SMS / Text Message Privacy

ParrotIt sends text messages for one reason only: to deliver a one-time verification code when you set up or use phone-based device recovery. This applies to both responders and setters. This policy explains what those messages are, how your phone number is handled, and what ParrotIt will never do with it.

Last updated: 31 July 2026

When ParrotIt sends you a text message

ParrotIt only sends an SMS when you choose to protect your account with phone-based recovery, or when you use that recovery to restore your account on a new device. You enter your phone number, ParrotIt sends a single numeric verification code, and you type it back to confirm the number is yours.

• Responders can use it to protect access to their saved answers.
• Setters can use it to protect continued access to their workspace.
• If you never set up phone recovery, ParrotIt never sends you a text message.

What the messages contain

Each message contains a short numeric verification code and a brief line of text — nothing else. There are no links, no attachments, and no marketing. These are transactional messages you asked for, not promotional messages.

The messages are sent for ParrotIt by Google, so the sender may show as GCloudApps or as a number you do not recognise rather than as ParrotIt. That is expected. Because a genuine ParrotIt code never arrives with a link, any text that claims to be from ParrotIt and asks you to tap one is not from us.

Message frequency and charges

You only receive a message when you request one — setting up phone recovery, or restoring your account on a new device. There are no recurring, scheduled, or automated marketing messages. Message and data rates may apply, depending on your mobile carrier and plan.

Your consent

By entering your phone number to set up phone recovery, you consent to receive a one-time verification code by SMS. Phone recovery is optional: if you would rather not receive any text messages, simply do not set it up.

How your phone number is handled

• Text messages are delivered through Google Firebase Phone Authentication. Google uses your number to send the code and runs an invisible reCAPTCHA check to stop automated abuse. Google's handling of that delivery is covered by Google's privacy policy.
• ParrotIt keeps phone verification in a dedicated authentication context, separate from your form answers and workspace records. Google Firebase Authentication stores the number for that service; it is not protected by ParrotIt's answer encryption. ParrotIt does not copy the raw number into Firestore, analytics, or recovery logs. It retains only a keyed, role-separated lookup that cannot be used to send a text or recover the original number.
• Your recovery data is encrypted on your own device before it is stored. The PIN is checked through a password-authenticated protocol, so ParrotIt does not receive the PIN or keep a reusable PIN verifier.

What ParrotIt does not do with your number

• ParrotIt does not send marketing or promotional text messages.
• Phone numbers used for verification are not sold, rented, or shared with third parties or affiliates for marketing purposes.
• Your number is used only to deliver the verification code and enable the recovery you set up.

Stopping SMS

Because each message is a one-time code you request yourself, there is nothing recurring to unsubscribe from. To stop using SMS entirely, do not set up phone recovery, remove it from your device and recovery settings, or use a different recovery method such as a recovery code.

Contact

For questions about SMS and text messages, contact ParrotIt via parrotit.app.

Related documents