App: Messages, also published as Inboxly (com.inboxly.messages)
Provided by Virnit Automation
Last updated: 2 October 2026
This Privacy Policy explains how Virnit Automation ("we", "us", "our") handles your information when you use the Messages mobile application, also known as Inboxly (the "App"). By installing or using the App, you agree to the practices described below.
Messages (Inboxly) is developed and published by Virnit Automation. If you have any questions about this policy or your data, contact us at the email address in the "Contact us" section below.
Messages is a text-messaging app and can be set as your device's default SMS app. To provide its core features, the App reads, receives, sends, and organizes the SMS/MMS messages on your device. This is used to:
Message content stays on your device. All of this processing happens locally on your phone. We do not transmit, upload, or store the content of your messages on our servers. The only time any message text leaves your device is when you yourself tap Translate on a message — see section 3a.
With your permission, the App reads your contacts so it can show contact names and photos instead of raw phone numbers when a message arrives, and help you choose recipients. Contact data is used only on your device and is not uploaded to us.
We use Google Firebase Analytics to understand, in aggregate, how the App is used (for example which screens and features are opened), and Google Firebase Crashlytics to detect crashes and improve stability. These tools collect non-identifying technical data such as app events, device model, OS version, app version, a randomly-generated app-instance identifier, and — for crashes — diagnostic stack traces. They never receive the content of your messages, your phone number, OTP codes, or your contacts. Usage analytics is turned on only after your consent choice is collected (see "Consent").
We use Google Firebase Cloud Messaging to deliver push notifications such as app announcements, tips and update prompts. For this, the App holds a device registration token. Push notifications never contain or transmit your message content.
e. After Call
If you turn on the optional After Call card, the App is notified by Android when a call ends so it can offer to text that person. On older Android versions the system may include the other party's phone number in that notification; where it does, the number is used only to pre-fill the recipient of a message you may choose to send. The App does not read your call log, does not record calls, does not learn how long a call lasted, and nothing about the call is uploaded anywhere. The feature is off until you enable it and can be switched off again in Settings → After call.
The App's "AI" features — message categorization, spam scoring, OTP detection, summaries, bill, expense, package and travel extraction, smart replies and language detection — run entirely on your device. They are rule-based classifiers and on-device machine-learning components (Google ML Kit) that read the messages already stored on your phone. No message content is sent to us or to anyone else for any of these features, and none of them involve a network request.
There is exactly one exception, and it is described in the next section.
When, and only when, you tap Translate (or drag the translate bell onto a message), the text of that one message is sent over the internet to a third-party translation service so it can be translated. This never happens automatically, never in the background, and never to a whole conversation — only to the specific text you asked to translate, at the moment you ask.
Depending on availability, the request goes to one of:
Nothing identifying is attached to the request. We do not send your phone number, the sender's number, your contacts, your name, your device identifiers, your advertising ID or any account information — only the text itself and the two language codes. We do not keep a copy. The receiving service handles the text under its own privacy policy, and MyMemory in particular operates a public, crowdsourced translation memory, so you should not translate text you consider confidential.
The App tells you this before the first translation, and the feature is entirely optional — if you never tap Translate, no message text ever leaves your device.
The App shows advertising supplied by Google AdMob. Ads appear as banners, as cards within lists, as occasional full-screen ads between screens, as an ad when you return to the App, and as optional ads you choose to watch in exchange for a feature.
Your messages are never used to target ads. The content of your SMS and MMS, your contacts, the phone numbers you exchange messages with, and any one-time passcodes the App detects are never read for advertising, never shared with AdMob, and never leave your device.
To serve and measure ads, Google may process your device's advertising ID, coarse location derived from your IP address, and technical device information. Google's use of this data is described in the Google Business Data Responsibility and How Google uses information from sites or apps that use our services pages.
In the EEA, the UK and Switzerland, ads are only personalised after you consent through the Google-certified consent flow described above. If you decline, the App still shows ads, but non-personalised ones. Outside those regions you can limit personalisation at any time from your device settings ("Delete advertising ID" or "Opt out of Ads Personalisation" under Settings → Privacy).
All ad requests are capped at Google's "G" (suitable for all audiences) content rating, so alcohol, gambling, dating and suggestive advertising is not served to any user regardless of age.
| Permission | Why the App needs it |
|---|---|
| SMS (read, send, receive), MMS, WAP push | Core function — to read, send, receive and organize your text messages as your default SMS app. |
| Contacts | To show contact names/photos when messages arrive and to pick recipients. Optional. |
| Notifications | To alert you about new messages, OTPs, reminders and app updates. |
| Internet & network state | For advertising, diagnostics, push notifications, and for the translation requests you trigger yourself (section 3a). |
| Run at startup (boot completed) | To re-arm scheduled messages and reminders after a restart. |
| Approximate location (optional) | Only for the "Share location" button on the After Call card. Your approximate location is read at the moment you tap it, turned into a map link, and placed into the message you are writing. It is never read in the background, never stored by us and never uploaded. Decline it and every other feature still works. |
| Phone state (dual-SIM devices only) | Requested only on phones with more than one SIM slot, so the App can show which SIM a message will be sent from and let you choose. It is not requested on single-SIM devices. |
| Display over other apps (optional) | For the After Call card, which appears over your screen when a call ends and offers to text that person. Off until you enable it, and switchable off again in Settings → After call. |
| Advertising ID | Used by Google AdMob to serve and measure ads, as described in section 4. In the EEA, UK and Switzerland it is used for personalised advertising only with your consent. |
For users in the European Economic Area, the UK, and Switzerland, we ask for your consent through Google's certified consent flow before collecting usage analytics. You can review or change your choice at any time from Me → Privacy & consent in the App (shown where applicable). You can also disable analytics collection by opting out there.
The App relies on the following third-party services, each governed by its own privacy policy:
App data — such as your message index, templates, categories, and settings — is stored locally on your device. We do not maintain a copy on our servers. When you uninstall the App, this locally stored data is removed from your device. Your actual SMS messages remain in the Android system message store, independent of the App. Diagnostics data handled by Google Firebase is retained by Google according to its own policies.
Because your messages and app data are kept on your own device, their security is tied to your device's protections (screen lock, encryption, OS updates). We recommend keeping your device secured and up to date. No method of electronic storage is completely secure, and we cannot guarantee absolute security.
Messages is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can address it.
Depending on where you live, you may have rights under laws such as the GDPR (EEA/UK) or CCPA/CPRA (California), including the right to access, correct, delete, or restrict the processing of your personal data, and to withdraw consent for analytics or advertising. Because we do not store your messages or contacts on our servers, most of your data is under your direct control on your device and can be removed by clearing app data or uninstalling the App. To exercise any right, contact us using the details below.
The App can be used worldwide. Since message and contact processing happens on your device, that data is not transferred internationally by us. Diagnostics data may be processed by Google in accordance with its own policies and safeguards.
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, provide notice within the App or on our store listing. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Virnit Automation
Email: support@virnitautomation.top
Please reach out with any questions about this policy or your privacy.