This text is also available in German. If the versions differ, the English version prevails.

Privacy Policy — Auto TextBack 1.5

Effective date: 25 October 2026

Mesensei Oy (“we”, “us” or “our”) places the highest value on protecting the personal data of the users of our digital services (“User”, “you” or “your”).

This Privacy Policy (“Policy”) explains how we collect, use, disclose, safeguard and retain your personal data when you interact with us or Auto TextBack (“App”).

We are committed to processing your personal data in accordance with all applicable laws. The European Union General Data Protection Regulation (EU 2016/679) is the primary data protection enactment applicable to the App and processing of your personal data.

Please read this Policy carefully. If you do not agree with the terms and content of this Policy, you should not use the App or interact with us.

Your use of the App is also governed by the Auto TextBack Service Terms, which are included in the App (About › Service Terms).

Data Controller

• Mesensei Oy, business ID 2783802-2
• A Grid, Otakaari 5, 02150 Espoo, Finland
• hello@mesensei.com

Data Processing

When you miss a call, the App sends an automated reply. The reply is sent as a normal SMS from your own number, through your own operator and at your own cost.

To work, the App uses the storage on your phone in order to provide you with the service:

• To send the auto-reply message.
• To store your settings: on/off, cooldown, daily and monthly limits, paused hours, and who gets a reply (everyone, saved contacts only, or unknown numbers only).
• To use counters: replies sent today, this month and in total, free replies used (the first three replies are free), and whether the rating prompt has been shown.
• To determine whether you have bought the one-time unlock.
• To remember the phone numbers it has replied to and when, so the same caller is not texted again within your cooldown. These numbers stay on your phone and are never included in backups.
• To tell a saved contact from an unknown number, if you have chosen "Saved contacts only" or "Unknown numbers only": the App checks whether the missed caller's number exists in your contacts. The check happens on your phone only; no contact data is stored by the App or sent anywhere.

Permissions the App Asks For

For the App to work as intended, you must grant the following permissions (Contacts only if you use “Send auto-reply to”). Without these the App cannot detect missed calls or send replies and will not work properly.

The App does not use your location, camera, microphone, photos or files.

Google Play and Your Google Account

The App uses two Google Play libraries, for the purchase and the rating prompt, and Android's own backup to your Google account. Google handles this data under the Google Privacy Policy; Mesensei Oy does not control it.

• Purchase. The one-time unlock is bought and paid for through Google Play. The App only asks Google Play whether you have bought it.
• Rating prompt. After the App has sent five replies, Google Play may show a prompt to rate the App once when you open it. Mesensei Oy is not told whether you rated it.
• Backup. If Android backup is on, your settings, counters and purchase status may be copied to your own Google account and restored when you reinstall.

The Data Mesensei Receives, Processes and Stores

The App is not connected to Mesensei servers and we do not receive data from the App when you use it on your device.

However, Mesensei Oy does receive personal data from Google Play, from emails you send us, from reviews you write and from your interactions with us on our social media channels.

Your purchase data is processed for accounting, refunds and to fulfil our legal obligations such as compliance with applicable accounting laws.

If you contact our customer service with service requests, application feedback or improvement suggestions, we process your personal data to reply to you and, for example, to improve our service offering.

Marketing and customer communication. By using the App, you agree to the Service Terms and this Policy. If you contact us about our products, ask for assistance, request new features or suggest improvements, or interact with us in the Google Play Store or on our social media channels, we may reply to you and tell you about new versions of the App. This is normal customer relationship management, based on our legitimate interest and on the Service Terms and this Policy. We do not send unsolicited marketing emails. You can always opt out of our messages and object to the use of your personal data for marketing and communication purposes by telling us in writing at hello@mesensei.com.

Google Play Console also provides us with anonymous, aggregated crash statistics from users who have allowed Google to share diagnostics.

Our email runs on Google Workspace, which processes messages on our behalf. Google may process this data outside the EU, using the safeguards described in the Google Privacy Policy.

Data Combinations

Mesensei Oy does not combine the data on your phone with any other data. The App sends us no identifiers, and we do not combine the order information, reviews or emails we receive into user profiles. However, Mesensei Oy can use the personal data you provide us with for data combinations as part of our marketing research, insight and product offering promotions, service desk improvement and other business development purposes.

Third parties involved in your use of the App may hold data that can identify you or be combined with other data. For example, your mobile operator handles the SMS the App sends and the phone numbers involved, and Google holds your Google Play purchases, reviews and Android backup. They process this data under their own terms and applicable law. To learn how they may collect and combine data, please review the privacy policies of your mobile operator and Google, and the privacy laws of your country.

Disclosures to Third Parties

We do not regularly sell or rent your personal data or share it with third parties for their own marketing.

We disclose personal data only:

• to service providers that process it on our behalf, such as Google Workspace for email, under data processing agreements that keep the data under our control;
• to our accounting service providers, as needed to meet our accounting obligations;
• to authorities, when we are required to do so by law;
• to a new owner of our business or of the App, for example in a merger or acquisition.

In each case we disclose only the minimum necessary, within the limits of applicable law.

International Transfers

Some of our service providers, such as Google, may process personal data outside the European Union or European Economic Area, including in the United States. Countries outside the EU/EEA may have different data protection standards.

When personal data is transferred outside the EU/EEA, the transfer is based on an adequacy decision of the European Commission, such as the EU–U.S. Data Privacy Framework for certified companies, or on the European Commission's standard contractual clauses (Decision (EU) 2021/914).

Data Retention and Deletion

The data the App uses stays on your phone for as long as you keep the App. Your settings, counters and purchase status remain until you clear the App's storage in Android settings or uninstall the App. The phone numbers the App has replied to are kept only to apply your cooldown and are removed automatically 48 hours after the reply. Settings, counters and purchase status that Android backs up to your Google account are managed through your Google account.

The personal data Mesensei Oy receives (see "The Data Mesensei Receives, Processes and Stores") is kept for as long as it is needed for the purposes described in this Policy and for our legal obligations, such as accounting law. You can ask us to delete it by emailing hello@mesensei.com.

Data Security

The data the App uses is kept in the App's private storage on your phone, which Android keeps separate from other apps. The App is not connected to Mesensei servers and does not send this data to us or to anyone else; the reply SMS itself is sent through your mobile operator.

For the personal data we receive, we apply appropriate technical and organisational measures to protect it against unauthorised access, loss and misuse, and we limit its processing to the purposes described in this Policy.

Your Rights

For the data on your phone, you are in control. Mesensei Oy has no copy and cannot access, change or delete it.

For the data we receive (see “The Data Mesensei Receives, Processes and Stores”), you have the right under the GDPR to access, correct, delete, restrict, transfer or object to its processing, and to withdraw consent. Email hello@mesensei.com.

Refunds are handled through Google Play's refund policy; you can also email us and we can refund through Google Play.

You can complain to the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

Validity

This Policy takes effect on 25 October 2026 and applies to Auto TextBack version 1.5.

We reserve the right to make changes to this Policy at any time and for any reason. We will alert you about any changes by updating the “Effective date” of this Policy in case we do so.