Privacy Policy

1. The distinction that matters

There are two very different kinds of information here and we treat them differently.

• Call metadata is the record that a call happened: the number dialled, when, for how long, what it cost, whether it connected. We keep this for every call, because we cannot bill you or investigate a fault without it.
• Call content is what was actually said. We do not record or listen to your calls unless you switch recording on.

2. What we collect

Account information. Your email address. There are no passwords here: you sign in with Google, or with a link sent to your email. If you sign in with Google we receive your name, email address and profile picture, and nothing else. If we need to verify you, the information you give us for that.

Payment information. Handled by our payment processor. We receive a confirmation, the amount, and the last four digits and brand of the card. We never see or store your full card number.

Call metadata. For every call: the number dialled, the country and band it resolved to, start and end time, duration, price, which carrier carried it, and whether it connected, reached voicemail or a menu. We also record the keypad tones you send during a call, which is how we learn which menu path reaches a human at a given organisation.

Recordings and transcripts, only if you turn recording on. Where you enable it, we keep the audio for 90 days so you can play or download it, then delete it. You can delete one sooner. The transcript stays on your account until you delete it. The person you call is told first only if you switch that on.

Technical information. Browser and device type, and connection-quality measurements from your calls. Our edge infrastructure necessarily receives an IP address to connect a request, but we do not store raw IP addresses in our application database. We may retain a two-letter country code derived by the edge at signup and when a call is placed, to understand coverage, reliability and aggregate demand.

3. Why we collect it, and our legal basis

• To connect your calls and bill you. Necessary to perform our contract with you.
• To prevent fraud and protect the network. Our legitimate interest, and in places a legal obligation. Toll fraud on a prepaid calling service is common and expensive, and it is checked against exactly this data.
• To keep required records. Tax, accounting and telecommunications rules require us to retain certain call and payment records.
• To improve reliability and coverage. Our legitimate interest. Aggregated country, destination and outcome data tells us which routes are dropping calls and which markets the service serves.
• Optional web and acquisition analytics. Your consent, where we use optional cookies or similar browser storage. You can decline without losing access to the service.
• Advertising measurement. For United States visitors, we measure advertising subject to your right to opt out. Elsewhere, we ask for consent before enabling it. We respect saved refusals and Global Privacy Control browser signals. Agreement to our Terms does not replace a required advertising consent.
• To record and transcribe calls. Only on your consent, given by switching recording on, and withdrawable at any time.

4. Recording is your responsibility too

Whether a call may lawfully be recorded depends on where you are and where the other person is. Some places require every party to agree. Recording is off by default, and if you turn it on it is on you to have whatever consent the law requires. Tell the other person.

5. Who we share it with

We do not sell your personal information, and we do not share it for advertising. We share only what is needed, with:

• Telnyx, Twilio and Vonage, our telecommunications carriers. Whichever one carries a given call receives the number you are calling and the call audio, because a call cannot be connected without a carrier. We choose between them per call on measured line quality.
• Stripe, for payments and refunds. Your card details go to Stripe directly and we never see or store them.
• Supabase, which holds your account, your balance and your call records.
• Railway, which runs the application itself.
• Sentry, for error monitoring. Phone numbers are stripped out before anything is sent, including from URLs and request bodies.
• PostHog, for privacy-reviewed product analytics. It receives approved product events such as the country called and cost, never the number itself or anything said on a call. Optional browser analytics is used only with your consent.
• Meta, for advertising measurement when permitted by your regional settings and privacy choices. It receives browser and ad-click identifiers, confirmed purchase amounts and currency. Its browser pixel also receives your IP address and browser information. We do not send it your email, phone numbers, private page URLs or anything said or written about a call. You can turn this off through Cookie settings, including by choosing Reject optional cookies. See our Cookie Policy for retention and withdrawal details.
• Telegram, which delivers feedback you send us. It receives your message, the email address you give us for a reply, and the page you were on. Never the number you were calling.
• DeepInfra, which transcribes call recordings. It receives the audio of a call only where recording was switched on for that account and left on for that call, returns the transcript, and the audio is then deleted. Nothing is sent for a call that was not recorded.
• OpenRouter, which passes a transcript to Gemini, a Google model, to write a note. It receives a call transcript and any call notes you typed only when you press Generate AI call note, and the transcript of a voicemail left for your number so it can be summarised. Nothing is sent for a call with no transcript.
• Authorities, where we are legally required to. We resist requests that are overbroad and, where we are allowed to, we tell you.

Every provider above processes data on our instructions and under contract.

6. How long we keep it

• Call metadata and billing records: for as long as tax and telecoms record-keeping rules require, then deleted.
• Recording audio: kept for 90 days, then deleted.
• Transcripts: until you delete them or close your account.
• Account data: deleted on request, except records we must keep by law.

7. Your rights

Depending on where you live, you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. You can withdraw consent to recording at any time without affecting recordings already made. You can complain to your local data protection authority.

Ask at support@airlophone.com. We reply within 30 days.

8. Security

Call audio is encrypted in transit. Access to call records is limited to the people who need it to run the service and is logged. No system is perfectly secure, and we will tell you and the relevant regulator if a breach affects you.

9. International transfers

Connecting an international call necessarily involves sending the number you dialled to carriers in other countries. Our own infrastructure may also process data outside your country.

10. Children

Airlophone is not for under 18s and we do not knowingly collect their information. Tell us if you think we have.

11. Cookies

We use essential cookies for sign-in, security and requested settings. Optional analytics cookies are off until you choose to allow them. See our Cookie Policy for the categories, purposes and how to change your choice. Ads measurement uses the regional rules described above and can be turned off in Cookie settings.

12. Changes

We will post any update here and, where a change materially affects you, tell you before it takes effect.

13. Contact

Airlophone is operated by Fabio Jonathan and registered in Washington, United States. Reach us at support@airlophone.com.