Privacy Policy

Scope and Responsibility

Crossbar is developed by Abdullah Azzaam Faisal Chaudhry. In this policy, “we”, “us”, and “our” refer to the developer, who provides the iOS app and operates the central Crossbar Push Relay at push.callcrossbar.com.

Your server operator is the person or organisation that runs the server you use. It controls your account, contacts, call records, logs, and backup arrangements. If we do not operate that server, consult its operator’s privacy notice for information about that processing.

Where we also operate your server, this policy covers our operation of that server.

Information We Process

You provide information when you set up an account, add contacts, or make calls. iOS supplies device push tokens, and connections to the service generate network and request metadata.

This website uses no cookies or analytics and loads no third-party scripts or fonts.

How Information Is Used

• To authenticate you, manage accounts and devices, maintain contacts, and show availability.
• To establish calls, display call history, and deliver incoming-call and missed-call notifications.
• To diagnose connection problems, apply rate limits, and protect against misuse.
• To comply with applicable legal obligations and protect legal rights.

We do not sell personal information, use it for behavioural profiling, or share it for cross-context behavioural advertising. Where a legal basis is required, we rely on providing the service you request, legitimate interests in operating and securing it, compliance with legal obligations, or consent where required.

Who Receives Information

Your Server Operator

Processes the account, contact, device, call, and operational information held on your chosen server.

Other Users

Other signed-in users on the same server can find your profile by handle. Your contacts can see your online status and last-seen information. Group members can see membership. Participants in a call receive active-call details, including caller and participant information, and exchange connection details that may reveal IP addresses.

Cloudflare

Hosts this website and the push relay, including the relay’s data storage, and processes IP addresses and request metadata to operate and protect those services.

Apple

Receives device push tokens and notification payloads through the Apple Push Notification service (APNs). These payloads include call identifiers, caller details, and missed-call notification text.

STUN and TURN Services

Help establish connections or relay encrypted media. The default STUN service is operated by Google; your server operator may replace it or configure a TURN relay. These services process network addresses and connection metadata, and TURN credentials may include a device identifier. Relayed media remains encrypted.

We may disclose information where required by law or where reasonably necessary to protect people, prevent abuse, or defend legal rights.

Retention and Deletion

On Your iPhone

Signing out clears the saved device key and session but retains server settings. The app removes diagnostic files on sign-out or setup reset, including after successful account deletion. Release builds also clear legacy diagnostic files at startup; development logs are otherwise overwritten when reopened for a new logging session. Uninstalling does not revoke a device or delete server-held information. iOS manages its own call-history entries.

On Your Server

Account and call records have no automatic expiry. Deleting a self-created account removes its password, devices, contacts, group memberships, presence, and call participation. A “Deleted person” record remains for calls you placed. Operator-managed accounts may be disabled rather than deleted. Logs and backups follow the operator’s retention arrangements; deleted information may remain in backups.

At the Push Relay

Installation records and rate-limit counters have no automatic expiry. Device registrations remain until explicitly removed; replacing a token or revoking an installation does not delete the registration. Duplicate-suppression records use a 24-hour window and are removed by a daily cleanup, normally within about two days of their last update. Cleanup failures can delay removal. Hosting logs and database recovery copies follow Cloudflare’s service settings.

To delete a self-created account, open Settings and choose Delete account. For operator-managed accounts, contact the operator. You can also remove devices or contacts in the app. Removing a device requests removal of its push registration; this may be delayed while the server retries an unavailable relay.

Your Choices and Rights

Depending on applicable law, including California privacy law where relevant, you may have rights to access, correct, delete, or obtain a portable copy of your information; restrict or object to processing; and withdraw consent where processing relies on consent. You may also complain to your local data protection authority.

For information held on your server, contact its operator. For the app or central push relay, use the privacy contact below. We may need to verify your identity and will respond within the period required by applicable law.

You can manage camera, microphone, local-network, and notification permissions in iOS Settings. Microphone access is needed for call audio; camera access is needed for video or code scanning. Codes can also be entered manually. Disabling notification alerts does not necessarily prevent incoming calls.

Security

The standard public deployment uses HTTPS and secure WebSockets (WSS). Your server operator is responsible for its TLS configuration; the central push relay is reached over HTTPS.

Passwords are sent to your server for authentication and stored there as salted scrypt hashes. Device keys are generated on the iPhone and protected using the iOS Keychain, with the Secure Enclave used when available. Relay installation credentials are stored as hashes.

No system is completely secure. Protect your device and credentials, and contact your server operator if you suspect unauthorised access.

Children’s Privacy

Crossbar is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information through Crossbar, contact us and the relevant server operator so that appropriate action can be taken.

Where Information Is Processed

Your server’s location is chosen by its operator. Cloudflare and Apple may process information outside your country under their service arrangements. Contact your server operator for details of its hosting location and any international-transfer arrangements.

Changes to This Policy

We may revise this policy to reflect changes to Crossbar or applicable requirements. We will update the effective date and version, and highlight material changes on this page or provide notice in the app.