Privacy Policy
Effective October 26, 2026 · Updated October 29, 2026
The short version. Your block lists, rules and the texts SpamBlock filters stay on your iPhone. We only receive data when you create an account, buy a subscription, share spam reports with the community, or turn on call screening. We don't sell your data, show ads, or use tracking or analytics SDKs.
Who we are
SpamBlock is made by NextprojeX LLC ("we", "us"). Questions about this policy or your data: support@nextprojex.com.
What stays on your iPhone
- Numbers you block, label or allow, area-code rules, keyword rules and spam scripts are stored in the app on your device.
- Text filtering. iOS hands SpamBlock texts from unknown senders so it can sort them into Junk. That happens entirely on your device; message content is never sent to us.
- Call blocking. iOS reads your block list from the app on your device. SpamBlock can't see your call history or voicemails.
- Contacts. If you use call screening and allow Contacts access, SpamBlock adds one contact, “SpamBlock”, with your screening number (or finds it if you already saved it), so calls it puts through to you aren't silenced. So that people you know skip screening, the app also sends your contacts' phone numbers (only the numbers: no names, photos or other details) to our server, which stores them only in a scrambled form tied to your account and uses them only to recognise those callers. Turn this off in Settings › Advanced › Call screening › Contacts skip screening; the numbers are then deleted. They're also deleted when you delete your account.
- Screenshots and voicemails you share to SpamBlock are read on your device (Apple's text recognition). Voicemail audio is transcribed on your device when your iPhone supports it; otherwise iOS uses Apple's speech recognition service, under Apple's privacy policy. We don't receive the screenshot, audio or text.
What we collect, and why
Your account
If you sign in, we keep your email address (or the private identifier Sign in with Apple or Google gives us) and an account ID, so you can use your subscription on your devices and send community reports. Email sign-in codes are delivered by our email provider.
Subscriptions
Apple processes App Store payments; we receive the subscription's product, status, renewal dates and transaction IDs to unlock features. If you subscribe on the web, Stripe processes the payment; we keep your Stripe customer ID and subscription status. We never see your full card number.
Community spam list
If you're subscribed and "Share numbers I block" is on (you can turn it off in the app's settings):
- When you block a number, or report one as spam or not spam, we receive that phone number, your vote and the reason, linked to your account.
- Marking a number as "always allow" is only reported when that number is already on the community list, so allowing a personal contact never uploads it.
- To stop abuse, we keep a one-way hash of your network address with each report; we don't store the address itself.
Other people see only a combined score for each number, never who reported it. The list also includes public complaint data from the U.S. Federal Trade Commission (Do Not Call complaints) and Federal Communications Commission. Subscribers download the list to their devices.
Call screening (optional)
Call screening only works if you set your carrier to forward unanswered calls to a SpamBlock screening number. For calls forwarded to that number:
- We receive the caller's number, your number, and the time of the call.
- Callers hear that the call is recorded and are asked to leave their name and reason for calling. We store that recording and a text transcript, along with whether it matched a known spam script.
- Calls from numbers already on the community list may be declined without recording.
- If you turn on ring-through, callers are first asked to press a number (to show they're a person) and then to say their name and reason for calling. That short recording is kept with the call so you can hear who was calling, and is deleted with it after 30 days. Our telephone provider turns what they say into text; we keep that text and compare it with known spam scripts. If it doesn't match, we ring your phone from your screening number, read their reason to you, and connect the call when you answer (press star to send them to voicemail instead). If you don't answer, they can leave a message as above.
- If a message matches a known spam script, the caller's number counts toward its community score. Your identity is not shown to anyone.
If you allow notifications, SpamBlock also shows these on your iPhone: what a caller said as we ring you, and the transcript of voicemails and missed calls that aren't spam. To do that we store your device's push token with your account; it's deleted when you sign out or delete your account.
Messages and missed calls that aren't spam are emailed to your account's email address, with the transcript and the recording attached, so you don't miss real callers. Spam messages are not emailed.
Our telephone provider deletes its copy of each recording once we've stored ours. We delete recordings, transcripts and call details after 30 days.
Who processes data for us
| Provider | What for |
|---|---|
| Supabase | Database, sign-in and file storage (United States) |
| Apple | App Store purchases, Sign in with Apple, on-device features |
| Sign in with Google (if you use it) | |
| Stripe | Web subscription payments (if you use them) |
| Resend | Sign-in code emails, and emailing you screened-call messages that aren't spam |
| SignalWire | Answering, recording and connecting screened calls, and turning callers' spoken reasons into text |
| Apple Push Notification service | Delivering screened-call notifications to your iPhone |
| Deepgram | Transcribing screened-call recordings |
These providers process data only to deliver their service to us. We may also disclose data if the law requires it.
What we don't do
- We don't sell or rent your data, or share it for advertising.
- We don't track you across other apps or websites.
- We don't upload your call history or messages, and of your contacts only their phone numbers, in scrambled form, as described above.
How long we keep data
- Account, subscription and community-report data: while your account exists.
- Call-screening recordings, transcripts and call details: 30 days.
- Public FTC and FCC complaint records: about 120 days.
Your choices
- Delete your account in the app (Account ▸ Delete account). This removes your account, your community reports and any screened calls. If you used Sign in with Apple, we also revoke SpamBlock's access with Apple.
- Stop sharing reports at any time in the app's settings.
- Stop call screening by turning off call forwarding with your carrier.
- Ask for a copy or correction of your data by emailing support@nextprojex.com. Depending on where you live (for example California or the EU), you may have further rights; we'll honor them.
- Cancel a subscription in iPhone Settings ▸ your name ▸ Subscriptions (or through the Stripe link for web subscriptions).
Security
Data is encrypted in transit. Server data is protected by access controls so each account can read only its own records, and service keys are never stored in the app.
Children
SpamBlock isn't directed at children under 13, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date above, and for significant changes we'll tell you in the app.