Privacy policy

DRAFT, pending legal review. This policy is not final and is not yet in force. Last updated 18 October 2026.

1. Who is responsible

MR Digital Ventures TODO: add legal suffix and registered address runs Ringaway and is responsible for your personal data. Contact: [email protected]. This website uses no cookies, no analytics and no tracking.

2. What we collect and why

Data	Why
Account details: email address, name, sign-in method, whether the account is personal or business, business name	To create and secure your account
Your numbers and settings, and the numbers you call or text	To provide the service
Call records (who, when, how long, cost) and text content and delivery status; voicemail where you use it	To connect calls and texts, show your history and charge correctly
Credit, payments and the ledger of every charge	To bill accurately and meet financial record-keeping duties
Identity and address documents, only if a country requires them for a number you choose	To register that number with the provider that requires it
Phone push-notification tokens and notification settings	To alert you to calls and texts
Technical and security records (request logs, rate limits, fraud checks)	To keep the service safe and working

We do not sell your data and we do not use it for advertising.

3. Who processes data for us

We use these companies (“processors”) to run the service. They handle data only for us and for the purposes below. This list is kept current; we will update it when it changes.

Company	What it does for us	Data it handles
Supabase	Database, sign-in, file storage, background functions	Account details, workspaces, call and text records, the credit ledger, push tokens
Twilio	Telephone numbers, calls, texts, voice in the app	Phone numbers, call metadata, text content in transit, voicemail audio in transit
DIDWW	Telephone numbers in some countries	Phone numbers; identity and address documents submitted for number registration
Google	“Sign in with Google”	Name and email address
Apple	“Sign in with Apple” and push notifications	Name or relay email address, device push token
Expo (EAS)	App builds and push-notification delivery	Device push token
Stripe	Card payments, if and where offered	Payment details are held by Stripe; we keep only a reference
Cloudflare	Delivering this website	IP addresses, briefly, to serve pages

Payments made through the Apple App Store or Google Play are handled by Apple or Google as the seller.

Where these companies are located, and the safeguards used for transfers outside your country, will be listed here after legal review. TODO: legal to confirm regions and transfer mechanisms.

4. How long we keep data

Financial records (payments and the credit ledger) are kept for the period the law requires, intended to be seven years. TODO: legal to confirm.
When you delete your account, your sign-in and profile are closed and your personal details are removed or anonymised, your numbers are released, and records we must keep are kept.
Identity documents: our intended practice is to use them only for the registration, and to delete our copy shortly after the registration is decided, and to ask the provider to do the same. TODO: legal to confirm the period and wording.

5. Your choices and rights

You can see and correct your details in the app, control notifications, choose whether message text appears on your lock screen (off by default), and delete your account. Depending on where you live you may also have the right to ask for a copy of your data, to object to or restrict some uses, and to complain to your data protection authority. Write to [email protected].

6. Security

Data is encrypted in transit. Access to personal data is limited by account and role, and each personal or business workspace is kept separate from the others. No system is perfectly secure, and we will tell you and the authorities about a serious breach as the law requires.

7. Changes

We will update this policy and say so before important changes take effect.