Legal

Privacy Policy

We keep this simple: we only collect what we need to provide reliable calling, billing, and account security.

Last updated: February 24, 2026

1) What this policy covers

This Privacy Policy explains how OwnNumber ("we", "us", "our") handles personal data when you use our browser-based international calling service.

2) Data we collect

Account and sign-in data (Google + next-auth)

When you sign in with Google, we receive basic profile information such as your name, email address, and Google account identifier. We use this to create and secure your account.

Calling data (Twilio)

To place and manage calls, we process call metadata such as originating/destination number, timestamps, duration, connection status, and technical quality signals. This is required to deliver the service and troubleshoot issues.

Payment and credit data (Stripe)

Payments are processed by Stripe. We do not store full card numbers in our systems. We store transaction references, purchased credit amounts, and payment status to manage your account balance.

Usage and diagnostics (Microsoft Application Insights)

We collect app telemetry such as page views, errors, browser/device context, and performance metrics to improve reliability, security, and user experience.

3) How we use your data

  • Provide and maintain calling, account access, and purchased credits.
  • Prevent fraud, abuse, and unauthorized access.
  • Operate billing and payment reconciliation.
  • Monitor performance, fix bugs, and improve product quality.
  • Meet legal and regulatory obligations.

4) Legal bases (GDPR)

For users in the EEA/UK, we process personal data under one or more of these legal bases:

  • Contract: to provide the service you signed up for.
  • Legitimate interests: to secure, monitor, and improve the platform.
  • Legal obligation: where compliance is required by law.
  • Consent: where required for optional processing.

5) Data sharing

We share data only with trusted processors that help deliver the service, including Google (authentication), Twilio (telephony), Stripe (payments), and Microsoft Application Insights (analytics/monitoring). They process data under their own contractual and legal obligations.

6) International transfers

Because we serve expats globally, your data may be processed outside your country. Where required, we rely on safeguards such as standard contractual clauses or other approved transfer mechanisms.

7) Retention

We keep personal data only as long as needed for service delivery, security, accounting, dispute resolution, and legal compliance. Retention periods vary by data type and applicable laws.

8) Your privacy rights

Depending on your location, you may have rights to:

  • Access, correct, or delete personal data.
  • Object to or restrict certain processing.
  • Request data portability.
  • Withdraw consent where processing is based on consent.
  • Lodge a complaint with a data protection authority.

9) Security

We use technical and organizational safeguards to protect personal data. No online service can guarantee absolute security, but we continuously improve our controls.

10) Cookies

We use cookies and similar browser storage technologies to keep the service secure, functional, and measurable.

  • next-auth session cookies: used for authentication, session continuity, and account security.
  • Microsoft Application Insights cookies: used for analytics and performance monitoring so we can identify issues and improve reliability.
  • Stripe cookies: used during payment and fraud prevention flows for secure checkout processing.
  • Managing cookies: you can review, block, or delete cookies through your browser settings. Disabling cookies may affect sign-in, checkout, or core app functionality.

11) Contact us

Questions about privacy or data requests: support@ownnumber.app

You may also want to review our Terms of Service.