Nab privacy policy

Effective date: July 12, 2026. Nab helps users place and manage phone calls. This policy explains what data Nab uses to provide and improve that service.

Information we collect

Account information from sign-in providers, such as account identifiers and email when provided.
Contacts stay on the user's device until the user selects a person or number. Nab receives only the selected contact name and phone number needed to place the requested call.
Call instructions, live guidance, call metadata, summaries, transcripts, recordings, and related task notes.
Optional phone verification information when a user adds their own phone number.
Diagnostics such as call state, provider response codes, app events, and error logs needed to operate and debug Nab.
Privacy-minimized product analytics such as app sessions, screen views, selected button interactions, and feature-flow outcomes, associated with an internal Nab user identifier after sign-in.

How we use information

We use information to authenticate users, place requested phone calls, process live audio and guidance, generate summaries and transcripts, provide call recordings when available, show call history, verify phone numbers, understand which product features are used, improve the user experience, prevent abuse, provide support, and improve reliability.

Service providers

When a user starts a Nab call, Nab sends the selected contact name, phone number, user instructions, attachments, live guidance, call audio, transcripts, summaries, and call metadata as needed to Nab's backend, OpenAI, and phone connectivity providers such as Telnyx and GlobalCell. The in-app call disclosure identifies these providers by name before the user starts a call.

OpenAI provides AI voice, realtime conversation handling, transcription, summaries, and attachment text extraction. Telnyx provides phone connectivity, call events, SMS verification, and recording delivery. GlobalCell provides phone connectivity, SIP call routing, call events, and recording delivery where GlobalCell is used for a requested call. Identity, hosting, storage, and diagnostics providers process account, operational, and support data only as needed to deliver and maintain Nab.

Amplitude processes privacy-minimized product interaction analytics in its European Union data center. Nab does not send contact names, phone numbers, call instructions, transcripts, recordings, attachment content, email addresses, or authentication tokens to Amplitude. Session replay is not enabled.

Nab requires service providers that receive personal data to provide the same or equal protection for that data as described in this policy and to process it only as needed to provide, maintain, secure, and support Nab.

Nab asks for confirmation in the app before starting a call that shares personal data with OpenAI, Telnyx, GlobalCell, or other providers needed to deliver Nab. Users can choose not to be asked again for future calls.

Retention and deletion

We keep account, call, transcript, recording, and diagnostic data while needed to provide Nab, support users, maintain security, and meet operational or legal requirements. Users can request deletion by contacting privacy support.

Contact

For privacy requests, email privacy@heynab.com.