MerkurSMS respects your privacy. This policy explains what data the app uses, why, and how it is handled.
MerkurSMS uses the READ_CALL_LOG and READ_PHONE_STATE permissions solely to detect a missed call and the caller’s phone number. This data is required for the app’s core function, so MerkurSMS knows who to send an automatic SMS to. Call log data is processed locally on the device, in real time, and is never uploaded to our servers or shared with any third party.
MerkurSMS uses the SEND_SMS permission to send the automatic reply to a missed call and follow-up messages according to the rules you set. It uses the RECEIVE_SMS permission to detect the client’s incoming reply in real time so it can continue the conversation. It uses the READ_SMS permission to read the SMS messages stored on your device so it can show the conversation history inside the app. SMS content is used only for these functions, is processed locally on the device, and is never sold, shared, or uploaded to our servers. Messages are sent over your mobile carrier’s network and charged per their price list.
MerkurSMS uses the READ_CONTACTS permission only for the optional “reply only to numbers not in my contacts" setting: it checks whether a caller’s number is already saved in your contacts. Your contacts are checked locally on the device, are never read in bulk, and are never uploaded to our servers, sold, or shared with any third party.
Signing in with Google is optional and exists so your access and coupons stay tied to your account. If you sign in, we collect your email address and a unique account identifier (user ID) assigned by Firebase Authentication. We use this data solely to tie your days and coupons to your account so they are not lost when you uninstall or change phones. If you do not sign in, you use the app as a guest and this data is not collected.
For signed-in users, on Google Firebase (Cloud Firestore) servers we store: the date until which your access is valid and the number of granted days; the coupon codes you create; a record of coupons you redeem; the identifier (token) of a completed purchase, to prevent double crediting; notifications related to your account; and a device identifier (FCM token) used to send you push notifications. We do NOT store your message content, your contacts or your call log on the servers.
INTERNET and ACCESS_NETWORK_STATE are used for Google Play Billing and for signing in and syncing account data (days and coupons) with Firebase. FOREGROUND_SERVICE and WAKE_LOCK let the app reliably send the automatic SMS in the background. RECEIVE_BOOT_COMPLETED lets automation resume after the phone restarts. REQUEST_IGNORE_BATTERY_OPTIMIZATIONS is used so the app, with your explicit consent, can be exempted from battery optimization, so the automatic reply to a missed call runs reliably in the background; this permission is optional and you may decline it. BILLING (com.android.vending.BILLING) is required for in-app purchases through Google Play. POST_NOTIFICATIONS (Android 13+) is used only to display push notifications we send you (e.g. promotions and coupon alerts); this permission is optional and you may decline it or turn it off later in settings. None of these permissions are used to send your messages, calls or contacts to any server.
On the device (locally): settings, rules, calendar, conversation history, SMS content, call log and contacts.
On the server (Google Firebase), only if you are signed in: email, account identifier, number of days, coupons and a record of purchases.
If you are not signed in (guest): the number of purchased days and the first-use date are stored locally, and with Android Auto Backup enabled also on your private Google Drive.
We do not sell your data. Account data (email, identifier, days, coupons, purchases, notifications and push token) is processed by Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging) as our processor, on our behalf and under our instructions. Payment data is handled by Google Play. We do not share your messages, calls or contacts with anyone; the only exception is the SMS that, per your rules, the app sends to the recipient through your mobile carrier.
Local data stays on the device while you use the app and is deleted when you uninstall it. You can permanently delete your account data in the app: Settings → Account → “Delete account and data". This deletes your profile, all your codes, your redemption records, your notifications, saved device identifiers (tokens) and the account itself from the server. You can also request deletion by email at kontakt.merkursms@gmail.com or through our web form at https://merkursms.com/delete-account.
Day-pack purchases are processed through Google Play; payment data is handled by Google, not MerkurSMS. For signed-in users, purchased days are tied to the account on the server; for guests they are stored locally. Purchases are one-time and do not renew automatically.
Permissions are requested in the app before first use and can be revoked at any time in your phone settings (automation then stops working). Signing in is voluntary; you can sign out or delete your account at any time. Notifications are on by default and you can turn them on or off at any time in the app or phone settings.
This section applies to our website merkursms.com, not to the app. We use Google Analytics 4 and the Meta Pixel (Facebook), both loaded through Google Tag Manager, to understand how the site is used (for example page views, approximate location by IP, device and browser type, and referring source) and to measure our advertising. These analytics and marketing cookies are set only after you accept them in the cookie banner. If you decline, nothing is loaded and no such cookies are set. This data is processed by Google (Analytics) and by Meta Platforms Ireland (Meta Pixel) as our processors; we do not use it to identify you personally. You can change your choice at any time () or block cookies in your browser.
For privacy questions and deletion requests: kontakt.merkursms@gmail.com
MerkurSMS poštuje tvoju privatnost. Ova politika objašnjava koje podatke aplikacija koristi, zašto i kako se sa njima postupa.
MerkurSMS koristi dozvole READ_CALL_LOG i READ_PHONE_STATE isključivo da bi prepoznao propušten poziv i broj telefona pozivaoca. Ovi podaci su neophodni za osnovnu funkciju aplikacije, da bi MerkurSMS znao kome treba da pošalje automatski SMS. Evidencija poziva se obrađuje lokalno na uređaju, u realnom vremenu, i ne otprema se na naše servere niti se deli sa bilo kojom trećom stranom.
Dozvolu SEND_SMS MerkurSMS koristi da pošalje automatski odgovor na propušten poziv i follow-up poruke prema pravilima koja ti postaviš. Dozvolu RECEIVE_SMS koristi da u realnom vremenu prepozna dolazni odgovor klijenta kako bi nastavio prepisku. Dozvolu READ_SMS koristi da pročita SMS poruke sačuvane na tvom uređaju kako bi prikazao istoriju razgovora unutar aplikacije. Sadržaj SMS poruka koristi se samo za ove funkcije, obrađuje se lokalno na uređaju i ne prodaje se, ne deli i ne otprema na naše servere. Poruke se šalju preko mreže tvog mobilnog operatera i naplaćuju po njegovom cenovniku.
Dozvolu READ_CONTACTS MerkurSMS koristi samo za opciono podešavanje „šalji samo brojevima van kontakata": proverava da li je broj pozivaoca već sačuvan u tvojim kontaktima. Tvoji kontakti se proveravaju lokalno na uređaju, nikada se ne čitaju masovno i nikada se ne otpremaju na naše servere, ne prodaju i ne dele sa trećim licima.
Prijava preko Google-a je opciona i služi da tvoj pristup i kuponi ostanu vezani za nalog. Ako se prijaviš, prikupljamo tvoju email adresu i jedinstveni identifikator naloga (user ID) koji dodeljuje Firebase Authentication. Ove podatke koristimo isključivo da bismo tvoje dane i kupone vezali za nalog, tako da se ne izgube pri deinstalaciji ili promeni telefona. Ako se ne prijaviš, koristiš aplikaciju kao gost i ovi podaci se ne prikupljaju.
Za prijavljene korisnike, na Google Firebase (Cloud Firestore) serverima čuvamo: datum do kog važi pristup i broj dodeljenih dana; kod kupona koji napraviš; evidenciju kupona koje aktiviraš; identifikator (token) obavljene kupovine, radi sprečavanja dvostrukog obračuna; obaveštenja vezana za tvoj nalog; i identifikator uređaja (FCM token) radi slanja push notifikacija koje ti šaljemo. Na serverima NE čuvamo sadržaj tvojih poruka, tvoje kontakte niti evidenciju poziva.
INTERNET i ACCESS_NETWORK_STATE koriste se za Google Play naplatu i za prijavu i sinhronizaciju podataka naloga (dani i kuponi) sa Firebase-om. FOREGROUND_SERVICE i WAKE_LOCK omogućavaju pouzdano slanje automatskog SMS-a u pozadini. RECEIVE_BOOT_COMPLETED omogućava da se automatika nastavi posle restarta telefona. REQUEST_IGNORE_BATTERY_OPTIMIZATIONS koristi se da aplikacija, uz tvoju izričitu saglasnost, bude izuzeta od optimizacije baterije, kako bi automatski odgovor na propušten poziv radio pouzdano u pozadini; ova dozvola je opciona i možeš je odbiti. BILLING (com.android.vending.BILLING) je neophodan za kupovinu unutar aplikacije preko Google Play-a. POST_NOTIFICATIONS (Android 13+) koristi se samo za prikaz push notifikacija koje ti mi šaljemo (npr. promocije i obaveštenja o kuponima); ova dozvola je opciona i možeš je odbiti ili kasnije isključiti u podešavanjima. Nijedna od ovih dozvola se ne koristi za slanje tvojih poruka, poziva ili kontakata na servere.
Na uređaju (lokalno): podešavanja, pravila, kalendar, istorija razgovora, sadržaj SMS-a, evidencija poziva i kontakti.
Na serveru (Google Firebase), samo ako si prijavljen: email, identifikator naloga, broj dana, kuponi i evidencija kupovina.
Ako nisi prijavljen (gost): broj kupljenih dana i datum prve upotrebe čuvaju se lokalno, a uz uključen Android Auto Backup i na tvom privatnom Google Drive-u.
Ne prodajemo tvoje podatke. Podatke naloga (email, identifikator, dani, kuponi, kupovine, obaveštenja i push token) obrađuje Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging) kao naš obrađivač, u naše ime i po našim uputstvima. Podatke o plaćanju obrađuje Google Play. Tvoje poruke, pozive i kontakte ne delimo ni sa kim; jedini izuzetak je SMS koji, po tvojim pravilima, aplikacija šalje primaocu preko tvog mobilnog operatera.
Lokalni podaci ostaju na uređaju dok koristiš aplikaciju i brišu se deinstalacijom. Podatke naloga možeš trajno obrisati u aplikaciji: Podešavanja → Nalog → „Obriši nalog i podatke". Time se sa servera brišu tvoj profil, svi tvoji kodovi, evidencija aktivacija, tvoja obaveštenja, sačuvani identifikatori uređaja (tokeni) i sam nalog. Brisanje možeš zatražiti i mejlom na kontakt.merkursms@gmail.com ili preko veb-forme na https://merkursms.com/delete-account.
Kupovinu paketa dana obrađuje Google Play; podatke o plaćanju obrađuje Google, ne MerkurSMS. Za prijavljene korisnike kupljeni dani se vezuju za nalog na serveru; za goste se čuvaju lokalno. Kupovina je jednokratna i ne obnavlja se automatski.
Dozvole se traže u aplikaciji pre prve upotrebe i možeš ih u svakom trenutku povući u podešavanjima telefona (tada automatika prestaje da radi). Prijava je dobrovoljna; u svakom trenutku možeš se odjaviti ili obrisati nalog. Notifikacije su podrazumevano uključene i možeš ih uključiti ili isključiti u svakom trenutku u podešavanjima aplikacije ili telefona.
Ovaj odeljak se odnosi na naš sajt merkursms.com, a ne na aplikaciju. Koristimo Google Analytics 4 i Meta Pixel (Facebook), oba učitana preko Google Tag Manager-a, da bismo razumeli kako se sajt koristi (npr. pregledi stranica, približna lokacija na osnovu IP adrese, tip uređaja i pregledača, i izvor poseta) i merili naše oglašavanje. Ovi kolačići za analitiku i marketing postavljaju se tek pošto ih prihvatiš u baneru za kolačiće. Ako odbiješ, ništa se ne učitava i takvi kolačići se ne postavljaju. Ove podatke obrađuju Google (Analytics) i Meta Platforms Ireland (Meta Pixel) kao naši obrađivači; ne koristimo ih da te lično identifikujemo. Svoj izbor možeš promeniti u svakom trenutku () ili blokirati kolačiće u pregledaču.
Za pitanja o privatnosti i zahteve za brisanje: kontakt.merkursms@gmail.com
