Mobile App Privacy Policy
Last updated: July 2026
This policy covers the NeuraPBX mobile app for iOS and Android. The app is a client for a NeuraPBX phone system that you host. It talks only to the server address you enter at sign-in — we operate no service that receives your calls, messages, or contacts. For the website, see the site privacy policy.
What we collect: nothing
NeuraPBX does not collect, receive, store, or process any personal information through the mobile app. The app contains no analytics SDK, no advertising SDK, no crash-reporting service, and no tracking of any kind. We do not build a profile of you, and we have no ability to see your calls, messages, voicemail, contacts, or transcripts.
All of your data goes to one place: the NeuraPBX server you or your organization runs. You (or your employer) control that server and act as the data controller for everything on it.
Device permissions and why they are needed
- Microphone. Required to place and receive calls. Audio is captured only during an active call.
- Camera. Used for video calls, and to scan a QR code when provisioning the app against your server. No photos or video are stored by the app.
- Notifications. Used to alert you to incoming calls, voicemail and messages when the app is in the background.
- Bluetooth. Used to route call audio to headsets, car kits and other audio devices.
- Background audio / foreground service. Keeps a call connected when you switch apps or your screen locks, and lets an incoming call ring and display full-screen.
Permissions are requested only when the relevant feature is first used, and you can revoke any of them in your device settings — the affected feature will simply stop working.
What is stored on your device
- Sign-in credentials. Your access token and SIP password are held in the operating system's secure credential store — the iOS Keychain or the Android Keystore — not in ordinary app files.
- Your server address. The NeuraPBX server URL you entered, so you do not have to retype it.
- Recent call history and locally saved contacts. Kept in the app's private storage on the device.
All of this stays on the device. Deleting the app removes it. You can also sign out to clear your stored credentials.
Calls, messages and media
Call audio and video travel over SIP and WebRTC directly between your device and your NeuraPBX server (or the media path your server negotiates). Chat, voicemail and contacts are served by your own system. None of it passes through NeuraPBX-operated infrastructure. Whether calls are recorded, how long recordings are kept, and whether AI transcription is used are decisions made by the administrator of your NeuraPBX server — not by us. NeuraPBX's AI features can run entirely on your own hardware, so call audio need never leave your network.
Push notifications
If you allow notifications, the app obtains a push token from the platform and registers that token with your own NeuraPBX server, so your server can alert you to incoming calls. Delivering a push message necessarily involves the platform's notification infrastructure — Apple Push Notification service on iOS, Firebase Cloud Messaging on Android, and the Expo push service that relays to them. Those providers handle the delivery envelope (your push token and the notification payload your server sends, such as a caller's name or number). We do not receive these messages. Turning notifications off in your device settings stops this entirely.
Children
The app is a business communications tool and is not directed to children. We do not knowingly collect information from children — and, as described above, we do not collect information from any user.
Your rights and requests
Because we hold no personal data from the app, requests to access, correct, export or delete your information should be directed to the operator of your NeuraPBX server — normally your employer or IT administrator. If you believe we hold data about you, or you have a question about this policy, email privacy@neurapbx.com.
Changes
If we change how the app handles data, we will update this page and the “last updated” date above. Material changes will be noted in the app's release notes.
This is a plain-language summary provided for convenience and is not legal advice. Have it reviewed by counsel and tailored to the privacy laws that apply to you (for example GDPR / UK GDPR / CCPA) and to Apple App Store and Google Play data-disclosure requirements before publishing. See also the mobile app terms of use.