Privacy Policy

1. Overview

Status Xpress ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use our mobile application and related services (collectively, the "Service").

The Service allows you to save and share WhatsApp and WhatsApp Business statuses, recover deleted messages from notifications, generate fancy text fonts, and chat with other Status Xpress users via the built-in Direct Chat feature.

2. Information We Collect

2.1 Account Information (Direct Chat)

When you create a Status Xpress Direct Chat account we collect:

• Name — your display name shown to other users you chat with.
• Email address — used for login and account recovery.
• Phone number — optional; lets other users find you by number.
• Password — stored as a one-way hash; we never see your plain password.
• Direct Chat number — an auto-generated public identifier (e.g. DC-100001).

2.2 User-Generated Content

• Direct Chat messages you send or receive (text, stickers, memes, wishes, quotes).
• Status items you save to your device.
• Deleted message notifications that the app recovers (stored locally in an encrypted on-device database).
• Language and theme preferences.

2.3 Device & Usage Information

• Device identifiers (such as the Android Advertising ID) used by ad networks (Google AdMob, Facebook Audience Network, IronSource) to deliver and measure ads.
• Operating system version and device model, used for compatibility and diagnostics.
• IP address is processed by our servers to deliver the Service and may be logged for security and abuse prevention.

2.4 Information We Access on Your Device

• Storage — to read and save WhatsApp status media files you choose to download.
• Notifications — to provide the deleted-message recovery feature.
• Camera, Microphone, Internet — only when you actively use a feature that requires them.

2.5 Information We Do NOT Collect

• Your WhatsApp or WhatsApp Business login credentials or authentication tokens.
• The content of your private WhatsApp conversations.
• Your phone contacts or address book.
• Precise GPS location.

3. How We Use Your Information

We use the information we collect exclusively for the following purposes:

• Providing the Service: authenticating you, enabling Direct Chat, syncing conversations and delivering messages.
• Status saving: reading and copying WhatsApp status media files you choose to download to your device.
• Message recovery: monitoring notifications on your device to back up messages you wish to recover (stored locally).
• Direct Chat: letting you find other users by their Direct Chat number and exchange messages, stickers, memes, wishes and quotes.
• Font styling: converting text you paste into different font styles.
• Notifications: sending you Direct Chat message notifications when the app is in the background.
• Safety & integrity: detecting abuse, preventing fraud and enforcing our terms.
• Advertising: showing ads in the free version of the app via third-party ad networks (see Section 5).
• App improvement: understanding which features are used so we can improve them.

4. Data Storage and Security

4.1 Where Your Data Is Stored

• On your device: saved statuses, recovered messages, app preferences, Direct Chat token (encrypted) and cached messages.
• On our servers (Laravel backend, HTTPS): your Direct Chat account information (name, email, hashed password, Direct Chat number) and the messages you exchange with other Direct Chat users.

4.2 Security Measures

• Encryption in transit: all communication between the app and our servers uses HTTPS/TLS.
• Password hashing: account passwords are stored using bcrypt hashing; plain passwords are never stored.
• Authentication: Direct Chat API requests require a valid Sanctum bearer token.
• App Key authentication: the app authenticates to our APIs with a per-install API key to prevent unauthorized use.
• Access control: only authorized personnel can access account data, and only for support or legal reasons.
• Regular updates: we ship security patches as part of regular app updates.

Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Information Sharing & Third Parties

We do not sell your personal data. We share data only in the following limited circumstances:

5.1 Service Providers

• Hosting & backend: the app's server and database are hosted with trusted infrastructure providers.
• Real-time messaging: we use Centrifugo as a real-time messaging broker to deliver Direct Chat messages. Centrifugo only relays the message payload we publish; it does not retain message content beyond short-lived delivery buffers.

5.2 Advertising Partners

The free version of the app shows ads served by:

• Google AdMob (Google LLC) — privacy policy: policies.google.com/privacy.
• Facebook Audience Network (Meta Platforms, Inc.) — privacy policy: facebook.com/about/privacy.
• IronSource (Unity Ads) — privacy policy: unity.com/legal/privacy-policy.

These partners may receive device-level identifiers (such as Android Advertising ID) and approximate usage data to deliver and measure ads. You can reset or delete your Advertising ID in your Android device settings.

5.3 Other Disclosures

• Legal: when required by law, court order or valid legal process, or to protect our rights, property or safety, or that of others.
• Business transfers: in connection with a merger, acquisition, reorganization or sale of assets, in which case we will notify affected users.

We do not share your Direct Chat messages, name, email or phone number with advertisers or analytics providers.

6. Your Rights & Choices

Depending on where you live, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Deletion: request that we delete your Direct Chat account and associated messages.
• Correction: correct inaccurate account information (name, email, phone).
• Opt-out of ads: reset or delete your Android Advertising ID, or upgrade to any future ad-free version of the app.
• Withdraw consent: stop using Direct Chat or uninstall the app at any time; this stops further collection from the app.

To exercise access or deletion rights, contact us at the address below. We may need to verify your identity before acting on your request.

7. Children's Privacy

Status Xpress is not intended for children under 13 years of age (or such higher age as may be required by applicable law in your country). We do not knowingly collect personal information from children under that age.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us so we can delete it.

8. International Data Transfers

Our servers are located in Sri Lanka. If you use Status Xpress from another country, your information will be transferred to and processed in Sri Lanka. By using the Service you understand that your data may be transferred to, stored in, and processed in Sri Lanka and in any country where our service providers (e.g. ad networks) operate.

9. Policy Updates

We may update this Privacy Policy from time to time. When we make material changes:

• We will update the "Last Updated" date at the top of this policy.
• For significant changes, we will notify you within the app.
• Continued use of the Service after the effective date constitutes acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: