PingooPrivacy policy
Pingoo is an app that syncs the SMS arriving on one phone you own (the phone with the SIM) to another phone you own. This policy explains what the app reads, what leaves your phone, who can see it, and how to delete it. The short version: your messages are encrypted on your SIM phone before they leave it, only the phone you linked can decrypt them, and we cannot read them.
Who we are
Pingoo is published by Pingoo, Pakistan. Contact: pingoo.pakistan@gmail.com.
What the app reads on the SIM phone (Android)
- Incoming SMS (sender, text, time), only after you grant the SMS permission, and only to sync them to the phone you linked. Pingoo never sends SMS.
- Contact names, only if you grant the Contacts permission. The app looks up the saved name for a sender so your other phone shows a name instead of a number. Only the matching name travels with the message. Your contact list is never uploaded.
- Camera, only to scan the pairing QR code.
The receiving app (Android or iPhone) does not read the phone's own SMS or contacts. It only shows what your SIM phone syncs to it.
How messages travel
When you link two phones by scanning a QR code, they create a shared secret key (X25519 key agreement with HKDF). Every synced message is encrypted on the SIM phone with that key (AES-256-GCM) before it leaves the phone. The encrypted message is passed through our relay so the other phone can fetch it. The key exists only on your two phones. We do not have it, so we cannot decrypt your messages, and neither can the services below.
What we store, and where
Encrypted messages. Stored on Google Firebase (Cloud Firestore) as ciphertext, with the time the SMS arrived and its delivery status. They stay there while your two phones are linked so both can stay in sync, and are deleted when you delete a message, unpair the phones, or clear history. We cannot read them.
Identifiers. A random device id per installation, an anonymous sign-in id (Firebase Authentication, no email, no phone number), and, on iPhone, a push notification token. These route messages between your two phones and nothing else.
Settings shared between your phones. The "messages to show" window you choose and the display name of each linked phone.
We do not collect names, email addresses, phone numbers, location, photos, call logs, usage analytics or crash reports. There are no advertisements and no advertising identifiers in Pingoo.
Notifications
To alert your receiving phone when the app is closed, the SIM phone asks our relay (a Cloudflare Worker) to send a push notification through Apple Push Notification service or Google Firebase Cloud Messaging. The relay verifies that the request comes from your linked SIM phone and passes on only the routing ids and the still-encrypted message. Apple and Google carry the encrypted form; the text is decrypted on your receiving phone, inside the app or its notification extension, when the notification is shown.
Third-party services
- Google Firebase (Cloud Firestore, Authentication, Cloud Messaging) to store encrypted messages, provide the anonymous sign-in, and deliver push notifications on Android.
- Apple Push Notification service to deliver push notifications on iPhone.
- Cloudflare Workers to run the push relay and these pages.
These providers process the data described above on our behalf under their own security commitments. None of them can decrypt your messages. We do not sell or share your data with anyone else.
Your choices
- Permissions. Decline the Contacts permission and you simply see numbers. Withdraw the SMS permission and syncing stops.
- Pause or unpair. From the Linked screen on either phone, at any time.
- Delete. Deleting an SMS on the SIM phone removes its synced copy. Unpairing deletes the link and the messages stored for it. Uninstalling the app removes everything on that phone. Full steps: Delete my data.
- Ask us. Email pingoo.pakistan@gmail.com to have anything associated with your device ids removed.
Children
Pingoo is not directed at children under 13 and we do not knowingly collect information from them.
Changes
If this policy changes, the new version is published here with a new effective date.
Contact
pingoo.pakistan@gmail.com ยท WhatsApp +92 325 3500039