A woman having coffee beside a phone visualisation with a Suspicious number warning.

Privacy
and security

See how BanCaller uses data.

AI-generated illustrative image. Concept screen.

We do not upload

This data is not sent to BanCaller.

  • Contacts

    We do not upload your address book.

  • Call history

    We do not upload your full call history.

  • Conversation content

    We do not upload call or SMS content or recordings.

On the server

Data needed to provide the service.

  • A checked or reported number

    When you deliberately start a check, submit a report or use tools that change a label.

  • A report and its category

    Data you select and confirm — not the content of the conversation.

  • Access and security data

    Technical device information and logs needed to operate the service and limit abuse.

01When do you send a number?Situations in which a number reaches the server.

A number reaches the server when you deliberately check it online, submit a report, or preview or reset its spam label from your account.

For a report started from the system Phone app on iPhone, the selected number and category may first be stored as a pending proposal before the actual report is accepted.

A call alone does not create a report. Identification uses the database on your phone; we do not bulk-import call history.

02How do I delete my account?What is removed and what information remains.

You can delete your account from the account panel by confirming the operation with your password. Sessions and access are closed, the email address is removed and the nickname is replaced with a neutral name. Associated devices lose access. Further cleanup runs in the background.

Reports, points and technical history remain in pseudonymised form. This does not mean that every piece of information is removed from every system and earlier backup.

Go to sign in
03How long do we retain data?History, IP addresses and backups.

Report history is retained indefinitely. After account deletion it remains a pseudonymised part of number reputation history.

An IP address may be stored in security logs, for example when signing in, when access is denied or when a limit is exceeded. Logs are available to administrators. We do not currently apply a general deletion schedule to logs and support correspondence.

Backups cover up to five years. Deleting an account from the active application does not alter earlier backups.

For questions about your data, write to odo@wise.pl. For details, see the Privacy Policy.

04Technical detailsDevice signatures, updates and access control.

Protected device operations require a P-256 signature and a fresh challenge. A token alone is not enough. Access is also checked when credentials are renewed.

A database update is verified before it is applied. Downloading settings or receiving a PUSH signal does not extend the validity of protection data.

A PUSH notification can prompt the app to check its state. It does not grant permissions, create a report or order data deletion by itself.

Report security issues to zgloszenia@bancaller.com. Do not send passwords or access tokens.