Privacy Policy - Mobile App

Purpose

This document describes the data processed by the Breizh VOIP mobile app, how each permission requested on your device is used, who receives that data, and the rights available to you. It covers the mobile app only; use of the website is governed by the legal notice.

Publisher and contact

The app is published and operated by:

• •BREIZH VOIP, association
• •SIREN: 821039971
• •4 rue Descartes, 29480 Le Relecq-Kerhuon, France
• •Email: [email protected]
• •Phone: +33 2 57 52 04 32

Who is responsible for your data

The app is used with an account created and administered by your company, which remains the data controller under the GDPR. BREIZH VOIP acts as a processor: we process this data on behalf of your company and according to its instructions. For any question about the purpose of a given processing operation, contact your company's administrator first.

Permissions requested on your device

The app only requests the permissions needed for telephony and its collaboration features. Each one is used as follows:

• •Microphone: capture your voice during calls and video meetings, and record the voice messages you send in team messaging.
• •Camera: transmit your image during a video call or a video meeting, take your account's profile photo, scan a QR code to pair the app with the admin panel, and attach a photo to a team messaging conversation.
• •Contacts (read-only): display your phone's address book inside the app so you can dial a number. These contacts are read locally and stay on your device: they are never sent to our servers.
• •Notifications: alert you to an incoming call, a message or a meeting invitation.
• •Bluetooth and audio settings: use a headset or hands-free kit during a call.
• •Foreground service, wake lock, start on boot, battery optimisation exemption: keep an ongoing call alive and receive calls while the app is in the background or after the phone restarts.
• •Network access and vibration: establish the connection and ring the device.

Data processed

As part of the service, the app processes:

• •Your account credentials and a session token, to authenticate you.
• •Your call metadata: numbers called or calling, date, time and duration. This feeds your call log and your company's billing.
• •The messages you exchange through team messaging, the files and photos you attach to them, and the voice messages you record there.
• •Your profile photo, if you add one, stored on our servers.
• •A notification token specific to your device, required to receive incoming calls.
• •Connection data for security purposes: IP address, device identifier, operating system model and version, and your session and login history (including an approximate location derived from your IP address, visible in the app).
• •Your preferences and favourites, synced with your account on our servers so you can find them on your other devices; only a local cache, erased when the app is uninstalled, is kept on the device.

Call and video meeting recording

Calls are not recorded by default. Recording is a feature your company's administrator may enable; where enabled, recordings are kept on your company's infrastructure. Video meetings can be recorded when a participant explicitly starts recording during the meeting. Contact your company's administrator to find out which configuration applies to you.

Voicemail

When a caller leaves you a message, the app records their voice in an audio file. If your company enables voicemail transcription, the message may also be automatically transcribed and summarised (see the "Recipients and processors" section). Voicemail messages, along with any transcription and summary, are kept on your company's infrastructure and accessible from the voicemail tab in the app to people authorised by your company.

Recipients and processors

Your data is never sold, transferred or used for advertising. It is accessible to:

• •BREIZH VOIP, which runs the service (including the video-conferencing server) on servers hosted in France, at OVH.
• •Google (Firebase Cloud Messaging), which delivers incoming-call notifications to your device. Google therefore receives your device's notification token and the fact that a call is intended for you.
• •Google Cloud (automatic transcription and summarisation), when voicemail transcription is enabled by your company: the voicemail audio is then sent to Google Cloud to be transcribed and summarised.
• •Your company, which administers its users' accounts and access rights.

What the app does not do

The app contains:

• •No advertising and no advertising trackers.
• •No audience measurement or behavioural analytics tool.
• •No GPS geolocation and no collection of your precise location.
• •No resale or transfer of data to third parties.

Security

Communications between the app and our servers are encrypted in transit (TLS for signalling and data, voice encryption for audio and video streams). Access to the service is protected by authentication, and each company's data is isolated from the others.

Retention period

Account data, call metadata and connection data are kept for the duration of the contract between your company and BREIZH VOIP, then deleted or anonymised, subject to the statutory retention periods applicable to billing and security. Your preferences and favourites are kept server-side for as long as your account exists; only the local cache on your device disappears when the app is uninstalled.

Your rights and deleting your data

Under the GDPR, you have the following rights:

• •Right of access to your data and to obtain a copy of it.
• •Right to rectification of inaccurate data.
• •Right to erasure of your data.
• •Right to data portability.
• •Right to object to and restrict processing.
• •Account deletion: you may request the deletion of your account and its associated data by writing to [email protected]. Your request is handled within 30 days. Your company's administrator can also delete your account from their administration area.
• •To exercise these rights, write to [email protected]. You may also lodge a complaint with the French data protection authority (CNIL).

Minors

The app is a professional tool intended for employees of our client companies. It is not intended for people under 16 and we do not knowingly collect data about them.

Changes to this policy

This policy may be revised, in particular when the app evolves. Any new version is published on this page along with its update date.

Contact us

For any question about this policy or the processing of your data: [email protected]