Mobile App Privacy Policy

Last updated: July 2026

What we collect: nothing

NeuraPBX does not collect, receive, store or process any personal information through the mobile app. There is no analytics SDK, no advertising SDK, no crash-reporting service and no tracking of any kind. We cannot see your calls, messages, voicemail, contacts or transcripts.

Your data goes to one place: the NeuraPBX server you or your organization runs. You control that server and act as the data controller for everything on it.

Device permissions and why they are needed

• Microphone — to place and receive calls. Audio is captured only during an active call.
• Camera — for video calls, and to scan a QR code when provisioning the app against your server. No photos or video are stored by the app.
• Notifications — to alert you to incoming calls, voicemail and messages when the app is in the background.
• Bluetooth — to route call audio to headsets, car kits and other audio devices.
• Background audio / foreground service — to keep a call connected when you switch apps or lock the screen, and to let an incoming call ring full-screen.

Permissions are requested only when the relevant feature is first used, and you can revoke any of them in your device settings — the affected feature will simply stop working.

What is stored on your device

• Sign-in credentials — your access token and SIP password are held in the operating system's secure credential store (iOS Keychain / Android Keystore), not in ordinary app files.
• Your server address — so you do not have to retype it.
• Recent call history and locally saved contacts — kept in the app's private storage.

All of this stays on the device. Deleting the app removes it; signing out clears your stored credentials.

Calls, messages and media

Call audio and video travel over SIP and WebRTC directly between your device and your NeuraPBX server. Chat, voicemail and contacts are served by your own system. None of it passes through NeuraPBX-operated infrastructure. Whether calls are recorded, how long recordings are kept, and whether AI transcription is used are decisions made by the administrator of your server — not by us. NeuraPBX's AI features can run entirely on your own hardware, so call audio need never leave your network.

Push notifications

If you allow notifications, the app obtains a push token from the platform and registers it with your own NeuraPBX server, so your server can alert you to incoming calls. Delivery necessarily involves the platform's notification infrastructure — Apple Push Notification service on iOS, Firebase Cloud Messaging on Android, and the Expo push service that relays to them. Those providers handle the delivery envelope (your push token and the payload your server sends, such as a caller's name or number). We do not receive these messages. Turning notifications off in your device settings stops this entirely.

Children

The app is a business communications tool and is not directed to children. We do not knowingly collect information from children — and, as described above, we do not collect information from any user.

Your rights and requests

Because we hold no personal data from the app, requests to access, correct, export or delete your information should go to the operator of your NeuraPBX server — normally your employer or IT administrator. If you believe we hold data about you, email privacy@neurapbx.com.

Changes

If we change how the app handles data, we will update this page and the “last updated” date above. Material changes will be noted in the app's release notes.

Contact

Questions about this policy? Reach us at privacy@neurapbx.com. See also the mobile app terms of use.

This is a plain-language summary provided for convenience and is not legal advice. Have it reviewed by counsel and tailored to the privacy laws that apply to you (for example GDPR / UK GDPR / CCPA) and to Apple App Store and Google Play data-disclosure requirements before publishing.