Privacy Policy

Last updated: 07/10/2026

1. Introduction and Scope

This Privacy Policy explains how NPhones, operated by Vayosoft Ltd. ("we", "us", the "Company"), processes personal data in connection with the Service. It forms an integral part of the NPhones Terms of Service.

2. Service Description

NPhones provides organizations with a cloud-based virtual mobile environment — a secure remote workspace for running applications and accessing data — and, where the organization enables it, voice calls on a work phone number that the organization assigns to the user. The environment runs remotely in cloud infrastructure; the user's physical device acts as an access interface that may bridge the local camera, microphone, and audio to the remote environment, and places and receives work calls through the app.

3. Data We Collect

3.1 Account data

3.2 Device and technical data

3.3 Virtual-environment data

Data that exists within the remote virtual environment and that we process to operate it:

3.4 Operational and audit logs

We do not record or store video of your workspace sessions, we do not record calls or keep call records on our servers, and we do not analyse how you use features inside the app for product, advertising or marketing purposes. Support access to a virtual environment is a separate matter, described in section 7.

We host virtual-environment data (section 3.3) to operate the Service; we do not read or analyze its content in normal operation. Access to that content occurs only for support to resolve a specific issue, as described in section 7.

3.5 Camera, microphone, and audio streamed to the remote environment

When you grant the corresponding permissions, the app captures your device's camera, microphone, and audio locally and streams them in real time to the remote virtual environment, so that applications running there can use them. This media is transmitted off your device to operate the Service. We do not retain this stream as a recording, and we do not use it for advertising or profiling. You can withdraw these permissions at any time in your device settings; applications in the remote environment then lose access to the corresponding hardware.

3.6 Location (optional, off by default)

The app includes an optional location sharing setting (Settings → Security → GPS location sharing), which is switched off by default. If you switch it on, the app collects your device's precise or approximate location and provides it to the remote virtual environment, so that applications running there receive a plausible device location instead of the location of our data centre. If the setting stays off, no location data is collected by the app. Calls on a work number do not use your location. This is separate from the approximate network location derived from your IP address (section 3.2), which we use for security and fraud prevention.

3.7 Support correspondence

When you contact us for support — for example by writing to support@vayosoft.com — we receive and retain the content of your message, any attachments or screenshots you send, and the contact details you write from. We use this only to handle your request, to keep a record of what was asked and done, and to improve the Service. We retain support correspondence for as long as needed for those purposes and to meet our legal obligations. This is separate from support access to a virtual environment, which is described in section 7.

3.8 Work phone number and calls

Your organization may assign one or more virtual phones to your account, each with or without a work phone number. A work number is obtained by the organization through us from a telecommunications provider; it is separate from your own mobile number (section 3.1), it is not yours, and it is withdrawn when your organization or your access ends. When you place or receive a call on a work number:

The microphone is used during a call to carry your voice to the other party. If you do not allow microphone access, you cannot be heard on calls.

3.9 Contacts you import

The app can import contacts from your device's address book so that you can call them on your work number. Import needs access to all the contacts on your device; nothing is imported until you start an import, and you then choose whether to import all contacts or only the ones you select. For each imported contact the app copies only the first and last name, the phone numbers with their labels, and one e-mail address; photos, postal addresses, company, job title, birthdays, notes, and other fields are not copied. The imported contacts are stored in the app and copied to your virtual environment, where they are available to you and to the applications you use there. We use them only to provide the Service. You can edit or delete imported contacts in the app at any time; they are removed from the app on your device when you delete the app and when you sign out. The copies in your virtual environment stay there and are available again when you sign in to the same account; they are deleted when the virtual environment is deleted (section 8). The contacts on your device are not changed.

4. How We Use Data

We process data to provide and maintain the Service, authenticate users, provision and operate the virtual environment, connect calls on work numbers and alert you to incoming calls, prevent fraud and misuse (including risk scoring), diagnose errors and maintain the reliability of the Service, deliver security and account notifications, and provide customer support.

5. Legal Bases for Processing

Where applicable law (e.g., GDPR) requires it, we rely on: performance of a contract (providing the Service, including connecting calls), consent (e.g., optional device permissions and contact import), legitimate interests (security, fraud and abuse prevention, service improvement), and compliance with legal obligations.

6. Service Providers and Subprocessors

To operate the Service we share the minimum necessary data with service providers acting on our behalf under contract. Currently these are:

The control plane, call servers and virtual environments run on the Company's own servers (self-hosted) located in Israel, not on a third-party public cloud (see section 11); mobile device management is likewise self-hosted and is not a third-party recipient of data. These providers may process data only to provide their services to us.

7. Your Organization, Support and Administrative Access

Your account is provided by your organization. The organization's administrators can create and close your account, assign and withdraw virtual phones and work numbers, and enable or disable features. The organization's administrators do not see your calls, your call history, or your contacts. The organization may have its own policies on the use of work numbers; they are the organization's responsibility.

Authorized Company support staff may access account information and, where necessary to diagnose or resolve a specific issue, aspects of a virtual environment or of a call's connection. Such access is limited to what is necessary for that purpose, subject to internal access controls, and recorded in audit logs.

8. Data Retention

We retain data only as long as necessary to provide the Service or to meet legal obligations. Indicative periods:

9. Data Deletion, Account Deletion, and Consent Withdrawal

Your NPhones account is provided and managed by your organization. Account registration and closure are handled by the organization — not within the app; to close your account, use your organization's process. Separately, you may request deletion of the personal data that NPhones processes to operate the Service (such as virtual-environment data and imported contacts) by contacting support@vayosoft.com or from the app (Settings → Legal → Delete Account). Withdrawal of required consent results in account deactivation and termination of access to the Service. When access ends, the work numbers assigned to you are withdrawn and returned to your organization.

10. Security

We apply reasonable technical and organizational measures to protect personal data. No method of transmission or storage is 100% secure; users are responsible for safeguarding their account credentials.

11. International Use and Cross-Border Processing

Data is processed on the Company's own servers located in Israel. Where the Service is accessed from outside Israel, or a call is connected to or from another country, data may be processed outside the user's country of residence, including by the telecommunications providers that connect the call, and we apply appropriate safeguards for such transfers. (Israel benefits from an EU adequacy decision, which facilitates transfers of EEA personal data.)

12. Minimum Age

The Service is intended for users aged 18 or older. It is not directed to children, and we do not knowingly collect personal data from minors.

13. Your Rights

Subject to applicable law, you may request access, correction, restriction, or deletion of your personal data, object to certain processing, request portability, and withdraw consent at any time. To exercise these rights, contact us using the details in section 15.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date and, for material changes, take additional steps where required by law. Continued use of the Service constitutes acceptance of the updated policy.

15. Contact Information

Vayosoft Ltd.
4 Rambam St, Beer Sheva, Israel
Privacy / legal inquiries: vayosoft@vayosoft.com
Support: support@vayosoft.com