Privacy Policy
This policy explains what BEK Phone does with your information. It is written to be read, not to be survived: if a section is missing below, it is because that kind of data is not involved at all.
What we collect
BEK Phone is a prepaid calling service, so it needs an account on our servers. When you sign up we store your email address, the country you choose, and either a securely hashed password or, if you sign in with Apple or Google, the sign-in identifier that service gives us (Google Firebase Authentication handles that sign-in step). We use your email address to sign you in and to send account emails, such as verification codes. You do not need to give us your phone number.
Your wallet: you add credit to a prepaid balance by card on a secure payment page run by Stripe, our payment processor. Your card details go to Stripe, never to us or to the app. We keep the amount, the result and Stripe's payment reference for each top-up, and every change to your balance. If you send a mobile top-up or share credit with someone, we also keep the phone number or email address you sent it to, and any note you add.
Your calls: to connect, bill and protect each call we record the number you dialled, when the call started and ended, how long it lasted, the rate and what it cost, the quality tier and the telephone carrier that carried it, technical call-quality details, and the IP address your app connected from. We keep this call history while your account is open, so you can see it in the app and so we can bill correctly, settle disputes and prevent fraud.
Your voice: during a call, BEK Phone uses your microphone and carries your voice live through our call servers to the telephone network that connects the person you are calling. We do not record your calls, and the audio is not stored.
Your contacts: if you allow it, BEK Phone reads your address book on your device so you can pick someone to call and see the rate to their number. Your contacts are never uploaded to us; only the number you choose to call is sent, to place that call.
Notifications: if you allow them, the app registers a notification token with Apple (on iPhone) or with Google Firebase Cloud Messaging (on Android), and we store it with your device model and app version so we can send you notifications about your account and calls.
Support: if you contact us through the app's support section, we keep your messages so we can answer you.
Our servers also receive the technical details any request carries, such as your IP address and the app and device you use, which we keep in security and audit logs to protect your account and prevent fraud. We do not sell any of this, and we share it only as needed to provide the service: with Stripe for payments, with Google and Apple for sign-in and notifications, and with the telephone carriers that connect your calls, who receive the number you dial.
What we never do
We do not record or listen to your calls, we do not upload your address book, we never see your card number, and we do not sell your personal data.
Deleting your account
You can ask us to close your account at any time by emailing us from the address on your account. Closing starts a 14-day grace period, and signing in again during it cancels the closure. Any unused credit is lost when the account is closed. After 14 days we anonymise the account: your email address and password are removed, your notification tokens, sign-in sessions, notifications and support messages are deleted, and the numbers you called or sent top-ups to are shortened to their first four digits. Billing records (your wallet transactions, top-ups and the charges for each call) are kept, because tax and accounting law requires us to keep them.
Keeping your data safe
Your account, payments and call requests travel to our servers over encrypted (HTTPS) connections, and you enter your card details only on Stripe's secure payment page. Calls themselves are not end-to-end encrypted: like an ordinary phone call, your voice passes through our call servers and the telephone networks that connect the person you are calling.
Your rights
Under the UK GDPR and similar laws you have the right to access, correct, or delete the personal data we hold about you — the account, wallet, call history and support messages described above — and to object to its processing. Contact us and we will answer. Billing records we must keep by law are kept even after your account is closed, as described above.
Changes to this policy
If this policy changes, the updated version appears on this page with a new effective date.
Contact
Questions about this policy or your data: [email protected]