PandaSip Privacy Policy

Last updated: 20 October 2026

1. Who we are

The PandaSip app is developed and provided by AkıllıPanda. This policy explains what data PandaSip processes and how. Questions: destek@akillipanda.com

PandaSip is a SIP softphone that connects to your own PBX or VoIP provider. PandaSip does not provide a phone number or a calling plan; your calls go through your own PBX or provider.

2. Data that stays on your device

The following data is kept on your device:

• VoIP account details and passwords. Passwords are stored in the device's secure storage: in the Keychain on iOS, and on Android encrypted with a key held in the Android Keystore. They are not sent to our servers unless you turn on "Receive calls when the app is closed" for an account; if you do, our server stores your PBX identity and a digest derived from the password (HA1), as described in section 3.

The following is never sent to our servers:

• Recent calls (call history).
• Favourites.
• Contacts. Your contacts are read on the device, only with your permission, so you can call them and see callers by name. They are never uploaded.
• Call audio. Audio flows directly between your phone and your PBX/provider and never passes through our servers.

3. Data we process only if you turn on "Receive calls when the app is closed" (Pro)

While this feature is off, no account details are sent to our servers. When you turn it on for an account:

• PBX connection details: PBX address, port and transport (UDP/TCP/TLS), username, authentication username and display name. Our server uses them to register to your PBX on your behalf and to forward incoming calls to you.
• Your password is sent to the server only to set up this registration and is not stored in plain form. The server stores the SIP digest value (HA1) derived from your password; because that value is enough to register to your PBX, it is protected like a password.
• Your push token (the Apple VoIP push token on iOS, the Firebase Cloud Messaging token on Android) and a random device identifier generated by the app.
• The caller's number and name for each incoming call: used only to deliver the call notification to you and not stored. The set-up messages of an incoming call (SIP signalling) are relayed through our server; call audio still never passes through it.
• Purpose: delivering incoming calls to you while the app is closed.
• Storage: our server runs at our hosting provider in Germany. The data in this section is therefore transferred outside Türkiye (to Germany, in the European Union) to provide the service.

For security and troubleshooting, our server keeps technical request logs (IP address, time, request path and result). Passwords, push tokens and purchase data are never written to these logs. Logs are rotated weekly and deleted within 6 weeks at most.

4. Subscription data

If you subscribe to Pro and use "Receive calls when the app is closed", the app sends your purchase record to our server for verification:

• On iOS the app sends Apple's signed purchase transaction. Our server stores the subscription identifier (Apple's original transaction ID), the product, the environment (production/test), the expiry date and, if any, the refund date. We receive renewal and refund notices directly from Apple.
• On Android the app sends the Google Play purchase token and product ID, and our server verifies the subscription with Google through the Google Play Developer API. Our server stores the subscription identifier (a digest derived from the purchase token), the product, the environment (production/test), the expiry date, the date the subscription stopped being valid, if any, and the purchase token itself, so that it can regularly check with Google whether the subscription has renewed.

We never see your payment details. Payments are processed by Apple on iOS and by Google Play on Android.

5. Retention

• PBX connection details and push records (PBX address, usernames, display name, password digest) are deleted from the server when you turn off push or delete the account in the app.
• If you stop using the app, they are deleted automatically 30 days after your subscription ends (or is refunded).
• The device record (random device identifier, push token and the linked subscription identifier) and the subscription record are kept so that you can turn push back on, and contain no PBX details. They are not deleted automatically; you can delete them at any time in the app with Settings → About → Delete my server data (this removes the device record, all PBX connections and any subscription record not used by another of your devices), or ask us at destek@akillipanda.com.

6. What we don't do

• No analytics.
• No advertising.
• No tracking across apps or websites.
• We do not sell your data or share it with third parties.

Apart from the provider that hosts our server infrastructure, the only other party involved is Apple or Google, depending on your platform: on iOS, notifications are delivered through the Apple Push Notification service (APNs) and purchases are made through the App Store; on Android, notifications are delivered through Google's Firebase Cloud Messaging (FCM) and purchases are made through Google Play.

7. Security

• All traffic between the app and our server is encrypted with TLS.
• Passwords and push tokens are never written to server logs.
• Access to the server is restricted.

8. Your rights

• Turning push off in the app deletes your PBX details from our server.
• Settings → About → Delete my server data deletes all your data on our server (device record, PBX connections, subscription link).
• To request information about your data or its deletion, write to destek@akillipanda.com.
• Under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR), the data controller is AkıllıPanda. Your data is processed to provide the service you requested (delivering incoming calls and verifying your subscription), on the legal basis of entering into and performing a contract with you. You can exercise your rights of access, rectification, erasure, objection and complaint under Article 11 of the KVKK and the GDPR at the address above.

9. Children

PandaSip is not directed at children under 13.

10. Changes

We announce material changes to this policy in the app or on this page. The date of the current version is shown in the "Last updated" line at the top.