Privacy Policy

1. Introduction

Decibell ("we", "our", or "us"), operated by ODBS Tech, provides a communications platform that lets users purchase virtual phone numbers, send SMS messages, and make voice calls through licensed telecom providers. This Privacy Policy explains what information we collect when you use the Decibell mobile application or website (the "Service"), how we use it, and with whom we share it. By using the Service, you consent to the practices described here.

2. Information We Collect

We collect the following categories of information:

• Account information: When you create an account, we collect your email address and/or phone number, a hashed password (if applicable), and basic profile data such as display name. If you sign in with a federated identity provider, we receive a basic identity token from that provider.
• Phone numbers you purchase: When you provision a virtual phone number through the Service, we record the number, the country, the assigned telecom provider, and metadata about its activation status.
• Communications data: When you send or receive SMS, MMS, or voice calls through the Service, we process the following data: the source and destination phone numbers, timestamps, message content (for SMS/MMS), media attachments (for MMS), call duration and status, delivery status, and provider-issued message/call identifiers. Voice call audio is not recorded or stored by Decibell. Carriers may temporarily process call audio in real time to deliver the call, governed by their own privacy policies.
• Contacts: If you choose to save personal contacts inside the app, we store the names, phone numbers, and emails you enter. If you grant device-contacts permission, contacts you select to import are uploaded to our servers and linked to your account. We do not access, upload, or share your full device address book without your explicit selection.
• Device & push tokens: We collect device identifiers and push notification tokens (Apple Push Notification service tokens — including VoIP push tokens for incoming calls — and Firebase Cloud Messaging tokens) so we can deliver inbound messages and call signaling to your device. We may also collect device model, OS version, app version, and language for support and analytics.
• Subscription & purchase information: Purchases of phone numbers and subscription tiers are processed by Apple's App Store using in-app purchase, mediated by RevenueCat for receipt validation. We receive transaction identifiers, subscription status, and entitlement state from RevenueCat. We do not collect or store credit card numbers — payment is handled entirely by Apple.
• Usage data: We automatically collect logs of how you use the Service: feature usage, errors, request and response timing, and similar diagnostic information. This data is used to operate, debug, and improve the Service.

3. How We Use Your Information

We use your information to:

• Provide the Service — provision phone numbers, deliver SMS and voice calls, store conversation history, and synchronize state across your devices.
• Route communications to the appropriate licensed telecom provider for the country and channel (SMS or voice), based on availability and quality.
• Send push notifications for inbound messages and incoming calls, including VoIP push notifications used to wake the app for native call UI on iOS.
• Validate and manage subscriptions and in-app purchases through RevenueCat and the App Store.
• Detect and prevent abuse, spam, fraud, and violations of our Terms of Use.
• Comply with legal obligations imposed on us or our telecom partners (including, where required, retention of communications metadata).
• Support, debug, and improve the Service using diagnostic and aggregated usage data.

4. How We Share Your Information

Decibell only shares your information with the following categories of recipients, and only as necessary to operate the Service:

• Telecom providers: To deliver your SMS messages and voice calls, we transmit the destination number, source number (your virtual number), message content (for SMS/MMS), and signaling metadata to one of our licensed telecom partners — currently Twilio, Telnyx, and Vonage. Each provider acts as the carrier for the route and processes that data under its own privacy policy.
• RevenueCat (subscription management): We use RevenueCat to validate App Store purchase receipts and track subscription entitlements. RevenueCat receives anonymized identifiers and transaction data — see revenuecat.com/privacy.
• Push notification providers (Apple APNs, Firebase Cloud Messaging, OneSignal): Push tokens are sent to Apple Push Notification service (APNs), Firebase Cloud Messaging (FCM), and OneSignal (where applicable for non-VoIP user notifications) to deliver alerts to your device. Push payloads include the minimum information needed to render the notification.
• Cloud infrastructure providers: Our backend, database, and media storage run on standard cloud providers (e.g., AWS) acting as data processors under contract.
• Legal & safety: We may disclose information when required by law, valid legal process, or to protect Decibell, our users, or the public — for example, to respond to a lawful subpoena or to investigate fraud or abuse.
• We do not sell your data: We do not sell, rent, or trade your personal information, conversation content, or contact lists to third parties for advertising.

5. Communications Privacy & SMS Consent

SMS, MMS, and voice calls placed through the Service are not end-to-end encrypted. Like any standard SMS or voice call, your communications transit licensed telecom carriers and the public telephone network, and may be visible to those carriers and to the recipient's carrier. Decibell does not read SMS content for marketing, train AI on your messages, or share content with third parties beyond what is required to deliver the message or call.

• SMS consent: By creating a Decibell account and purchasing a virtual phone number, you expressly consent to send and receive SMS, MMS, and voice traffic through that number, transmitted via our licensed telecom partners (Twilio, Telnyx, Vonage). Each conversation you initiate is at your own discretion to recipients you personally choose; Decibell does not initiate marketing, automated, scheduled, or bulk messages on your behalf.
• Opt-out & STOP keyword: Recipients of messages sent from your Decibell number may reply with STOP, UNSUBSCRIBE, END, QUIT, OPTOUT, REVOKE, CANCEL, or STOPALL to opt out at any time. Carriers automatically block further messages to recipients who have opted out, and Decibell additionally enforces this opt-out at the application level — once a recipient opts out, you will not be able to send further messages to that number unless they reply with START, YES, or UNSTOP. Recipients can also reply HELP for support information.
• Message retention: SMS and MMS message content is stored in your account so you can revisit conversations, until you delete the message, delete the conversation, or delete your account. Opt-out records (which destinations have replied STOP) are retained as long as your phone number is active so that we honor recipient opt-outs across sessions.
• Carrier policies: Each carrier (Twilio, Telnyx, Vonage) processes your traffic under its own privacy and acceptable-use policy. Carrier-level abuse signals (spam reports, STOP filtering) may be passed back to Decibell and used to enforce our Terms of Use, including suspension of accounts that repeatedly trigger carrier filtering.

6. Data Storage & Security

We store your data on secure cloud infrastructure with encryption in transit (TLS) and encryption at rest. Access to production systems is restricted to authorized personnel under least-privilege access controls. We continuously monitor for vulnerabilities and follow industry-standard security practices. No system is perfectly secure; you should also keep your device and account credentials safe.

7. Data Retention

We retain different categories of data for different periods:

• Account data is retained while your account is active, and for a limited period after deletion to satisfy legal and accounting obligations.
• SMS, MMS, and call records are retained while you keep them in your account. You can delete individual conversations at any time. When you delete your account, conversation history is removed from our systems.
• Telecom providers may retain communications metadata (e.g., call detail records) under their own retention policies and applicable telecom regulations.
• Diagnostic logs are retained for a limited period (typically up to 90 days) for debugging and abuse prevention.

8. International Transfers

Decibell is operated from Türkiye, but our cloud infrastructure and telecom partners may be located in the United States, the European Union, and other regions. By using the Service, you understand that your information may be transferred to and processed in countries other than your own, with appropriate safeguards in place.

9. Your Rights

Depending on where you live, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data. You can also delete your account directly from inside the app, or from our Account Deletion page.
• Portability: Request export of your data in a portable format.
• Object / restrict: Object to or restrict certain processing where applicable law allows.

To exercise any of these rights, contact us at [email protected].

10. Children's Privacy

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the app or via email. The "Last updated" date at the top reflects the most recent revision. Your continued use of the Service after a change becomes effective constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at [email protected].