Privacy-first. Always.

The Operator, in the app and on this website, is run by Mainstream Movement Ltd, a company registered in England & Wales (no. 09098347). We decide how and why your information is used. Questions about any of this: privacy@operatorcalling.com.

In the app, depending on what you use and what you choose to give us:

• Your phone number, which you use to sign in to the app.
• Your name or username, a photo and other profile details, including your first name, email address, city, country and interests, where you choose to supply them. These are optional.
• Account and device identifiers: an internal user ID, and the identifiers Firebase and your phone use to deliver notifications and incoming calls.
• Your contacts, but only if you give the app contact access to invite people. They are read on your phone, and only the phone numbers you choose to invite are sent to us. Declining contact access does not stop you using the app.
• Call history and connection details: who a call was with, when it started and ended, how long it lasted, how it ended, and technical measures of call quality such as delay and packet loss.
• Groups, invitations, preferences and availability, including the time zone you use.
• Reports you make about other people or calls, and any text you write in them.
• Crash logs and diagnostics, such as device model, operating system, app version and your IP address, so we can find and fix problems.

On this website:

• Waitlist and early-access sign-ups: your email address and country, and, if you give them, your name, first language, time zone, how you found us, and whether you would like to help organise calls or have the app on iPhone or Android.
• Website accounts, if you sign in with email, Google or a phone number, and the profile and settings you save.
• Messages you send us through the contact form: your name, email address and message.
• Visits to sign-up links we share, recorded so we can tell which links work. We keep a scrambled (hashed) form of your IP address for this and for spam protection, not the address itself.

The website does not currently use advertising or analytics trackers. It uses a small cookie to remember that you are signed in.

The Operator does not currently record or store the audio content of calls. During a call, audio is sent between the people on it, through servers we run to connect them, and is not saved. Call audio is encrypted by the standard encryption built into the calling technology (WebRTC).

We keep a record that a call happened and basic details about it (see above), but not what was said.

• To create and run your account, and sign you in.
• To connect you with other people, including pairing within groups.
• To run groups, invitations and schedules.
• To invite people you chose from your contacts, only if you use that feature.
• For safety: blocking, flagging, reports, and acting on accounts that break the rules.
• To run, troubleshoot and improve the service, including crash diagnostics.
• To contact you about the service: sign-up confirmations, group and account notices, and replies to your messages.

When you call someone, or someone calls you, the other person sees the name and username on your profile. If you have not set a username, they may see your phone number instead, so it is worth setting one. Other group members can see what the group makes visible, such as member names.

We do not sell or rent personal information, and we do not share it with advertisers.

We use service providers to run the service, and they process information for us under our instructions:

• Google / Firebase: sign-in, our database, file storage (such as profile photos) and push notifications. Google reCAPTCHA helps protect phone sign-in from abuse, and Google provides public servers that help phones find each other for calls.
• Sentry: receives crash reports and diagnostics from the app.
• Hosting and infrastructure providers: host this website (Vercel) and the servers that connect calls.
• Email delivery: when we send service emails, they go through an email delivery provider and carry your email address and the message.

We may also disclose information where the law requires it, or to protect people's safety, or to respond to legal claims.

The Operator is a global service. Your information may be processed in countries other than your own, including by the providers above. Where the law requires it, we use appropriate safeguards for those transfers.

• Your account information, call history and group activity are kept while your account is open.
• If you ask us to delete your account, it enters a 30-day recovery period during which you can restore it. After that it is eligible for permanent deletion, which our team carries out by hand. When it is deleted, your account and associated personal data are deleted or anonymised.
• We may keep limited information where necessary for security, fraud or abuse prevention, legal or regulatory requirements, dispute resolution, or to establish, exercise or defend legal claims. It no longer forms part of an active account.
• Crash reports are held by Sentry, and messages you send us are kept while we deal with them. Waitlist details are kept until you ask us to delete them.

You can ask us to delete your account and the personal data that goes with it at any time. The steps are on our Account Deletion page, which you can read without signing in. If you cannot sign in, or you only joined the waitlist, email privacy@operatorcalling.com.

Deletion applies to the whole account. We do not currently offer a way to delete individual kinds of data while keeping your account open; you can edit or remove the profile details you added yourself in the app and on this website.

We take reasonable steps to protect your information. Data sent to Firebase and to this website is encrypted in transit with TLS, and call audio uses WebRTC encryption. Access to our admin tools is limited to authorised staff. No service can promise perfect security, so please tell us straight away if you think your account has been misused.

The Operator is for people aged 18 and over. It is not intended for children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us information, email privacy@operatorcalling.com and we will delete it.

You can contact us about access to your information, correcting it, deleting your account, privacy questions, and any other rights you have under the data-protection laws that apply to you. Email privacy@operatorcalling.com. If you are not happy with our answer, you can also complain to your local data-protection authority.

We may update this policy as the service changes. The date at the top shows when it last changed, and we will make clear any significant changes.