WhatCall
Privacy Policy
Effective: 18 September 2026 ยท Last updated: 18 September 2026
Who operates WhatCall
WhatCall is operated by Innovative Developers LTD (company number 09011626), Oakingham House, Frederick Place, High Wycombe, Buckinghamshire, England, HP11 1JU. Questions and privacy requests can be sent to support@innovative-devs.com.
Information and how it is used
| Information and source | Purpose and recipients | Retention | Linked or tracking |
|---|---|---|---|
| Account, installation and session identifiers generated by the app and WhatCall | Create and secure your account, keep you signed in and associate numbers and history with you. Used by WhatCall; a session credential is also stored securely on your device. | While needed for an active account or session, then for limited security and legal needs. | Linked to your WhatCall account; not used for tracking. |
| Caller-ID phone numbers, labels and verification codes submitted by you | Confirm control of a caller ID and let you select verified numbers. Used by WhatCall and Telnyx. Provider credentials stay on our server. | Verified-number records remain while active and as needed for security, disputes and law. Codes and pending challenges expire promptly. | Linked to your account; not used for tracking. |
| Destination number entered by you or selected from Contacts | Place the call, provide history, prevent abuse and support you. Sent to WhatCall, Cloudflare, Telnyx and telephone networks needed to complete the call. | Call history remains while your account is active and afterwards only as reasonably needed for billing, disputes, security and law. | Linked to your account and call; not used for tracking. |
| Call metadata created by the app, server and communications providers | Provide date, time, duration, status and attempt outcomes; bill accurately; prevent abuse; and operate the service. Used by WhatCall and relevant providers. | Kept according to account-history, billing, dispute, fraud-prevention and legal needs. | Linked to your account and call; not used for tracking. |
| Live microphone and call audio from you and the called network | Carry the active call through Cloudflare, WhatCall's calling infrastructure, Telnyx and telephone networks. | WhatCall does not retain the call's audio content. | Associated with the live call; not used for tracking. |
| Support messages sent by you | Answer and investigate your request. Used by Innovative Developers and the email providers used by you and us. | While the request is active and afterwards where reasonably needed for follow-up or legal records. | Linked when you identify yourself; not used for tracking. |
| App Store transaction identifiers and status supplied by Apple when you buy credits | Validate purchases, grant credits, prevent duplicate grants and reconcile refunds or revocations. Used by Apple and WhatCall. | Kept in WhatCall's billing ledger for financial, dispute, fraud-prevention and legal requirements; Apple retains its records under its own terms. | Linked to your WhatCall account using an app account token; not used for tracking. |
| IP address, timestamps, request identifiers, app version and error details from network and service use | Security, rate limiting, reliability and fault diagnosis. Used by WhatCall and infrastructure providers such as Cloudflare. | Short operational periods based on security, reliability and support need. | May be linked to an account or request; not used for advertising tracking. |
Information kept on your device
Your Contacts are read only when you choose to use them. WhatCall does not upload your address book; only the destination number you select is sent when you place a call. Display preferences, review-prompt eligibility and cached interface data are also kept locally. The app stores its session credential in the iOS Keychain.
Permissions
Microphone access is used for live calling. Contacts access is optional and lets you choose a destination without typing it. You can change either permission in iPhone Settings. WhatCall does not request tracking permission and does not use your information for cross-app advertising.
Third-party services
We use companies that provide hosting, security, content delivery, phone-number verification and telecommunications. These currently include Cloudflare and Telnyx, as well as Apple for App Store distribution and purchases when offered. They process only the information needed for their role and also operate under their own privacy terms.
Legal bases
Where UK or European data-protection law applies, we process information to provide the service you request and perform our contract with you; to comply with legal obligations; and for legitimate interests such as service security, fraud prevention, support and reliability. We use permission-based device features only after you choose to grant access.
Retention and deletion
We keep account, verified-number and call-history information while your account is active and for only as long afterwards as reasonably needed for billing reconciliation, fraud prevention, dispute handling, security and legal obligations. Verification challenges, temporary call grants, rate-limit records and routine logs expire sooner according to operational need. Support correspondence is kept while the request is active and afterwards where reasonably required for follow-up or legal records.
You can delete your account and user-visible call history from Settings in the app, or ask support for help. Some transaction, security, fraud-prevention or legal records may need to be retained after deletion; when that applies, they are restricted to those purposes and removed or anonymised when no longer required.
Security
We use encrypted network connections, short-lived call authorisations, access controls and provider-side safeguards designed to protect information. No internet service can promise absolute security, so please contact us promptly if you believe your account or phone number has been misused. Never send a verification code to support.
International transfers
Our providers may process information in countries outside your own. Where required, we use contractual and technical safeguards intended to provide protection appropriate to the information and applicable law.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, receive a portable copy, or complain to a data-protection authority. Contact us to make a request. We may need to verify your identity before acting on it.
Children
WhatCall is not directed to children under 13. A young person should use it only where permitted by local law and with a parent or guardian's involvement. If you believe a child has provided personal information improperly, contact us so we can investigate and delete it where appropriate.
Changes
We may update this policy as WhatCall or the law changes. We will update the date above and give additional notice in the app where a change materially affects your rights or how we use information.
Contact
Email support@innovative-devs.com.