Privacy Policy
Last updated: 29 October 2026
2. Scope
This policy covers the SIPprime app for iPhone and iPad, the SIPprime push server and the website sipprime.goldstein.digital. The Swiss Federal Act on Data Protection (FADP) applies and, where applicable, the EU General Data Protection Regulation (GDPR).
3. Principle
SIPprime needs no account with us. Without SIPprime Pro we receive none of your credentials, phone numbers, call history, contacts or call content. Only if you turn on “Calls While the App Is Closed” does our push server process the data listed in section 6.
4. Your SIP accounts
Your SIP account details (user name, authentication name, server) are stored locally on your device and the password in the keychain. Deleting an account or the app removes this data.
5. Calling through your SIP provider
To sign in and place calls, SIPprime connects directly to the SIP server you entered. It transmits the data technically required for calling to that provider: user name, encrypted sign-in response (digest), your IP address, the number dialled or calling, and the voice data of the call. Your SIP provider is responsible for this processing under its own privacy policy.
6. Push server (SIPprime Pro)
If you turn on “Calls While the App Is Closed”, the app sends your SIP credentials (user name, authentication name, password, server, port) and an identifier of your subscription, encrypted, to our push server. The server signs in to your SIP provider on your behalf, wakes your device for a call through the Apple Push Notification service (APNs) with the caller's number, and forwards the call to the app. It processes your SIP credentials, your device's push token, your device's IP address, phone numbers and times of calls, and the voice data, which it only passes through during the call. Calls are not recorded. We keep technical logs (time, number, status) for no more than 30 days.
The server is located in Switzerland. The legal basis is performance of the contract (Art. 6(1)(b) GDPR). If you turn the feature off, the app deletes your account on the server including the credentials. When the subscription ends, the sign-in with your provider stops and we delete the credentials within 30 days.
7. Subscription and purchases
Subscriptions are bought and paid through Apple's App Store. We receive no payment data. To check whether your subscription is active, our push server asks Apple using the subscription identifier (App Store Server API).
8. Microphone, camera and contacts
The microphone is used only during a call. The camera only when you scan a QR code with credentials; images are not stored. SIPprime reads contacts only with your permission and only on your device to show names; they are not transmitted.
9. Recents and the call screen
SIPprime's call history is stored only on your device. Calls are shown through CallKit, so they also appear in the Phone app and may sync through iCloud depending on your settings. Apple's privacy policy applies to that.
10. No ads, no tracking
The app contains no ads, no tracking or analytics tools and no advertising identifier. The website uses no cookies and no audience measurement.
11. Website and hosting
The website is hosted by Hostinger International Ltd., Jonavos g. 60C, Kaunas, Lithuania (servers in the EU). The host collects technically necessary server log files (shortened IP address, date and time, page, browser, operating system, referrer). The legal basis is our legitimate interest in secure operation (Art. 6(1)(f) GDPR / Art. 31(1) FADP). A data processing agreement under Art. 28 GDPR is in place.
12. Contact by email
If you write to support, we use your details only to reply and delete them when no longer needed.
13. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to lodge a complaint with a supervisory authority (in Switzerland, the FDPIC).
14. Changes
We update this policy when the app or the law changes. The version published here applies. The German version is legally binding.