Privacy Policy

The Short Version

Unsent (“the App”, Android package com.oudayet.unsent) reads the notifications of two messaging apps, WhatsApp and WhatsApp Business, so it can keep a copy of each incoming message. Everything it captures stays on your phone. We have no server and no account system, and captured messages, media and voice notes are never sent anywhere. The App shows ads through Google AdMob, and that SDK collects the device information described in section 4. Purchases go through Google Play.

1. What the App Captures — On Your Device Only

1.1 Messages, from notifications

• Only after you turn on notification access for the App in Android’s settings. The App explains what it reads on a screen of its own, and asks you to agree, first.
• Only notifications from WhatsApp (com.whatsapp) and WhatsApp Business (com.whatsapp.w4b). Notifications from every other app are ignored and not stored.
• From each message notification: the chat’s name, the sender’s display name, the message text and when it arrived. When a notification later changes or disappears, the App records whether the message looks deleted, edited (keeping each earlier version of the text) or possibly deleted.
• The App cannot see messages that never arrive as a notification (for example while the chat is open on screen), and it never reads the messaging app’s own database.

1.2 Photos, videos and voice notes (optional)

• If you grant photo and video access, the App copies new photos and videos from WhatsApp’s own media folder as they arrive. It does not copy your camera photos or other folders.
• If you pick the WhatsApp voice notes folder in the App, it copies new voice notes from that folder only.
• Copies are kept in the App’s private storage, which other apps cannot read. Viewing them is a Pro feature.

1.3 Settings

• Whether setup is finished, how long to keep messages, and which Pro plan Google Play last reported (so Pro works offline).

1.4 How it is protected

• Captured messages are stored in a database encrypted with SQLCipher. Its key is itself encrypted by a key held in Android’s hardware-backed keystore, which never leaves the phone.
• The App is excluded from Android backup and from device-to-device transfer: nothing it stores is copied to your Google account or to a new phone.

2. Network Access

• The App’s own code never sends captured messages, media or voice notes anywhere. There is no server of ours to send them to.
• The internet permission is used by two Google libraries only: the Google Mobile Ads SDK (ads, section 4) and Google Play Billing (purchases, section 5).
• Links you tap, such as this policy, open in your browser.

3. Permissions

• Notification access: to capture messages as described in 1.1.
• Photos and videos (optional): to copy chat media as described in 1.2.
• Notifications: for the App’s own ongoing “Unsent is protecting your messages” notification while capture runs.
• Unrestricted battery (optional), start at boot and a foreground service: so capture keeps working after a restart and on phones that stop background apps.
• The App asks for no SMS, contacts, location, microphone or accessibility permission.

4. Advertising (Google AdMob)

• Free users see a banner ad on the home screen, provided by Google AdMob, a service of Google LLC.
• The Google Mobile Ads SDK collects and shares with Google: your device’s advertising ID, your IP address (from which an approximate location is derived), information about your device and the App, ad interactions, and diagnostic data. Google uses it to serve and measure ads, and to prevent fraud. It never receives your captured messages.
• In the European Economic Area, the United Kingdom and Switzerland, the App asks for your consent through Google’s consent form before any ad is requested. You can change your choice any time in Settings → About → Ad choices.
• You can reset or delete your advertising ID in Android’s settings (Google → Ads, or Privacy → Ads, depending on the phone).
• Unsent Pro removes ads: the ads SDK is not started for Pro users.
• See how Google uses information from apps that use its services.

5. Purchases

Unsent Pro (monthly, yearly or lifetime) is sold and processed entirely by Google Play. The App never sees your payment details; it only stores which plan Google Play reported. Subscriptions are managed and cancelled in Google Play. Google’s handling of the payment is covered by the Google Privacy Policy.

6. What We Do Not Collect

• Your captured messages, media and voice notes: they stay on your phone
• Your name, email address, phone number or any account: there is no sign-up
• Contacts, SMS, call logs or precise location
• Analytics or crash reports: the App contains neither

7. Data Retention & Deletion

• Captured messages and media are deleted automatically after the retention period: 7 days for free users; for Pro, the period you choose (7 days, 30 days, 90 days, 1 year or forever).
• Uninstalling the App, or clearing its storage in Android’s settings, deletes everything it captured at once.
• Turning off notification access stops capture.
• Data collected by Google AdMob is held by Google under its own policy (section 4).

8. Other People’s Messages

The messages Unsent keeps were sent to you, and they stay on your phone. Please respect the people who sent them, and the law where you live, in what you do with them.

9. Children’s Privacy

Unsent is intended for adults (18+) and is not directed at children.

10. Changes to This Policy

If this policy changes, the effective date above changes first, before the version of the App it describes is released.

11. Contact

Questions about this policy or your data:

Email: contact@oudayet.com

Unsent is made by Naim Oudayet, in Tunisia. It is not affiliated with, endorsed or sponsored by WhatsApp or Meta.