This policy explains how Digital Dialer, operated by Mobile App Starter ("Digital Dialer," "we," "us," or "our"),
handles information through the Digital Dialer website, web platform, and Android and iOS mobile companion apps.
Information we collect and process
Account and profile information
We process your company name, email address, password in hashed form, optional forwarding number, account settings, subscription status, and connected phone numbers. Provider services are held in your own Twilio account; Digital Dialer processes the connection and communications you authorize.
Calls, messages, and voicemail
To provide calling and messaging, we process originating and destination phone numbers, SMS and MMS content and attachments,
call status, timestamps, duration, routing information, voicemail audio, and related delivery or error information. Live microphone
audio is transmitted to our calling provider when you place or answer a call. If you intentionally use a call-recording feature,
the recording and its associated metadata are also processed and stored for your account.
When you attach a photo in the mobile app, only that selected photo is uploaded to Digital Dialer and shared with Twilio for MMS delivery. Uploaded photos are available for up to 28 days; expired files are removed by scheduled cleanup or the next upload. Provider delivery uses an unguessable, expiring link: anyone with that link can access the photo until it expires, so do not share it. Received photos are fetched through your authenticated account without exposing your Twilio credentials. Copies held by Twilio, recipients, or backups follow their separate retention practices. Choosing a photo does not upload your photo library.
Contacts
Contact access is optional and requested only when you choose the Contacts feature. The mobile app reads contact names and phone
numbers on your device so you can choose whom to call or message. Digital Dialer does not upload or store your address book as a
contact list. When you select a contact to call or message, that selected phone number becomes part of the resulting call or message record.
Device and app information
We process an app-generated device identifier, device platform and label, app version, selected Digital Dialer line, session status,
last activity time, and push-notification token. Our servers and hosting providers may also process standard request information such
as IP address, browser or device type, timestamps, and security or error logs.
Billing and connected services
Stripe processes web payment-card details; Apple processes iOS In-App Purchase payments. For Apple Connect subscriptions we retain an account-linking token, original and current transaction identifiers, signed verification and notification records, subscription dates, environment, renewal and refund/revocation status to verify access and prevent duplicate or misassigned purchases. We retain billing identifiers, subscription and payment status, and transaction references,
but we do not store full payment-card numbers. If you connect Google Sheets or optional AI features through the web platform, we process
the configuration and content necessary to perform the actions you request.
Terms and purchase-policy records
We retain the Terms of Use version and acceptance time associated with your account, together with the IP address and browser information used during acceptance. We use these records for security, compliance, customer support, and dispute resolution. Commercial cancellation and refund conditions are explained in our Terms of Use.
Messaging permission and compliance reviews
For independently billed Twilio Connect numbers, we record each campaign confirmation, its wording and version, your account, time, IP address, browser information, Terms of Use version, and a snapshot of the campaign's sending numbers, configuration, recipient phone numbers and messages. You retain the original consent evidence; there is no routine evidence upload or owner approval for Connect texting. Authorized reviewers can use these records for security, compliance, support and disputes. A confirmation is not independent verification of recipient consent. Resetting or deleting a campaign or inbox thread does not erase its confirmation audit history.
When you submit a messaging review, we store recipient phone numbers, consent dates and methods, the opt-in wording, supporting evidence links, the sending-number and message snapshots, and review decisions. Authorized platform reviewers use this information to check permission and messaging safety. Evidence links are not fetched automatically; reviewers may open the original records you provide. Pre-send audit records include the recipient, a message hash, the sending method and the check outcome. Do not submit passwords, payment-card details or unnecessary personal information. These records are separate from inbox threads; deleting a thread does not delete its permission-review history. Keep originals available and submit fresh evidence if the sender, purpose or permission changes.
Affiliate referrals
When you follow a Digital Dialer affiliate link, we set a first-party attribution cookie for up to 30 days. The cookie contains an opaque random token rather than an affiliate's identity or your contact information. We store a one-way hash of that token, the referring affiliate code, timestamps, and keyed hashes of limited network and browser signals for attribution, security, duplicate prevention, and fraud review. If you create an account during the attribution period, the referral record is connected to your Digital Dialer account.
Affiliate payout records may include the recipient's legal name, contact email, destination country and transfer method, payout amounts, status, and external transfer reference. Digital Dialer does not request or store bank account numbers, IBANs, SWIFT details, CLABEs, or banking passwords in the affiliate portal. When the optional owner payout Sheet is configured, only operational payout records are exported from Digital Dialer to that owner-controlled Sheet; Sheet edits do not authorize transfers or change the authoritative payout ledger.
How we use information
Authenticate accounts, maintain sessions, and enforce device and account safeguards.
Provide phone numbers, calls, SMS, MMS, voicemail, contact selection, push notifications, and synchronization between web and mobile.
Process subscriptions, usage allowances, refills, transactions, and service-related communications.
Attribute eligible affiliate referrals, calculate program activity, administer international payouts, prevent abuse, and resolve commission disputes.
Operate optional Google Sheets, campaign, analytics, lead-flow, and AI features selected through the web platform.
Comply with legal obligations and enforce our agreements.
We do not sell personal information. The mobile app does not contain third-party advertising SDKs, and we do not use contacts, message content, or call audio for advertising.
Service providers and disclosures
We disclose information only as needed to operate the service, follow your instructions, protect the platform, complete business transactions, or comply with law. Providers may include:
Twilio for phone numbers, calling, messaging, voicemail, call routing, recordings when enabled, and communications metadata.
Google Firebase for mobile push notifications, and Google APIs when you connect Google Sheets.
Stripe for checkout, subscriptions, billing, and fraud prevention.
Apple for iPhone push notifications, iOS Connect purchases, subscription restoration, renewal, cancellation, refunds and signed subscription verification.
OpenAI only when an account enables and uses optional AI functionality.
Hosting, security, monitoring, and email-delivery providers that support platform operations.
These providers process information under their own terms and privacy practices. We may also disclose information when required by law, to respond to valid legal process, or to protect users, Digital Dialer, or others.
Message alerts use device notification tokens, message identifiers and unread counts. The push payload contains a generic new-message notice, not the text message body or sender's phone number. Reading a message requires your signed-in Digital Dialer session.
Security and retention
Call recordings and received voicemail are available for 28 days, then scheduled for permanent deletion. Download anything you want to keep. Twilio bills recording and storage directly to your own account. Expired and manually deleted provider audio is permanently removed through independent cleanup with retries. Limited deletion identifiers, timestamps, and encrypted provider credentials may be retained to finish cleanup after a line or account is removed. Cleanup credentials are cleared after confirmed deletion; limited deletion audit metadata may remain. Uploaded greetings and voicemail-drop files have separate retention controls.
We use HTTPS in transit, hash account passwords, restrict access to production systems, and encrypt selected provider credentials.
No security method is guaranteed to be completely secure, so users should protect their passwords and devices.
We retain account and service data while needed to provide Digital Dialer and for legitimate business, security, dispute-resolution,
billing, regulatory, and legal purposes. Retention varies by data type and provider. After a verified deletion request, we delete or
de-identify account-associated data unless retention is required for fraud prevention, financial records, telecommunications compliance,
legal claims, or another lawful purpose. Residual copies may remain temporarily in routine backups until those backups expire.
Your choices and controls
You can deny or revoke Contacts, Microphone, and Notification permissions in your device settings. Some related features will not work without the relevant permission.
You can delete individual message threads, voicemail entries, uploaded greetings, and call recordings using available platform controls.
You can manage web subscriptions through Billing, Apple Connect subscriptions through Apple's subscription controls, and your own Twilio numbers in Connect.
You may contact us to request access, correction, or deletion, subject to verification and applicable law.
Account control
Request account deletion
You can request permanent deletion from the mobile app or through our public request page. Active subscriptions and phone-number rentals
must be cancelled as part of closing the account; you may cancel them first or ask us to assist in your request. We verify control of the
registered email before processing deletion.
Deleting your Digital Dialer account does not automatically cancel an Apple subscription; manage renewal through Apple. We retain necessary purchase and audit records subject to legal and accounting requirements without making them available to another platform account.
When you connect your Twilio account, Digital Dialer stores encrypted account credentials and calling keys, selected number routing, inventory, balance snapshots, registration status and connection notices. These are used to operate your selected numbers and display account health. Credentials are never shown back in account pages. Provider payments are made directly to Twilio. Disconnecting disables use here but does not cancel Twilio services; credentials may be retained for pending audio cleanup. Revoke access by rotating your Auth Token and any Digital Dialer calling keys in Twilio. This can prevent pending cleanup, so review stored recordings directly in Twilio.
Children, international processing, and policy changes
Digital Dialer is a business communications service and is not directed to children under 18. We do not knowingly collect personal information from children.
Information may be processed in the United States and in other locations where our service providers operate, subject to applicable safeguards and law.
We may update this policy as the service or legal requirements change. We will post the revised policy here and update its effective date. Material Terms of Use updates require signed-in users to accept the new version before continuing to use protected platform services.
