Privacy Policy
Last updated: June 13, 2026
1. Overview
CatchMsg (the "Service") is committed to protecting your privacy and collecting only the minimum information necessary to operate the Service.
2. Information We Collect
2.1 Information synced to our servers
| Category | Data collected | Purpose |
|---|---|---|
| Anonymous device identifier | Anonymous UUID (no login, no email) | Minimum identifier for entitlement assignment and anonymous statistics — does not identify you personally |
| Abuse-prevention identifier | SHA-256 hash of a device value (raw ID never sent) | Enforces the one-device-one-time limit for free trials and referral rewards (abuse prevention) |
| Anonymous usage statistics | Integer counts such as catch totals | Anonymous aggregates for service improvement — no message content |
| Entitlement status | Free / Trial / Pro status and expiry date | Providing Pro features and managing trial / referral extensions |
| Referral code records | Referral code and redemption records | Powering the friend-referral extension feature |
2.2 Information stored on-device only (never sent to servers)
| Item | Storage location | Retention | Purpose |
|---|---|---|---|
| Catch rules | Device local storage | Until you delete them | Keyword / room / sender matching rules |
| Caught message text & snippets | Device local storage | Free: 14 days / Pro: unlimited | Displaying catch history and reports |
| Sender names & room names | Device local storage | Same as catch records | Showing source context in history and reports |
Contacts access: The Service does not access your device contacts and does not request contacts permission. Sender and room names are read from the information already shown by the messenger in its notifications.
3. Notification Listener Permission
The Service uses Android's Notification Listener permission to catch keywords and senders.
| Item | How it is handled |
|---|---|
| Notification content analysis | Keyword and sender matching is performed entirely on your device. Message text is never sent to our servers. |
| Target apps | Only notifications from the messengers you choose to catch (KakaoTalk, Line, Telegram, Instagram, Facebook Messenger, WhatsApp) are processed. |
| Revoking permission | You can disable notification access at any time in system settings or within the app. Catching stops immediately when permission is revoked. |
4. How We Use the Information
- Service delivery: Determining and providing your entitlement level (Free / Trial / Pro)
- Abuse prevention: Enforcing the one-device-one-time limit on free trials and referral rewards
- Friend referrals: Issuing referral codes and extending entitlements for both parties
- Service improvement: Anonymous statistical analysis that does not identify individuals
5. Third-Party Sharing and Data Processing
We do not sell your information or share it for advertising purposes.
| Sub-processor | Processing activity | Data involved |
|---|---|---|
| Supabase, Inc. | Anonymous authentication, entitlement and anonymous statistics storage | Anonymous UUID, device identifier hash, integer statistics, entitlement status |
| Google LLC (Google Play Billing) | Processing Pro in-app purchases | Google-account-based purchase token (applied at launch) |
Data may be stored in secure overseas cloud infrastructure (Supabase, Asia region). All data in transit is encrypted with TLS.
6. Retention Periods
| Data | Retention period | Deletion method |
|---|---|---|
| On-device catch records (Free) | 14 days | Automatically expired and deleted |
| On-device catch records (Pro) | Unlimited | When you delete them or uninstall the app |
| Server anonymous device & statistics records | Duration of service use | Deleted on request or after extended inactivity |
| Abuse-prevention device hash | Retained for abuse-prevention purposes | Deleted on request |
7. Data Deletion
7.1 When you uninstall the app
Uninstalling the app removes all catch rules, catch records, and message text stored on your device.
7.2 Requesting deletion of server data
To request deletion of anonymous data stored on our servers (anonymous UUID, device hash, statistics, entitlement records), please contact us using the information below. Requests are processed within 48 hours.
- Email request: support@catchmsg.com — send an email with the subject "Data Deletion Request" and include the identifier shown in the app settings. We will delete the corresponding data.
8. Your Rights
You may exercise the following rights at any time:
- Access: Request to review the information collected about you
- Deletion: Request deletion of anonymous data stored on our servers
- Restriction: Request that certain processing activities be stopped
Contact us at the address below and we will respond without delay.
9. Technical and Administrative Safeguards
- Encryption in transit: All server communications are encrypted with TLS 1.2 or higher.
- On-device message storage: Message text, sender information, room names, and keywords are stored only on your device and never transmitted to our servers.
- Hashing: The abuse-prevention identifier is stored only as a SHA-256 hash — the raw value is never retained.
- Data minimization: We collect only the minimum anonymous information required to operate the Service.
10. Children's Privacy
The Service is not directed at children under the age of 14 and we do not intentionally collect personal information from them.
11. Revision History
| Version | Date | Summary of changes |
|---|---|---|
| 1.0 | 2026-06-13 | Initial publication |
If this policy is revised, we will notify you via in-app notification or this page at least 7 days before the changes take effect.
12. Operator Information
| Item | Details |
|---|---|
| Company name | Ehotraders |
| Business registration | 525-38-00249 |
| Representative | Juno Yoon |
| Address | 14-20, Gocheok-ro 33ra-gil, Guro-gu, Seoul, South Korea, Unit 102 |
| Privacy officer email | support@catchmsg.com |
| Customer service | 010-3236-6754 |
| KakaoTalk inquiry | ehotraders |