1. In short

MobContact identifies incoming callers and lets you look up a phone number. To do that it relies on a database of number-to-name associations contributed by users who chose to share their address books, together with reports about nuisance and fraudulent numbers.

This means your phone number may appear in MobContact even if you have never used it, because somebody who saved you as a contact shared their address book. Section 8 explains how to remove it, and you do not need an account to ask.

2. Who is responsible for your data

The controller of the personal data described here is the operator of MobContact, contactable at [email protected]. Where the law requires a named legal entity, registered address or data protection officer, those details are published at [email protected], which is the contact point for every request and complaint under these terms.

3. What we collect

Data you provide. Account identifiers such as your phone number, and payment records if you subscribe. Payment card details are handled by our payment processor and are never stored by us.

Data from your device, only with permission. If you grant contacts access, the app uploads name-and-number pairs from your address book, which become part of the shared database. If you decline, the app checks only the number that is currently ringing.

Data generated by use. Numbers you look up, the time of the lookup, spam reports and tags you submit, device and app version, IP address, and diagnostic crash data.

Data from other users. Names and tags others have associated with a number, including yours.

4. Why we use it, and on what legal basis

• To identify callers and answer lookups - performance of the contract you enter into when you use the service.
• To detect spam, fraud and abuse - our legitimate interest, and yours, in not being defrauded.
• To take payment and prevent payment fraud - performance of the contract and compliance with financial record-keeping obligations.
• To keep the service working and secure - legitimate interest in operating a reliable service.
• To build the shared name database from contributed address books - consent, given by the contributing user through the in-app permission, which can be withdrawn at any time.

Where we rely on legitimate interests, we have weighed them against the rights of the people whose numbers appear in the database, which is why the unlisting route in section 8 requires no account and no justification.

5. When we share data

We do not sell personal data and we do not share it for advertising.

We share it only with: infrastructure and hosting providers that run the service; a payment processor, for subscriptions; and law enforcement or courts where a valid, binding legal request compels it. Each processor acts on our documented instructions.

Names and tags associated with a phone number are, by the nature of the service, visible to other users who look that number up.

6. How long we keep it

We keep each kind of data only for as long as the purpose it was collected for still applies:

• Account data - your number, name, device and subscription state - while the account exists. Delete the account and it goes with it.
• Lookup history - while your account is active, because the features that show it depend on it. You can clear entries yourself.
• Contributed address-book entries - retained until the contributing user withdraws permission, or until the number is unlisted.
• Spam reports - retained while they are still useful for identifying nuisance numbers.
• Verification codes - minutes. They expire and are discarded.
• Payment records - retained for the period required by applicable tax and accounting law.
• Access, diagnostic and abuse logs - retained only for as long as they are useful for investigating security incidents and abuse.
• Unlisting records - kept indefinitely, deliberately. That record is what stops the number being re-added later.

We keep each category only as long as it is useful. The categories above describe the principle honestly, but they do not yet state a number of days or months, because no scheduled deletion job exists to enforce one. Naming a period here before that job exists would put a promise on this page that the service does not keep.

7. Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, restrict or object to processing, withdraw consent, and receive your data in a portable format. You also have the right to complain to your local data protection authority.

Write to [email protected]. We answer within 30 days. We will ask you to demonstrate control of the phone number in question, because that is the only way to be sure we are not disclosing one person's data to another.

8. Removing your number

You can ask for your number to stop resolving in MobContact whether or not you have ever used it. Send the number to [email protected], or use the unlist option in the app.

Once unlisted, the number stops returning a name to anyone. We keep a minimal record of the unlisting itself so that the number is not re-added when another user next contributes an address book containing it - keeping that record is what makes the removal durable.

9. Security

Traffic between the apps and our servers is encrypted in transit with TLS, and access to production systems is limited to the people who operate the service. No system is perfect, and we do not claim otherwise; if a breach affects your rights we will notify you and the relevant authority as the law requires.

10. International transfers

Our servers are hosted in [HOSTING REGION TO BE CONFIRMED BY THE OPERATOR], and traffic to them passes through a content delivery network with points of presence worldwide. If your data is transferred outside your own jurisdiction, we rely on the safeguards recognised by applicable law, such as standard contractual clauses.

11. Children

MobContact is not directed at children under 16 and we do not knowingly create accounts for them. If you believe a child's data is held here, write to us and we will remove it.

12. Changes

If we change this policy in a way that materially affects your rights, we will say so in the app before the change takes effect. The date at the top always reflects the current version.

13. Contact

Questions, requests and complaints: [email protected].