1. What We Never Collect
None of this is ever stored on our servers:
When you sign up, the app checks on your phone that your phone number matches the country you chose. The number is then discarded. It is never sent to us, saved, or logged.
2. What We Store, and Why
Your account has no email address and no password. These are the only things kept on our servers, and what each one is for:
Your TopLink ID
A random identifier our server gives you (for example TLC-4827193-NG). It is not made from your phone number or anything else about you, and is not linked to your real identity. The last two letters are the country you chose. People use it to call and message you.
Kept for as long as you have an account.
Your display name
The name you choose. It is shown to people who call you, look up your TopLink ID, or chat with you. It does not have to be your real name.
Kept for as long as you have an account.
Push notification tokens
A device identifier issued by Apple or Google for this app on your phone. We store it only so we can wake your phone for an incoming call or a new message. It cannot be used to track you across other apps.
Replaced when you reinstall; deleted as soon as Apple or Google tells us it is no longer valid.
Your credits balance
How many call credits you have used and have left each month, so we can give you your free monthly allowance, charge the caller for calls, and let you gift credits.
Kept for as long as you have an account.
Subscription status
If you become a Founding Member: whether your subscription is active, its renewal and price-lock dates, and the reference number our payment provider (Stripe, or Paystack in Nigeria) gives us for you. Payments happen on their secure pages; your card details never reach us.
Kept while you are subscribed, and afterwards only as long as needed for our accounting records.
Encrypted messages, voice notes and video clips
Voice notes, video clips and text messages are end-to-end encrypted and held temporarily on our servers only until delivered or for a maximum of 7 days, then permanently deleted. Our servers cannot read or play your messages. Once delivered, they are stored only on your phone and the other person's phone.
Deleted on delivery, or after 7 days at most.
Call connection records
When you call someone, a short record (who is calling whom, voice or video, and when) makes their phone ring and makes sure only the caller is charged. It never contains anything that was said or shown.
Deleted automatically within 24 hours. Your call history is kept on your phone only.
Contacts you add in the app
The TopLink IDs and names you save as contacts, so your list stays with your account, and so your online status is only ever shown to people you have added (and only if you allow it). The app never reads your phone's address book.
Kept until you remove a contact or your account is deleted.
Your settings
For example whether others may see when you are online.
Kept for as long as you have an account.
Meeting notes, workspaces and conferences (only if you use them)
Notes you save in Meeting Notes are stored on our servers and only you can read them. Workspaces store the workspace name, branding and its members' TopLink IDs and names. Conferences store the title and participants; conference passwords are stored only in a one-way scrambled form that cannot be reversed.
Kept until you delete them or your account is deleted.
Technical security data
To keep your account working and safe: a scrambled (one-way) copy of your account recovery key, which lets you get your account back after reinstalling the app on the same phone; the public half of your message encryption key, which lets others encrypt messages that only you can open (the private half never leaves your phone); and, for each app session, the IP address and device type, recorded by our database provider for security.
Kept for as long as you have an account, or the session is active.
3. What Stays on Your Phone Only
- Your chat history, voice notes and video clips, once delivered
- Your call history
- In-call chat you choose to keep after a call
- The private key that decrypts your messages
We cannot see, recover or hand over any of this. If you delete it, or delete the app, it is gone.
4. Calls
Voice and video calls are carried in real time by our calling network provider, Agora, between you and the other person. We never record calls, and nothing that is said or shown is stored by us.
5. Notifications
Call and message alerts are delivered by Apple (iPhone) or Google (Android). To show an incoming call, the alert carries the caller's name and TopLink ID. A message alert shows the sender's name and a short preview (up to 120 characters of a text message; voice notes and clips only say "Voice note" or "Video clip"). This preview passes through our server and Apple's or Google's notification service to reach your phone. It is never stored by us.
6. Who We Share Data With
We never sell your data, and we never share it with advertisers or data brokers. We use a small number of service providers who process data only to run TopLink Call for you, and only the data they need:
- Supabase: our database and servers (London, UK), which hold the data listed in section 2
- Agora: carries your calls in real time
- Apple and Google: deliver call and message notifications to your phone
- Anthropic: only when you ask for an AI meeting summary, the notes you choose are sent to it to write the summary. Its commercial terms do not allow it to train its models on this data
- Stripe and Paystack: only if you subscribe, to take your payment
- Resend: only if you join the Founding Member waitlist, to send you one email when a place opens (we keep that email address only for this)
- Vercel: hosts this website
7. Your Choices
- Turn "Show when I'm online" on or off at any time in the app's Privacy Center
- Remove contacts, delete messages (for you, or for everyone if you sent them) and delete meeting notes in the app
- Allow or block camera, microphone and notifications in your phone's settings
- Get a copy of everything we store about you: in the app, Settings > Export My Data
- Delete your account at any time: in the app, Settings or Privacy Center > Delete My Account. Your account and everything we store about it are deleted straight away and permanently, and the app's data is removed from your phone. Your TopLink ID is retired and never given to anyone else
8. At a Glance
| Stores your phone number | Never |
| Records your calls | Never |
| Can read your messages | No: end-to-end encrypted, deleted from our servers once delivered (7 days at most) |
| Sells your data or shows ads | Never |
| Tracks your location or browsing | Never |
| Trains AI on your calls or messages | Never |
| Keeps who-called-whom records | Deleted within 24 hours |
9. Legal Requests and Law Enforcement
⚖️ Our position on legal requests:
We cannot hand over what we do not have or cannot read. We never record calls, and the messages we hold briefly for delivery are end-to-end encrypted, so we cannot read or play them. We hold only the limited account information listed in section 2, and we will disclose it only where the law genuinely requires us to.
TopLink Call advises and encourages all users to use this service within the laws of their country.
10. Device Security
Your account lives on your phone. If you reinstall TopLink Call on the same phone, it restores your account automatically (on Android, this needs Google backup to be switched on). Because we do not know who you are, we cannot move your account to a new phone for you, and we cannot recover messages or call history that were only on a lost phone. Please protect your phone with a screen lock.
11. User Responsibility
By using TopLink Call, you agree that:
- You are responsible for how you use this service
- You will comply with the laws of your country
- You are responsible for the security of your own phone
- Content you share via TopLink Call is your responsibility
12. Changes to This Policy
If we change what we store or why, we will update this page, change the date at the top, and tell you in the app. Our core commitments will not change: we will never sell your data, never show ads, never record your calls, and never read your messages.
13. Contact
TopLink Call is operated by EBONGEST Solutions. Questions about this policy or your data:
We will respond within 48 hours.