Privacy policy
This page explains what data Armor has about you, why it needs it, how long it is kept and who else sees it. We don't sell data, don't show ads and don't put analytics or trackers in the apps or on the website.
Effective 29 October 2026.
Who is responsible
The Armor service — the Armor apps for iPhone, Mac, Android and Windows, the armor.tel website, the sip.armor.tel call server, the push service and the assistant — is provided by Roman Erin, autónomo, Spain, who is the controller of your data under the EU General Data Protection Regulation (GDPR).
For any question about your data, write to ops@armor.tel.
Phone and identity confirmation happens in Persona, and numbers for calling ordinary phones are sold by Armor Legacy. These are separate services with their own policies; this page only covers what they pass to Armor.
What stays on your device
Call recordings, transcripts and summaries are made and kept only on the device. Transcription is done by a model running on the phone or computer itself; audio and text are not sent to our servers. The app downloads these models from Hugging Face, and none of your data is sent there.
Call history, messages, faxes, settings and provider line passwords are kept on the device too. Passwords are stored in the system's secure storage (the Keychain or its equivalent). They are included in iCloud or Google backups according to your device settings; on Android, call recordings and attachments are left out of cloud backups.
Contacts. If you allow access, Armor shows which of your contacts you can call on Armor. We don't receive your address book. To find this out, the app looks up each number in Armor's public number directory in DNS (the e164.armor.tel zone). These lookups are seen by your internet provider's DNS server and by Armor's DNS server: they contain the number itself, but not the name or any other contact details.
Calendar. If you allow access, the assistant adds what it agreed on to your calendar. If you granted full access, the assistant receives only the times you are busy over the next 14 days, without event titles or descriptions.
The camera is used for QR codes and photos in messages, the microphone for calls. This data goes nowhere except to the person you are talking to.
What is kept on our servers
Your account. You are represented by a cryptographic key created on your device. The phone number you confirmed through Persona is kept as an irreversible hash so we recognize you when you sign in again. The number itself is kept encrypted while you are signed in to the app, for no longer than 90 days. If you confirm your identity, Persona passes us only a code that lets us avoid giving one person more than three numbers. We don't receive your name, documents or document numbers.
Numbers. We keep which +999 numbers and which confirmed ordinary numbers belong to your account and where calls to them should go. So that other servers can reach you, Armor numbers and confirmed ordinary numbers are published, together with your devices' public keys, in an open number directory in DNS. Anyone who knows a number can therefore check whether it is on Armor; the directory cannot be listed as a whole. A confirmed ordinary number is removed from the directory as soon as you give it up. A released +999 number is not given to anyone else for 90 days and stays linked to your account until then, or to no one once the account is deleted.
Devices. The device name, its public key, when it last connected, the address calls reach it at, and Apple or Google push tokens together with the key push notifications are encrypted with. While a device is connected, the server knows its IP address.
Calls. The server doesn't record calls between Armor users. To investigate failures, it keeps a technical log of each call: numbers, times and how the connection went. Voicemail and greetings recorded by the server are kept briefly (see the periods below) and are not encrypted, because the server records them itself.
Messages. Messages between two Armor apps are encrypted on the sender's device, and only the recipient can read them. The server holds such a message until the recipient's device picks it up. Messages to numbers without Armor, messages from people without an encryption key, and delivery and read receipts are kept unencrypted until delivery.
The assistant. If you use it, the server keeps:
- what you told the assistant about yourself in its settings, and your errands;
- call reports, transcripts and recordings of both sides;
- permissions to call through your provider lines: instead of the password, a derived key that only works for calls on that line. It is kept encrypted while the errand runs, for no longer than a day;
- minute accounting: when and how long the assistant talked.
Purchases. For App Store and Google Play purchases we keep the transaction ID, the pack bought and a log of minutes credited and used. We don't receive payment details: payments are taken by Apple and Google.
Server logs contain IP addresses and device and account identifiers. They are needed to find failures and abuse.
How long data is kept
| Data | Period |
|---|---|
| Undelivered message, attachment, voicemail | until delivered, at most 14 days |
| Delivery and read receipts | 7 days |
| Technical call log, recordings made by the server | 7 days |
| Phone number while signed in to the app (encrypted) | while signed in, at most 90 days |
| Device address for calls and push notifications | while the device is connected, at most 30 days |
| Released +999 number | 90 days, then the number is free |
| Assistant call recordings | 30 days |
| Assistant reports and transcripts | while you use the assistant or until you ask us to delete them |
| Assistant permission to call through a provider line | until the errand ends, at most a day |
| Server logs | 30 days |
| Purchases and the minutes log | as long as Spanish tax and accounting law requires |
| Account, numbers and devices | while you use Armor or until you ask us to delete them |
Who else sees data
- Apple and Google deliver push notifications and take payments. The notification content is encrypted with your device's key: Apple and Google only see the type of notification.
- Anthropic (USA) provides the assistant's language model. It receives your chat with the assistant, your notes about yourself, the caller's number and name, the call transcript and your busy times.
- ElevenLabs (USA) recognizes speech in the assistant's calls and voices its replies. It receives the call audio.
- Persona and the messenger you confirm your phone with (Telegram, MAX, VK or WhatsApp) see your number during confirmation. Persona keeps it for about an hour and passes Armor only a signed confirmation of the number.
- Hetzner (servers in Finland) hosts the service. Cloudflare runs DNS for the armor.tel domain.
- Your telephone providers, if you added their lines, receive the calls and messages that go through those lines.
Anthropic and ElevenLabs process data on our behalf under their data processing agreements; transfers to the USA rely on the EU Standard Contractual Clauses. We don't share data with anyone else unless the law requires it.
If the assistant answered your call
The assistant answers for an Armor user when they can't answer themselves. At the start of the call it says whose assistant it is and that the call is recorded. The recording, transcript and report go to that user; the recording is kept for 30 days. To have them deleted, write to ops@armor.tel with the number you called from and when.
Legal basis
Most data is processed to provide the service you chose: connecting calls, delivering messages, issuing numbers, running the assistant. Technical logs and spam protection rely on the service's legitimate interest in its security. Purchase records are kept because the law requires it. Contacts, calendar, microphone and camera are used with your permission, which you can withdraw in your device settings.
Your rights
You can find out what data we have about you, get a copy, correct it, delete it, restrict its processing or object to it. Write to ops@armor.tel with your Armor number; we will ask you to confirm the number is yours and reply within a month.
Some data you can delete yourself: in the app, give up a number, sign out or delete your whole account; in your account on armor.tel, disconnect a device. Deleting the account erases its numbers, devices and assistant data, and any assistant minutes left are forfeited. Purchase records stay for the period the law requires. You can also write to us to delete the assistant's reports.
If you think we are violating your rights, you can complain to the Spanish Data Protection Agency (AEPD) or the supervisory authority of your country.
Children
Armor is not intended for children under 14.
Changes
If these rules change, we will update this page and the date at the top, and warn about significant changes in the app.