires. A reference to processing by the Application does not, of itself, signify collection by or transmission to Sunisoft. The distinction between information processed locally and information received in connection with support, transactions or Website operation is set out in the provisions below.

2. Categories and purposes of local processing

Subject to the Android permissions and roles assigned to it, the Application accesses Android’s system message store and maintains supporting records in its private storage. Such processing is undertaken for the provision of the messaging and management functions you invoke and comprises the following categories:

• Message records. SMS and MMS content, sender and recipient numbers, attachments, timestamps and drafts, as required to receive, transmit, display, search, classify, back up and restore messages.
• Configuration and classification records. Sender and keyword rules, the rule associated with a filtering decision, and Application preferences, retained within the Application’s private storage.
• Contact information. Where access is granted, contact names and photographs for conversation identification and recognition of known senders. The address book is not uploaded or included in exports.
• SIM and subscription information. Information used to select a sending SIM and identify the SIM through which a message was received.
• User-selected files. Attachments, backup files and other items made available through Android’s file or photo picker, with access limited to the items selected.

Filtering determinations are made locally upon receipt of a message. The foregoing records are not transmitted to a Sunisoft-operated server by the Application. Carrier delivery, exports expressly initiated by you and information voluntarily included in support correspondence are addressed separately in this Policy.

3. Device permissions and access controls

The Application requests designation as the default SMS application before requesting the messaging permissions associated with that role. Additional access is used only for the corresponding functionality, subject to Android’s permission model:

• Contacts access permits the presentation of contact names and photographs. In its absence, the Application relies on numbers and available sender initials.
• Phone-state access supports SIM selection and identification.
• Notification permission enables incoming-message alerts and associated actions, including reply and marking a message as read. Lock-screen disclosure remains subject to your Android notification settings.
• Internet connectivity permits the Application’s direct communication with Google Drive for backup and restoration. MMS transport is mediated by Android’s MMS service and the carrier; purchase processing is mediated by the Google Play application.

Permissions may be withdrawn through Android settings. Withdrawal takes effect in accordance with the operating system and may render the dependent functions unavailable.

4. Carrier-mediated transmission

Transmission and receipt of SMS and MMS necessarily involve your mobile carrier, the recipient’s network and the communications infrastructure used by those providers. MMS additionally uses mobile data and the carrier’s MMS service. Such traffic is processed by the relevant providers under their own terms and privacy arrangements, and may give rise to carrier charges.

5. User-directed backup operations

5.1 Local export and restoration

At your direction, the Application may create a message archive or rule file at a location selected by you, or read an existing file for restoration. Message archives are encrypted on the device using a password specified by you, with AES-256-GCM encryption and a key derived using PBKDF2-HMAC-SHA256. Rule files are exported as readable JSON, may contain telephone numbers and keywords, and are not encrypted.

5.2 Optional Google Drive storage

Use of Google Drive functionality requires authorization through Google’s account services. The requested access is confined to the Application’s private application-data folder in Drive and does not confer access to your other Drive files. The account identifier and access credentials required for the connection are handled on your device through Google’s authorization services.

• Message archives are encrypted before upload. Neither the archive nor its password or encryption keys is received by Sunisoft; a forgotten password cannot be recovered by us.
• Rule backups retain their readable JSON format when uploaded and do not acquire message-archive encryption merely by being stored in Drive.
• File metadata, including names, sizes and timestamps, is available to Google. Storage and associated processing by Google are subject to the Google Privacy Policy.

The Application’s private storage is excluded from Android’s automatic application backup and device-to-device transfer. This exclusion does not govern Android’s separate system message store or copies maintained by other applications or services.

6. Payment processing and entitlements

Acquisition of Nolvune Pro is administered through Google Play, which processes payment details, subscriptions and purchase history. The Application queries Google Play and verifies Google-signed purchase data locally for the purposes of establishing, maintaining and restoring Pro entitlements. The resulting entitlement record is cached on the device and excluded from Application backups. Sunisoft does not operate a payment-processing server or receive payment-card details.

Google makes limited transaction records available to Sunisoft, which may include order references, products, transaction dates, amounts and country or region. Those records are used for accounting, tax, refunds and purchase-related support. Google Play and Google’s authorization services may separately process service diagnostics and identifiers in accordance with Google’s privacy policy.

7. Support correspondence

Where you contact us by email, Sunisoft receives your email address and the information you elect to provide. Such information is used to assess, respond to and resolve the relevant enquiry, and retained to the extent necessary for those purposes and the maintenance of related records.

Backup passwords should not be submitted to support. Message archives or private message content should be provided only to the extent necessary for a specific support request; irrelevant personal information should be omitted or redacted.

8. Website operations

The Website does not deploy cookies, analytics, advertising or third-party scripts, and its fonts are served from the Website itself. Hosting infrastructure may nevertheless process standard request and security logs, including IP addresses, browser information and requested pages, insofar as required to deliver the Website and maintain its security.

9. Excluded uses of information

The processing described in this Policy does not include the following activities:

• The display of advertising or the inclusion of advertising, behavioral analytics or crash-reporting SDKs in the Application.
• The sale of personal data, or its disclosure for advertising purposes.
• The server-side inspection of your messages by Sunisoft or their use for training AI models.
• The establishment of a Nolvune user account as a condition of using the Application.

10. Third-party services and recipients

The functionality described above involves the following service providers or independent parties, according to the feature used:

• Google, through Google Play for distribution, payments and subscriptions; Google Play services for account authorization; and Google Drive where you elect to use cloud backup. See the Google Privacy Policy.
• Mobile carriers, for the delivery of SMS and MMS.
• Email and Website hosting providers, for handling support correspondence and Website requests on Sunisoft’s behalf.

These services may process information in locations outside your country of residence, subject to their respective terms and safeguards. Their independent processing is governed by their own privacy notices; applicable requirements concerning Sunisoft’s own processing remain unaffected.

11. Retention, erasure and residual copies

Retention is determined by the nature and location of the record concerned. Deletion within one storage location does not, without a separate deletion action, remove an independently created backup or a record retained by another service.

• System message records remain in Android’s message store until deleted. Uninstalling Nolvune does not necessarily erase those records. Deletion through Nolvune also removes the selected messages from the store available to other applications.
• Application-local records, including drafts, search indexes, rules and preferences, remain until removed, Application storage is cleared or the Application is uninstalled.
• Exported local files remain at the destination selected by you until separately deleted.
• Google Drive backups remain until deleted. Message archives may be deleted within Nolvune; removal of all private backup data is available through Google Drive on the web under Settings → Manage apps → Nolvune SMS → Options → Delete hidden app data.
• Google authorization may be revoked through your Google Account. Revocation of access does not, by itself, erase existing backups.
• Support and transaction records are retained for the purposes identified above and for periods required by applicable record-keeping obligations. Requests for erasure remain subject to any obligation requiring continued retention.

No Nolvune account is maintained for you and, accordingly, no Nolvune account-closure procedure is required. Uninstalling the Application or erasing its data does not cancel a Google Play subscription, which must be cancelled through Google Play. Operational deletion instructions are provided on the support page.

12. Technical and organizational safeguards

Local information is subject to the device’s access controls and Android’s application sandbox. Message archives are protected by password-based encryption, whereas rule JSON files are not encrypted. Connections to Google services use HTTPS.

The effectiveness of these measures depends in part upon the security of your device, the strength and confidentiality of your backup password, and the storage destinations you select. Encryption of a message archive should not be construed as encryption of ordinary SMS or MMS transport.

13. Individual rights and legal bases

You may exercise direct control over locally held information by managing messages, rules and backups, withdrawing Android permissions, or discontinuing use of the Application. Core messaging functionality does not require a Google Drive connection or a paid plan.

Insofar as applicable data-protection law confers rights of access, rectification, erasure, restriction, portability or objection, such rights may be exercised in relation to information processed by Sunisoft, subject to the conditions and exceptions prescribed by that law. For information held only on your device or in a backup under your control, the corresponding controls are those described in Section 11.

Where a legal basis is required, processing of support correspondence is undertaken on the basis of our legitimate interest in responding to enquiries; transaction-related processing is undertaken for performance of the relevant contract and compliance with applicable legal obligations, as appropriate to the purpose concerned. Nothing in this Policy limits a right that cannot lawfully be limited.

Requests concerning information held by Sunisoft may be submitted to support@sunisoft.com. We will respond within the period required by applicable law. Where provided by law, you may also lodge a complaint with the competent data-protection authority.

14. Age-related provisions

The Application is a general communications utility and is not directed to children under 13 or the applicable minimum age in their country. Sunisoft does not knowingly collect children’s personal information through a Sunisoft-operated service. If you believe such information has been supplied to us in support correspondence, notify us so that it can be deleted.

15. Revisions and effective date

Revisions to this Policy will be reflected on this page together with the applicable effective and last-updated dates. Where a revision materially affects the processing described herein, notice will also be provided within the Application or on the Website before the revision takes effect. Any additional notice or consent requirements imposed by applicable law remain unaffected.

16. Privacy enquiries

Correspondence concerning this Policy or Sunisoft’s processing of personal information should be addressed to Sunisoft Limited at support@sunisoft.com.