Phone Gateway privacy policy

Last updated 30 October 2026

Who we are

Phone Gateway is an Android app published by AppNex Technologies. It connects an Android phone to a business's customer relationship management (CRM) account through that business's gateway at https://phone.appnex.ph, so the business can send and receive texts and log calls from its CRM using the phone's own SIM. The business that gave you the app decides how the data is used in its CRM.

What the app collects

Only after you agree to the disclosure in the app and allow the permissions Android asks for:

• Text messages sent and received on the phone: phone numbers, message text, time and any pictures.
• Call history: phone numbers, direction, time, duration and whether the call was answered.
• Call recordings, only if you choose a recordings folder in the app.
• The phone's SIM numbers and carrier names, and its model, Android version, app version and battery level.
• An id Android gives the app on that phone (the same until the phone is reset). The gateway keeps only a scrambled form of it (a hash), to keep one phone linked to one business account at a time.
• Whether the phone is ringing or on a call, to show incoming-call alerts in the CRM.

Texts from short codes (for example bank one-time passwords and carrier promos) are ignored unless your business turns that off.

How it is used

Only to send and receive your business's texts, log its calls, attach recordings, show incoming-call alerts and send missed-call replies in its CRM, and to keep each SIM number and each phone to one business account at a time. The data is not sold or used for advertising, and the app contains no advertising code.

Who it is shared with

The app sends the data over an encrypted connection to the gateway above, which passes it to your business's CRM account. The gateway runs on Cloudflare, which hosts it on AppNex Technologies's behalf. Nobody else receives your texts, calls or recordings.

The app's Scan QR code button uses Google's code scanner, which is part of Google Play services. The camera image stays on the phone. Google receives device identifiers and information about how the scanner is used and performs, to run and improve it, as described in Google's ML Kit data disclosure.

The business account

When a business adds Phone Gateway to its CRM, the gateway keeps that business account's contact as its CRM business profile has it: a name, email and phone number. It is used only so the provider of Phone Gateway can reach the business about its account, and is deleted with the account's other data (below).

Chat channels

A business can also connect its own Telegram, Viber, LINE or Discord account, so people can message it there. Those messages, the sender's name on that app and any files they send pass through the gateway into the business's CRM account. The gateway keeps the business's bot credentials (encrypted), which person on the app goes with which CRM contact, and a 30-day log of messages without their text. A message's text is kept, encrypted, only until it is delivered (at most a week if delivery keeps failing, or 30 days while Phone Gateway is removed from the business's CRM). Removing a channel deletes the bot credentials and those links; removing Phone Gateway deletes them 30 days later, unless the business adds it back by then.

How long it is kept

Texts, call logs, pictures and call recordings are stored in your business's own CRM account. The gateway only passes them on. It deletes its copy of a picture or recording as soon as the CRM has it, or when the CRM won't accept it, and always within 3 days. It keeps finished texts for 3 days and call records for 7 days, to confirm delivery and attach recordings, then deletes them. For the account's reports it keeps hourly counts of them (how many texts and calls, and how long, per SIM, phone and CRM user; never their content or phone numbers) for 62 days. Daily totals of these counts, with the names of the account's SIMs, phones and CRM users, are also kept in our reporting system for up to 25 months; the account's own figures are deleted with its data. Everything in your business's CRM is kept under that business's own policy.

Your choices

• Unpair the phone in the app, or uninstall the app, to stop all collection.
• When your business removes Phone Gateway from its CRM, the gateway stops at once and keeps that account's phones, settings and subscription for 30 days, so adding it back carries on where it left off. Then it deletes that account's phones, texts, call records, media and business contact (texts, call records and media go sooner, on the schedule above), and the hourly counts of its texts and calls, and its own figures in our reporting system. Files already stored in the CRM stay there, under the business's control. The gateway keeps only the account's plan and monthly totals (how many texts and call minutes, never their content) for billing.
• Deny or remove the app's permissions in Android settings.
• To have data deleted, follow the steps on Delete your data.

Security

All data travels over HTTPS. Each phone has its own access token, stored only as a hash on the gateway. While the gateway holds a picture or recording, it can only be reached through an unguessable signed link.

Children

Phone Gateway is a business tool and isn't meant for anyone under 18.

Changes and contact

If this policy changes, the new version appears on this page with a new date. For questions, email formulatesolutions@gmail.com.