Privacy policy
Draft – pending legal review. The final text may change.
Last updated: October 2026 (draft)
This policy explains what information ShadowNumber collects, why, and how long it keeps it.
What we collect
Your real phone number, to verify you and to recognise your outgoing calls.
Call and message details on your second number (who, when, how long), SMS content, voicemail messages and recordings you asked for, to provide the service.
We don't ask for an ID. We verify your real mobile number by SMS code. Only when the law or a court order requires identity verification for an account do we ask that account holder for their ID number.
On the website: what you send in the contact form (name, phone or e-mail, company and message), and visit counts (see Analytics).
In the app: usage counts, unless you turn them off (see Analytics).
What we don't do
Your real number isn't shown to the people you talk to.
The names of your phone's contacts aren't sent to us. For contacts you gave their own sound or a VIP mark, we keep only the number and those settings, without the name.
The website has no tracking cookies, third-party analytics or advertising. Visits are counted with our own cookieless analytics, on our own server (see Analytics).
Analytics
The website and the business portal count visits with Umami, open-source analytics that runs on our own server. It sets no cookies and stores nothing on your device, and the data is not passed to advertisers or other analytics services.
What it records for a visit: the page address (without anything after a ? and without activation codes), the website you came from, the browser, operating system, device type, screen size and language, the country and city worked out from the IP address, and clicks on a few buttons, such as getting the app or changing the language. It never records phone numbers, codes or what you type in forms.
Your IP address is not stored. Visits are told apart by a random identifier that changes every month, so you can't be followed over time.
If your browser sends Do Not Track, your visit isn't counted. Analytics data is kept for 24 months and then deleted.
The app counts how it's used, through our own server only: it sends a few fixed events to our API, which passes them on to Umami. They are: opening the app for the first time, signing up, starting the trial, the kind of number chosen (regular or a golden tier), the plan, length or add-on bought, which screen is open (its name only), and each day's number of calls made and SMS sent. Never your numbers, the numbers you call or text, your contacts, your messages or anything you type.
The app's events carry a random identifier the app makes, which is replaced when you sign out; our server passes on only a one-way coded version of it. They're not linked to your account, and Umami never sees your phone's IP address, only our server's.
The app sends nothing while discreet mode is on (the app lock, a neutral icon or automatic deletion), in the empty account the decoy PIN opens, or after you turn off Discreet mode › Share usage counts. The app's counts are also kept for 24 months and then deleted.
Keeping and deleting
In the app you can set history to be deleted automatically after 1 day, 7 days or 30 days. A recording not kept in the cloud is sent to your phone and deleted from our servers.
[To be completed by legal counsel: legal retention periods, backups.]
Sharing
We share information only to provide the service: with the licensed partner operator (to route calls and messages), with the app stores (for payment), and with Arivox for the AI assistant when you turn it on, and for voicemail transcription, which is on by default and can be turned off in the app (transcripts are erased after 90 days).
[To be completed by legal counsel: list of processors, transfers abroad, disclosure to authorities as required by law.]
Your rights
You can ask to see, correct or delete information about you through the contact page. [To be completed: procedure under the Privacy Protection Law.]