This Privacy Policy explains how Odit ("the Service") collects, uses, stores, and safeguards your information, with particular attention to the SMS banking data that powers the Service. If you do not agree with this policy, please do not use the Service.
When you create an account, we collect:
The core of the Service involves reading SMS messages from your Android device and syncing them to our servers. The scope of which messages are synced depends on the Privacy Mode you select (see Section 3). For each synced message, we collect:
Important: In Permissive mode, all SMS messages on your device are synced, including personal messages. In Restrictive mode, messages from Ethiopian phone numbers (09/07/+251 prefixes) are excluded on-device and never transmitted. Regardless of mode, only messages from recognized banking addresses are processed for financial data extraction on our servers.
When you connect a device, we collect:
When you access the web dashboard, we may collect:
You have control over which SMS messages leave your device. The Odit Android app provides two privacy modes that determine the scope of messages synced to our servers. You can select and change your mode in the app's Privacy Settings at any time.
In Permissive mode, all SMS messages on your device are synced to our servers, regardless of the sender. This includes:
Why this mode exists: It ensures no banking messages are missed due to unusual sender formats. Only messages from recognized banking addresses are parsed for financial data; all other messages are stored but not processed.
Privacy consideration: In this mode, personal messages between you and other individuals are transmitted to and stored on our servers. While we do not process these messages for financial data, they are present in our systems.
In Restrictive mode, messages from Ethiopian phone numbers are excluded from the sync entirely. Messages from senders matching the following patterns are filtered out on-device and never leave your phone:
This means only messages from non-personal sources — such as bank short codes, service alerts, and institutional senders — are synced. Personal SMS conversations between Ethiopian phone numbers never reach our servers.
Trade-off: If a banking institution sends messages from a standard Ethiopian phone number rather than a short code, those messages will be excluded in Restrictive mode and will not appear in your dashboard.
If your device contains more than 20,000 SMS messages, Restrictive mode is automatically enforced and Permissive mode is permanently disabled for that device. This safeguard prevents excessive data transmission and protects both your privacy and our server resources.
You may switch between Permissive and Restrictive mode at any time from the app's Privacy Settings, subject to the automatic enforcement threshold described above. Changing your mode affects future syncs only; messages already synced to our servers are not retroactively deleted when switching to Restrictive mode.
We use the information we collect to:
We do not sell, rent, or trade your personal information or SMS data to third parties.
We may share limited information with service providers who help us operate the Service (e.g. cloud hosting, error monitoring, analytics). These providers are contractually bound to use your data only for the purposes we specify.
We may disclose your information if required by law or in response to valid legal process (e.g. a court order or government agency request).
If Odit is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
We implement technical and organizational security measures to protect your data, including:
However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
We retain your data for as long as your account is active. Specifically:
When you delete your account, all associated data (messages, devices, extracted data, and personal information) is permanently deleted from our servers.
You have the right to:
To exercise these rights, please contact us through our support channels.
We use session cookies for authentication and user preferences. We may use analytics tools to understand how the Service is used. You can configure your browser to refuse cookies, though some features of the Service may not function properly without them.
The Service may contain links to third-party websites. We have no control over and assume no responsibility for the content or privacy practices of those sites.
The Service is not intended for children under 13. We do not knowingly collect information from children under 13. If you become aware that a child has provided us with personal information, please contact us.
Your information may be transferred to and stored on servers outside your country of residence. We take reasonable steps to ensure your data is treated securely and in accordance with this policy regardless of where it is processed.
We may update this policy from time to time. When we make material changes, we will notify you through the Service and update the "Last updated" date. Material changes to how your SMS data is handled will require you to re-accept the updated policy before continuing to use the Service.
If you have any questions about this Privacy Policy, please contact us through our support channels.