QuickText SMS Privacy Policy
This Privacy Policy explains what data the QuickText SMS app for Windows handles. The short version: your contacts, your messages, the replies you receive and your sending history live only on your own PC and are never uploaded. The only things that ever reach a server of Bosau Digital LLC ("we", "us") are license checks, the account actions you use on the Account page, a daily usage ping and a few one-time setup events you can switch off, and the support messages or feedback notes you choose to send. The app shows no advertising and builds no profile of you. This policy covers the app; for the pythonandvba.com website itself, please see the website Privacy Policy.
1. Who We Are
QuickText SMS is made by Bosau Digital LLC, the company behind pythonandvba.com. For any privacy-related question, contact contact@pythonandvba.com.
2. Data That Stays on Your PC
Everything QuickText SMS works with is stored locally on your computer, in the folder QuickText SMS inside your Windows user folder:
- Your contacts, their phone numbers, lists and any details you add
- Your messages, message templates and drafts, including the pictures you send or keep in a template or draft: one smaller copy of each, made by QuickText (see Picture messages), so History, Messages and Templates can show it
- Your sending history, including what your phone reported about each message
- The replies people send back to messages you sent from this PC, including the small preview your phone shares of a picture they sent, and your note about each person
- Your block list (numbers that must never receive a message)
- A record of each paired phone: its name, its identity certificate, and the local network address it was last reached at
- Your settings, including your license key, the name and email address you last used in a support message (to fill in the form next time), and your own spell-check dictionary
- The key file that identifies this PC to your phone, and the count of free messages this install has used
- Local log files (an error log, and a connection log holding phone names, local network addresses and a short record of each send: when it started, paused or finished, with counts only), plus automatic local backup copies of the database and the safety copy QuickText makes before it restores a backup
None of this is uploaded, synced or sent to us. The people you message never interact with our servers in any way. Backup files you export from the Settings page are ordinary files on your PC, stored wherever you choose to save them (they include your data, the pictures you sent and your license key, so treat them like the original). Exports of your history or messages say whether a message was a picture message, but never contain the picture.
Uninstalling keeps your data. Removing the app from Windows leaves the QuickText SMS folder in place, so reinstalling later brings everything back. To erase all data, use Delete local app data on the app's Settings page, or simply delete that folder. One small thing is kept on purpose even then, and it holds nothing about you: see Data Retention.
3. Data That Leaves Your PC
License checks
When you enter your license key, and periodically while you use the app (before real messages are sent), QuickText SMS verifies the key against our license server at api.pythonandvba.com. This sends your license key, the name of your PC (to enforce the per-device limit of your license) and the app version. It never includes contacts, phone numbers or message text.
Like any web server, our license server also receives your IP address with each check. It appears, with the approximate country derived from it, in our server logs, which are deleted after 14 days (90 days for warnings and errors). The device names (your computer names) registered to your license are kept with your license record (when each was first seen and last used) for as long as the license exists. If a check fails, we keep the license key, IP address, approximate country, device name and app version for up to 90 days to detect misuse of keys.
Account and subscription information
The app uses your license key to load plan information on the Account page. Opening your account in a browser passes your product and license key to our account portal. Signing in there uses an email link or code and gives you access to your products, licenses, devices, subscriptions and invoices. Opening the portal does not cancel a subscription; cancellation requires completing the form and confirming it.
When you cancel inside QuickText, the app sends your license key and the cancellation reason you enter to our server, which requests cancellation with our billing provider. Nothing is cancelled until you confirm.
Stop using the license on this computer sends your license key and the name of your PC to our license server, which removes this computer from your license so another one can be activated.
Daily usage ping
Once per day, the app tells our server "one install was active today". This ping carries a random install id made on your PC the first time it is needed (nothing about you, your PC or your Windows account can be derived from it), the app version, whether the app came from the Microsoft Store or the direct download, whether the install runs the free or the licensed plan, and three totals for the life of the install: how many messages it has sent, how many campaigns it has run, and how many replies it has received. Each total is a single number. The ping does not include your license key (versions before 1.6 did), and it never includes contacts, phone numbers, message text, or anything those numbers could be traced back to. It exists so we know how many installs are active and whether the app's features are actually used. Like every request, the ping arrives with your IP address, which appears in our server logs as described under License checks; the ping record itself keeps only the approximate country derived from it, not the IP address. The same applies to the setup steps and rating-card events below.
New installs (version 1.6.1 or later) also report a few setup steps, each one only once, on the same random install id: the first start, opening the welcome video, pairing a phone, the phone allowing QuickText to use SMS, the first message your phone confirms as sent (and whether that was a test to your own number), using up the free messages, opening the checkout page, and activating a license. Each step carries its name, when it happened, the app version, the install channel, whether the install runs the free or the licensed plan and, for some steps, one word saying which button was used. It never carries your license key, a phone number, a name, a message or anything about your phone. The steps show us where new users get stuck during setup, so we can make that part easier. In the same way, when the app shows its "Enjoying QuickText?" card, it reports that the card appeared (and whether this was its first or second showing) and what happened next: you rated, closed the Store window, chose to send feedback or chose not now, or the Store's rating window could not be opened. It never reports a rating: the Microsoft Store does not tell the app what you gave.
You can switch this off. Untick Share anonymous usage statistics under Settings > Advanced, and neither the ping nor the setup steps are sent at all; setup steps still waiting to go out are discarded. License checks and other requests described on this page still operate. Nothing in the ping points at you or at your license; it only says whether the install is licensed.
Support messages you send
The support form on the Account & help page sends a message only when you press Send. Every message includes what you typed (topic, name, email address, message), your license key when you have one, the app version, the Windows version, whether the app came from the Microsoft Store or the direct download, whether the install runs the free or the licensed plan and the status of your license, and, on the free plan, how many free messages are left. The name of your PC is not sent (versions before 1.6 sent it).
Include diagnostics is ticked by default, because the technical facts help resolve the issue. With it ticked, the message also carries the name and identifier of the paired phone and whether it is connected right now, whether a phone has ever answered this PC, whether test mode or batch mode is on, the batch size, your default country setting, the number of contacts (a count only), a tally of your last 10 send results, counts of your recent picture messages by result together with your picture size setting and whether each paired phone can send pictures, a fresh connection check, a short excerpt of the local error log and the most recent part of the connection log. That last part shows when your phones connected and disconnected, with their names and local network addresses, and when each send started, paused or finished, with counts only: never who a message went to or what it said. The connection check is the same one Check my setup runs on the Your phone page: the result of each step, the names of your paired phones, the local network addresses of your phones and your PC, the Windows network type, whether the Windows Firewall is on and its rules for QuickText, any VPN or virtual network adapters, and whether KDE Connect for Windows is running. Untick the box and none of this is collected or sent. What's included? next to the box shows you the text a send would carry right now. A fresh connection check runs when you press Send, so its time and results can differ slightly.
Nothing in the app writes your contacts, your message text or the replies you received into the error log in the first place, and the connection check, the log excerpts and the phone's name are additionally scrubbed before sending: phone numbers, email addresses, file names, private folder paths, keys and tokens in web addresses, and the name of your PC are removed. Your contact list, your messages, your pictures and your replies are never attached to a support message. To save you typing, the app remembers the name and email address you last sent with, on your PC only.
Contact support on the Your phone page sends the same kind of message, again only when you click Send. What's included? shows you the text a send would carry right now; a fresh connection check runs when you press Send, so its time and results can differ slightly. Because its whole job is to explain why a phone will not connect, the diagnostics are always included there. It carries no contacts, phone numbers of people you message, or message text.
Feedback notes you send
After a successful send, the app may show a small "Enjoying QuickText?" card. Choosing Send feedback there opens a short form, and nothing is transmitted until you press Send. A note carries what you typed, the email address you optionally enter (leave it empty and the note is anonymous), the app version, your license key when one is stored, whether the install runs the free or the licensed plan, whether the app came from the Microsoft Store, and the Windows version. Deliberately absent: the name of your PC, your phone's details and the technical snapshot a support message can carry — a feedback note is not a support case. Our delivery log keeps one line per note (when it arrived and a short preview), so feedback cannot get lost. Rating the app from that same card opens the Microsoft Store's own rating window, which is Microsoft's service, not ours (see Microsoft Store).
How we handle what you send
When you send a support message or feedback note, we check that the email address you entered can receive mail with Reoon (an email verification service) and deliver the message to us by email via Postmark. For a support message, Postmark also sends you a confirmation, and we create a task in our task list (Todoist) so it gets answered. If your email address is already in our self-hosted customer database (FluentCRM), it is tagged as "contacted support". To answer faster, we look up your license and purchase records with us. Like every request, these messages arrive with your IP address, which appears in our server logs as described under License checks. We keep messages and notes as support history for up to 24 months after your last contact, then delete them; ask us to delete them sooner.
Configuration the app fetches (nothing about you is sent)
The app regularly downloads small configuration files from our servers with plain requests that carry no personal data: the public changelog shown in the "What's new" window and a version feed that only supplies the occasional announcement banner. Updates come from the Microsoft Store, which the app asks directly; our feed does not install or check for updates. These are ordinary downloads, like a browser fetching a page; they do not transmit your data beyond the IP address every web request carries.
Nothing else
The app builds no analytics profile, shows no advertising and does no automatic error reporting. The error log and the connection log stay on your PC unless you send a support message with diagnostics included. Apart from the cases above, QuickText SMS makes no requests to our servers.
4. Your Phone
QuickText SMS talks to your own Android phone directly over your local network, using the free KDE Connect app on the phone. Nothing on this path passes through our servers, and there is nothing to install on your PC. KDE Connect is independent software by KDE e.V. with its own privacy policy.
Pairing
Your PC and your phone identify each other with certificates they generate themselves. When you pair, both screens show the same short code so you can confirm you are pairing with your own phone; QuickText then stores the phone's certificate, name, identifier and the local address it answered from, and your PC keeps its own key file in the data folder. On your local network the app announces itself as "QuickText on" followed by your computer name, which is how your phone lists it. You can unpair at any time on the Your phone page.
Sending messages
Each message travels from your PC to your phone over your network, and your phone sends it as a normal text message through your own mobile plan. Your mobile carrier processes those texts like any SMS you send by hand. Your phone then reports back what became of each message ("sent", "still sending", "could not send"); QuickText matches that report against the message it sent and stores the result as one word in your history.
Picture messages
From QuickText 1.6 a message can carry one picture. Before it goes anywhere, QuickText makes the picture smaller on your PC so it fits a picture message (MMS). For photos it does this by writing a new image from the picture's pixels, so the location data (GPS) and other details your camera stored in the file, such as the camera model and the time it was taken, are removed. An animated GIF that already fits is sent as it is, with its comments and embedded metadata blocks removed so it keeps its animation. Your original file is never changed or copied. The smaller picture then travels to your phone over your local network, exactly like a text, and your phone sends it as a picture message through your mobile plan (picture messages need mobile data). Your carrier handles it like any picture message you send by hand. The test picture QuickText asks for before your first picture message goes to your own number. Pictures are not uploaded to us or to anyone else.
QuickText keeps the smaller copy of each picture you send, or keep in a template or a draft, in the pictures folder inside its data folder, once per picture, so your History, Messages and Templates can show it. A picture nothing refers to any more is removed after a week. These copies are part of exported backups and are erased by Delete local app data. When you restore a backup, QuickText first saves a safety copy of your current data in the backups folder inside its data folder, so the restore can be undone, and that copy contains your pictures too. QuickText keeps the newest three of these safety copies and deletes older ones automatically; Delete local app data erases them as well.
QuickText replies
While QuickText is connected to a paired phone, KDE Connect shares conversation information over your local network. This can include texts unrelated to QuickText. The automatic reply recorder stores only eligible replies:
- QuickText keeps incoming messages from numbers this PC previously texted. It stores the sender's number, the text, when it arrived, which phone it came through and whether it looks like an opt-out. For a picture message it also keeps the small preview your phone shares (about 100 by 100 pixels); the full picture stays on your phone. A small timestamp allowance accommodates differences between the phone and PC clocks.
- On connection or when you choose Check messages, it can request up to 100 recent messages in an eligible conversation. The same eligibility check applies to recovered replies. Recovery depends on what KDE Connect shares; it is not a complete backup of your phone.
- Other incoming messages are not saved by the reply recorder. They are saved separately only if you enable the optional phone-message syncing described below. Group conversations and drafts are excluded. Outgoing texts are used to match delivery reports to messages QuickText sent.
- You can turn off automatic reply recording. Under Settings > Messages, turn off Keep replies to messages sent from QuickText. This stops saving new replies; previously saved replies remain until you delete them. Optional phone-message syncing is controlled separately.
Saved replies stay on your PC. Deleting saved incoming messages on the Messages page removes the selected local copies. Your phone, sent history and block list are unchanged.
Optional phone messages
From QuickText 1.5, choosing Include phone messages and accepting the confirmation saves incoming one-to-one text messages shared by paired phones, including messages outside QuickText conversations. Copies are stored in a separate table in your local database, persist across navigation, disconnection and app restarts, and are included in database backups and message exports. They are not uploaded to us.
Syncing starts with seven days and can request older messages up to 90 days. Each check is bounded to 100 conversations per connected phone, requesting 25 recent messages per conversation, or 100 when loading older messages. What appears depends on what the phone shares. RCS chats and group conversations are not supported. For a one-to-one picture message, its text and the small preview your phone shares are saved; the full picture stays on your phone. Outgoing messages from the phone's own app may be absent. This is not a complete phone backup.
Turning off Include SMS from outside QuickText conversations under Settings > Messages stops new imports while preserving existing copies. Delete saved phone copies removes the imported copies while keeping eligible QuickText replies. A fingerprint derived from each deleted message is retained to prevent it from being imported again; this deletion record does not contain the message body. Messages on your phone and existing backup/export files are unchanged.
Imported phone messages do not by themselves trigger automatic STOP blocking, reply notifications or campaign opt-out counts. The separate QuickText reply recorder continues to handle eligible incoming messages from numbers this PC previously texted, including through quick reply, according to your reply settings. Enabling phone messages does not enable that recorder if you switched it off. Block from QuickText can be used manually; it does not block the sender on the phone.
Contacts from your phone
The Contacts page can take your address book straight from your phone. This happens only when you click Import from phone, and it needs two one-time confirmations on the phone itself: the Android contacts permission, and a separate confirmation that this particular PC may receive them.
Your phone then sends its address book as vCards. The whole book arrives on your PC, is written to a temporary file and opens in the normal import preview, where you decide what to import. QuickText keeps only the fields it uses: name, up to three phone numbers, one email address, company, job title, city, birthday and note. Everything else a vCard can hold, including contact photos, street addresses and further emails, is ignored and never saved. The temporary file is deleted as soon as the import window closes, and nothing is stored until you finish the import.
What QuickText cannot see
When it connects, the app tells your phone exactly which kinds of data it is prepared to receive: text messages and answers about contacts. Nothing else is requested, and the KDE Connect app does not send what was not asked for. QuickText has no access to your notifications, your files, your photos, your clipboard, your call log, your location or your battery status, even though the KDE Connect app itself can do some of those things with other software.
5. The People You Message
The phone numbers you import and the replies you receive are personal data about other people, held on your computer under your control. You decide who is in your list, what you send them and how long you keep it. Using QuickText for messages people agreed to receive, and honouring their opt-outs, is your responsibility as the sender, together with any local rules on unsolicited messages.
The app is built to help with that rather than get in the way: an eligible QuickText reply of STOP (or a similar word, in several languages) causes the number to be added to your block list automatically and skipped from that moment on, even during a send that is already running; you can block or unblock any number by hand; and any message, reply, contact or the whole history can be deleted at any time. None of this data ever reaches us, so a request to delete it is something you carry out on your own PC.
6. Microsoft Store
QuickText SMS is installed and updated through the Microsoft Store. Microsoft may process install and usage statistics under its own privacy statement; we only see the aggregated numbers Microsoft shows to app publishers, never anything about you personally.
7. Purchases
Licenses are purchased on pythonandvba.com, not inside the app. Payment and billing information is processed by Pabbly Subscription Billing, Stripe and/or PayPal; we receive your email address and the product purchased in order to deliver your license key. We do not store your payment card details. Please see the Pabbly, Stripe and PayPal privacy policies for details.
8. Legal Basis for Processing (GDPR)
If you are in the European Economic Area or the United Kingdom, we process the data described above under these legal bases:
- Contract performance: validating your license and delivering the product you bought
- Legitimate interests: enforcing the per-device license limit, detecting misuse of license keys, keeping short-lived server logs to prevent abuse and diagnose faults, counting active installs and overall usage, and seeing where setup gets stuck, through the switchable daily ping and setup steps, and answering the support messages you send
- Legal obligation: keeping transaction records where the law requires it
For the contacts, messages and replies handled inside the app, we are not the controller: that data never reaches us, and you decide alone what is collected and how long it is kept.
9. Data Sharing
We do not sell personal data. Purchase data is shared with the payment processors named above, and license records are stored by our hosting providers on our behalf. Support messages and feedback notes are shared only with the service providers that help us deliver and answer them (Reoon, Postmark, Todoist; see How we handle what you send). Nobody else receives your data, and your contacts, messages and replies cannot be shared with anyone because they never reach us in the first place.
Bosau Digital LLC is based in the United States, so the data described in this policy is processed in the United States and/or in the countries where our service providers operate. Where personal data of EEA or UK residents is transferred internationally, we and our service providers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses.
10. Data Retention
- License and activation records: kept for as long as your license is active and as required by law; this includes the device names registered to your license
- Server logs: deleted after 14 days (90 days for warnings and errors)
- Failed license checks: deleted after 90 days
- Usage pings and setup steps: kept as records keyed by the random install id, with the approximate country; no license key is stored with them, only whether the install was licensed
- Support messages and feedback notes: kept as support history for up to 24 months after your last contact, then deleted (one summary line per note stays in our delivery log)
- Everything on your PC: under your control alone; the app never deletes your data without you asking, and Delete local app data erases all of it, including your license key and every paired phone
One thing deliberately survives deletion of local app data and even an uninstall: the count of how many of the 20 free messages an install has used. It is two numbers with a signature, and the copies that outlive a reset sit in your Windows registry and in a small hidden file in your user folder, so that the free allowance cannot be reset by reinstalling. It holds no contacts, no numbers, no message text and nothing that identifies you. Neither copy is ever uploaded; the number of free messages left is included in a support message, but only if you send one.
11. Your Rights
If you are in the EEA or the UK, you have the right to access, correct, delete, restrict or receive a copy of the personal data we hold about you (which is limited to license, purchase and support records), and to object to processing based on legitimate interests. Contact contact@pythonandvba.com and you will receive a response within 30 days. These requests are honoured for customers everywhere, not only where the law requires it.
You also have the right to lodge a complaint with your local data protection supervisory authority. In the UK this is the Information Commissioner's Office (ico.org.uk); in the EEA you can find your national authority through the European Data Protection Board (edpb.europa.eu). We would welcome the chance to resolve your concern first, so please consider contacting us before you do.
12. Data Security
All communication between the app and our servers uses encrypted connections. The connection between your PC and your phone is encrypted too (TLS), and both ends check, on every connection, that the other presents exactly the certificate it paired with (QuickText does this from version 1.6). A device that presents a different certificate from the one stored at pairing is refused, even if it claims your phone's identifier. Other devices on your network can ask to pair, but nothing more: they cannot deliver texts, delivery reports or contacts to QuickText. The matching code shown on both screens during pairing is what tells you the phone answering is yours.
On your PC, your data is protected by your Windows user account like your other documents, and the app stores it outside any cloud-synced folder on purpose. The database itself is not separately encrypted, so anyone who can sign in to your Windows account, or who has a backup file you exported, can read your contacts, messages and license key. Treat those files accordingly.
13. Children's Privacy
QuickText SMS is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest change. Material changes will be visible here before they take effect.
15. Contact
New Mexico Business ID 0008115445
1209 Mountain Road Pl NE Ste N
Albuquerque, NM 87110
United States
Email: contact@pythonandvba.com
Website: pythonandvba.com
