textPlus: Text Message + Call

"We may collect information about your browsing, searching, and buying activities, such as your IP address, device numbers and identifiers, web addresses of the sites you come from and go to next, screen recordings, keystrokes, cursor movements, screen interactions, and clicks, browser and operating system information, platform type, connection speed, application performance (e.g., crash logs, battery life, loading time, latency, framerate or technical diagnostics), and other attributes."

The policy authorizes collection of keystrokes, screen recordings, and cursor movements — highly invasive surveillance that goes well beyond what a messaging app needs for core functionality.

"We may utilize a feature that, when you open and use/interact with our apps on your mobile device or access the Sites by or through a mobile device or through your browser, automatically accesses, collects, processes, monitors, and/or remotely stores "location data," and may include GPS coordinates (longitude and latitude), IP address, or similar information regarding the location of your device... When you authorize us to access your device's precise location, we may use it for marketing and advertising, analytics, fraud prevention, security, and compliance."

The app collects precise GPS location data and uses it not just for safety/911 purposes but also for marketing, advertising, and analytics — purposes unrelated to core messaging functionality.

"SDKs are third-party computer code that may be used for various purposes, including providing us with analytics regarding the use of our mobile applications, integrating with social media, adding features or functionality to our app, or facilitating online advertising. SDKs may also enable third parties to collect information directly via our Mobile Applications."

Third-party SDKs embedded in the app can collect user data directly from the device, and the company shares personal information broadly with affiliates, business partners, and advertising partners.

"We may automatically collect your internet protocol ("IP") address, user settings, MAC address, user data including email, name and location, browser information including plug-ins, device type, operating system, time zone setting, unique identifiers (including advertising identifiers), language settings, mobile device carrier, and radio/network information (e.g., Wi-Fi, LTE, 5G)... We may use inferences from any collected information to create a profile about your preferences and characteristics."

The company collects advertising identifiers, MAC addresses, and other device fingerprinting data, and builds inferred profiles about users — enabling cross-service and cross-device tracking.

"We retain Personal Information about you for as long as necessary to provide you with the Services. Sometimes, we keep your Personal Information for a longer period of time if required to comply with our legal obligations or as permitted by applicable law. Afterward, we retain some information in a de-identified and/or aggregated form but not in a way that would identify you personally."

No specific deletion timelines are provided, and the policy allows extended retention under broad justifications like potential litigation or legal requirements, with no clear maximum period.

"Please note that even if you request that we delete the information we've collected from you, we may still retain your information in an aggregated or anonymized form that does not identify you. We also will not delete your information if we are legally required to maintain it."

Data may survive deletion requests in aggregated form, and the company reserves broad discretion to retain data under legal justifications. No self-service deletion mechanism is described — users must contact the company.

"Communicating with you about your account, activities on our Services, and policy changes... This Privacy Policy also explains your choices for managing your information preferences and exercising privacy rights available under applicable privacy laws."

While the policy mentions communicating policy changes, it does not require explicit consent for changes and does not guarantee advance notice — the last updated date changes unilaterally.