iComm PBX App — Privacy Policy

Last reviewed 5 November 2026

iComm Communications Ltd, trading as iComm Solutions, is the data controller for the information the iComm PBX mobile app handles. We are registered with the Information Commissioner's Office under number ZA055756.

About the app

The iComm PBX app connects a member of staff's phone to their organisation's iComm hosted phone system, so they can make and receive business calls and manage their extension. It is a tool for business use and is not directed at children.

Information we collect

• Your name and work email address — to sign you in and identify your extension.
• Your account password — checked at sign-in; it is sent securely to your organisation's iComm server and is not stored on the device in readable form.
• A device label (your phone model) and a device sign-in key — to register this device to your account and keep you signed in.
• Call audio — transmitted (encrypted) while you are on a call so the other party can hear you. The app itself does not record your calls.
• Call and voicemail records held by your phone system — so the app can show your recent calls and voicemail. These are stored on your organisation's iComm server, not created by the app.
• A notification (push) token — so the server can alert your phone to an incoming call.
• Camera image (only while scanning a sign-in QR code) — processed on your device to read the code. Nothing is recorded, stored or sent anywhere.

The app shows no advertising. We do not sell your personal information, and we do not use it for advertising or profiling.

Device permissions

• Microphone — to carry your voice during a call.
• Camera — only to scan a sign-in QR code; nothing is recorded.
• Notifications — to alert you to incoming calls.

How we use your information

• To provide the phone service: signing in, placing and receiving calls, showing colleagues, recent calls and voicemail, and your caller-ID and Do-Not-Disturb settings.
• To keep the service secure and working, and to let your phone ring for incoming calls.

Who your information is shared with

• Your organisation's iComm hosted phone system — the server that runs your phone service. Your sign-in, calls and settings are handled there.
• Google (Firebase Cloud Messaging) — delivers the push notifications that make your phone ring for an incoming call. Google processes a device token for this purpose.
• Google Play Services — provides the on-device QR-code scanner used for QR sign-in.

We do not share your personal information with any other third parties, and never for advertising.

Security

Information sent between the app and the server is protected with encryption in transit (HTTPS and secure WebSockets). The device sign-in key is stored using the platform's encrypted storage.

How long we keep it

Your account information is kept for as long as your organisation keeps your extension active, and in line with our business and legal obligations. Call and voicemail records follow your organisation's retention settings on the phone system.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you have the right to access, correct, or delete your personal information, to object to or restrict certain processing, and to data portability. Exercising them is free.

To exercise any of these, or to delete your account and associated data, contact us using the details below, or ask your organisation's administrator. If you are not satisfied with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or by calling 0303 123 1113. We would rather you came to us first so we can put it right.

Children

The app is intended for business use by adults and is not directed at children under 16.

Changes to this policy

We may update this policy from time to time. The "last reviewed" date above shows when the wording was last looked at.