> cat simshift/privacy.md
How the SIM Shift app handles data: what stays on the phone, what, in a few cases, leaves the device, and how to delete everything.
01 — Controller
Massimo Greco — Italy
e-mail: mg [at] bn-dev.it
or the site's contact form (in Italian)
The data you enter in SIM Shift stays on your device, so the controller has no access to it and does not process it. The controller only processes the data you send yourself by writing to the contact address (your e-mail address and the content of your message). It is used to reply to you and kept for as long as needed to handle your request.
02 — What it does
SIM Shift decides, call by call, whether your phone should ring. It does so through Android's call screening service: when a call comes in, Android gives the app the caller's number and the app answers whether to let it ring, silence it or reject it, based on each SIM's schedule, the number lists and the rules you have set. It does not record conversations and has no access to audio.
03 — Data on the phone
The first test versions also wrote a diagnostic file, which could contain the caller's number: this feature has been removed and the app deletes the old file by itself when it updates.
All this data is kept in the device storage reserved for SIM Shift, which other apps cannot read. It is never sent to the developer or to third parties.
04 — Permissions
| Permission | Why |
|---|---|
Phone state (READ_PHONE_STATE) | To get the list of installed SIMs and find out which SIM a call is ringing on. The app does not read the SIM's phone number or the IMEI. |
Contacts (READ_CONTACTS) | To know whether the caller is in your contacts, for the rules on numbers not in contacts, and to show the contact's name instead of the number in the log. The name is looked up on the spot, when you open the log, and is not saved: your contacts are neither copied nor stored. Without this permission the log shows only numbers. |
| «Caller ID & spam app» role | The Android role that lets one app at a time screen incoming calls. You grant it yourself in Android's settings and can revoke it at any time. |
Versions downloaded from bn-dev.it also request the two permissions described in section 05. SIM Shift does not request access to Android's call history, SMS, location, microphone, camera or photos.
Hidden or unknown numbers do not reach the call screening service: Android does not pass them to the app, so they cannot be filtered.
05 — Internet
It depends on how you got the app.
| Connection | When | What the app sends |
|---|---|---|
| Update check | At startup and when you choose to check | None of your data: it reads a small file from the site (latest.json) with the latest version number. |
| Update download | Only if you accept | None of your data: it downloads the package from the site. |
To connect, the app uses the INTERNET permission. To install the update it uses REQUEST_INSTALL_PACKAGES and hands the package to Android's installer, which always asks for your confirmation; Android also asks you, once, to allow the app to install packages.
The app sends the site no installation count and nothing you have set in it.
As with any website, for technical reasons the server receives the IP address and the standard request information, and the hosting provider may record them in its system logs, kept according to its own retention periods. Legal basis: legitimate interest in server security. The controller does not use them to identify who uses the app.
The Google Play version has no permission to use the Internet and does not connect to any server: it does not look for updates (the store takes care of that) and sends no count. Processing by the store is governed by Google's terms.
06 — Backup
SIM Shift is excluded from Android's automatic backup to your Google account and from automatic data transfer to a new phone: schedules, lists and log are not copied anywhere unless you decide so.
The backup you make. From the Backup page in the settings you can save a copy of your data in a .zip file: SIM names and recognition data, schedules, lists, the call log (with numbers) and settings. The app saves the file on the phone, in the folder you choose; if you turn on automatic backup, it is updated every time the app is closed. SIM Shift does not send it to anyone: if you choose a folder synced with a cloud service (for example Google Drive) or share it with «Share backup», from then on the file is handled by that service or by whoever receives it. The backup contains phone numbers: store and share it with care. With «Restore backup» you load it again, even on a new phone.
07 — Deletion
Data stays on the device until you delete it. You can do so:
08 — Security
Data is kept in the device storage reserved for the app; its protection also depends on the device, so we recommend using a screen lock. SIM Shift is not aimed at children and does not carry out profiling or targeted advertising.
09 — Rights
Under Regulation (EU) 2016/679 (GDPR) you can request access to the personal data concerning you, its rectification or erasure, the restriction of processing, and object to processing, by writing to the e-mail address or using the contact form given in section 01.
The controller does not hold the data kept in SIM Shift, because it is only on your device: to view, change or delete it you can use the app's own functions described in section 07.
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali) or with the supervisory authority of the country where you live.
10 — Changes
This policy may be updated to reflect changes to the app, to the way it is distributed or to the law. The version in force is always published at this address, with the date of the last update at the top. If the versions differ, the Italian text prevails.