Policy
Privacy
PhoneHome is a private, parent-controlled voice network for families. Calls are invite-only. You (or someone in your family) can host a Mothership server, or subscribe to an isolated managed Mothership. PhoneHome does not sell ads or mine call content.
What PhoneHome is for
- Encrypted softphone calls between allowlisted family and approved friends
- Optional house phones (analog adapters) using encrypted SIP TLS + SRTP
- Parent controls: Quiet Time, talk caps, Timeout, co-parent invites
What we collect on your Mothership
The server your family runs stores only what it needs to operate:
- Account usernames, password hashes, and parent/guardian relationships
- Allowlists (who may call whom), Quiet Time / Timeout settings
- Call metadata (who / when / missed) — not call audio by default
- Optional voicemail audio you choose to keep on that server
- Device push tokens (iOS) so the phone can ring — push payloads carry names/ids, not media
Managed Motherships
Each managed customer receives an isolated server and database. The central billing/control service stores the operator’s email, Stripe customer/subscription identifiers, instance status, and plan limits — not family contacts, voicemail, or call logs. A stateless push gateway receives a device token and minimal wake/display metadata long enough to deliver the Apple notification; it does not receive SDP or audio.
Encryption
- App ↔ Mothership: HTTPS
- Softphone media: WebRTC DTLS-SRTP
- Analog adapters: SIP TLS + SRTP (not cleartext public SIP)
iOS app
The free iOS app may store your username and password in the on-device Keychain (AfterFirstUnlockThisDeviceOnly — not iCloud) so Face ID can sign you in. Sign-out keeps that saved login unless you choose Forget saved sign-in, delete the account, or delete the app. Passwords are never written to logs.
What we don’t do
- No call recording or cloud transcription by default
- No advertising SDKs or third-party analytics on call content
- No selling of family data
Your controls
- Parents choose who kids can reach (mutual allowlist)
- Account and kid-line deletion hard-erases credentials, allowlists, call logs, and media for that line
- You can stop using the service by deleting accounts or shutting down your Mothership
Children
PhoneHome is designed for family use with parental control. Guardians configure kids’ Circles. This page is not legal advice; operators should review COPPA and local privacy law for their deployment.
Payments & seller of record
Host licenses and managed Mothership subscriptions are sold by Trevor Larsen Marketing LLC. Card payments are processed by Stripe on behalf of that company. The control service stores billing email, Stripe customer / subscription identifiers, and signed license metadata — not call audio or family contacts.
Contact
Questions or privacy reports: midwife.zingers34@icloud.com · Support · security reports via the project SECURITY.md.
Engineering detail: privacy-security.md