Privacy Policy
Last updated: September 21, 2026
Your privacy is fundamental to WhoCallsMe. This policy explains what information we collect, where the data in a report comes from, why we process it, and the controls you have over it.
1. Information We Collect
We collect the phone numbers you choose to look up, the country context, and basic account information (email, authentication identifiers). We do not store the results of your lookups longer than necessary to deliver the report you requested.
2. Where Report Data Comes From
Every lookup returns the number's country and area, carrier and network, line type and a spam & risk assessment. On top of that we match the number against community spam reports and publicly circulated leaked databases, and our own model is trained on those signals — so how much extra detail like a name or linked registrations appears depends on what those sources actually hold for that number.
The sources we work with are:
- Carrier and numbering data — mobile country code, network, line type and region, taken from a licensed carrier-lookup API and from offline numbering rules that ship with the service.
- Community spam reports — nuisance, scam and spam complaints that people have filed about a number, including the details the reporter supplied, such as a name.
- Breach and leak datasets — records that circulated publicly after a hacker attack on a service, matched on the number alone to see whether it was exposed and what was listed alongside it.
- Our own risk model — a spam & risk score we compute from the technical attributes above combined with how often, and how recently, a number has been reported.
We use breach and leak data only to answer a lookup you submit for a single number. We do not publish dumps, we do not let anyone browse a dataset, and we do not resell it.
Because most of this data was not collected from the person it describes, we process it on the basis of legitimate interest (Article 6(1)(f) GDPR): helping people identify unknown and abusive callers. If a report is about you and you never opened a WhoCallsMe account, you can still ask us to review, correct or suppress the record. Use our privacy request form or email privacy@whocalls.me — we do not require proof of an account to handle that request, and we answer within 30 days.
3. How We Use Your Information
- To deliver the reverse phone lookup service you request.
- To prevent abuse, fraud, and automated scraping.
- To send transactional emails related to your account.
4. Data We Do Not Sell
We do not sell, rent, or trade your personal information or your lookup history to third parties. Ever.
5. Your Rights (GDPR & CCPA)
You have the right to access, correct, export, and delete your personal data, and to object to processing based on legitimate interest. Submit a privacy request or email privacy@whocalls.me to exercise any of these rights.
6. Security
All traffic and stored data are encrypted in transit and at rest, access to production data is restricted to named administrators, and payments are handled entirely by our payment provider — we never store card details.
7. Contact
Questions? Email privacy@whocalls.me.