Overview
MFS Tool is a personal utility for capturing mobile‑financial‑service (MFS) transaction SMS and forwarding them to a destination you choose. It has no account, no cloud service of its own, and no backend we operate.
This policy explains exactly what the app accesses, what stays on your phone, and the one thing it sends out — the transaction data — and where. Plain language, no surprises.
What stays on your device
The parts that define how the app works never leave your phone:
- The senders you listen to (bKash, Nagad, Rocket, and any custom sender you add) and their matching IDs.
- The built‑in parsing patterns used to read a transaction out of an SMS — these are bundled inside the app and are never transmitted anywhere.
- Your local message history, kept as a cache and delivery queue so the app can retry and show you what it captured.
- Your Webhook URL and Key, stored in the app's private storage on your device and used only to reach the endpoint you set.
There is no server, account, or sync involved in managing any of this.
What gets sent, and where
The app sends data to one place only: the Webhook URL you enter yourself, authenticated with the Key you set. You control that destination completely — the app has no backend of its own.
For your default (bundled) providers
The SMS is parsed on your device and only the structured fields are sent — the provider name, transaction type, amount, the other party's number, reference, balance, and transaction ID. The raw SMS text is not sent.
For custom senders you add
The captured message is forwarded as‑is to your webhook, so you can process it however you like.
In both cases, delivery is one‑way to your endpoint. If it can't be reached, the data waits on your device and retries — it is never sent anywhere else.
What is never collected
- Messages from senders you have not approved are ignored and never stored or sent.
- The app does not read your contacts, files, photos, location, or any other device data.
- There are no analytics, no advertising, and no third‑party trackers of any kind.
- We do not collect, profile, or sell your information — there is no "we" receiving anything.
Permissions we request
Each permission maps to one job, and you can review or revoke them any time in your system settings:
- Receive & read SMSTo capture incoming transaction messages from your approved senders — the core purpose of the app.
- NotificationsTo show the ongoing "listening" notification while the app is capturing.
- Ignore battery optimization & AutostartSo capture keeps working reliably in the background on aggressive power‑management devices.
- Unrestricted background dataSo a captured transaction can reach your webhook even in the background.
Revoking a permission does not delete anything — it only stops the job that permission was for. Capture stops if SMS access is removed.
Storage & your control
Captured messages are stored locally as a cache and retry queue — not a database you need to back up. You are always in control:
- Clear Cached SMS in Settings wipes the local history at any time.
- Clearing the app's data or uninstalling removes everything the app stored on your device.
- Data already delivered to your own webhook is governed by you, not by this app.
Children
MFS Tool is a utility for people who manage their own mobile‑financial‑service accounts. It is not designed for or directed at children, and it does not knowingly handle data from anyone under 13.
Security
Transaction data leaves your phone only over the connection your webhook provides, so use an HTTPS endpoint and keep your Key private. Because the destination is yours, its security — the server, the certificate, who can read what arrives — is yours to manage.
On the device side, settings and cached messages live in the app's private storage, readable by the app itself and by anyone with access to your unlocked phone. Keep a screen lock on.
Use at your own risk
MFS Tool is provided "as is", without warranty of any kind. You install and use it at your own risk. You are responsible for the Webhook URL and Key you configure, for keeping that destination secure, and for complying with your carrier's, your bank's, and your local laws regarding SMS and financial data. To the maximum extent permitted by law, BT4Team is not liable for any loss, damage, or missed or misread transaction arising from your use of the app.
This app is not harmful
MFS Tool contains no malware, spyware, or hidden behaviour. It does not damage your device, does not run ads, and does not exfiltrate data to anyone. It reads only the SMS you approve and sends only to the endpoint you configure. It is a straightforward, transparent tool — nothing about it is designed to harm you or your phone.
Changes to this policy
If the app's behaviour changes in a way that affects your data, this policy will be updated and the "Last updated" date above will change. Continued use after an update means you accept the revised policy.
Contact
Questions about this policy or the app? Reach the team at bt4team.com.