FerryPrivacy Policy
Ferry is a phone service made by Montauk Analytics Inc. ("we", "us"). This policy explains what we collect when you use the Ferry apps and website, why we collect it, who we share it with, and the choices you have.
The short version. We collect what we need to give you a working phone number: your account, your calls and texts, and the recordings, transcripts and summaries you ask for. We don't sell your data. We don't use your recordings or transcripts to train AI. You can delete your account and its content from the app at any time.
1. What we collect
Information you give us
- Account details: your name and email address, from Sign in with Apple, Google, or the email you sign up with.
- Your mobile number: the mobile number you already have, which we text a code to so we can confirm you're a real person. We use it to prevent fraud and abuse, not to market to you.
- Your profession, if you choose one, so we can format call summaries for your kind of work.
- Line settings: line names, badges, ringtones, hours and blocked numbers.
- Identity check: if you choose to verify your identity (or need to, to lift the limit on contacting new people), the check is run by Stripe Identity. Stripe collects a photo of your ID document and a selfie. We receive the result of the check and basic details from it, not your full document images.
- Support messages you send us.
Information created when you use the service
- Call and text records: the numbers you call and text and that contact you, dates, times, durations, call status, and which line was used.
- Text messages: the content of texts you send and receive, so we can deliver them and show your conversations.
- Call recordings: audio of your calls, recorded with each side on its own channel.
- Transcripts: a written version of each recorded call, created by speech-to-text.
- AI summaries: a short summary, action items and follow-up date generated from each transcript. Calls shorter than about 30 seconds are not transcribed or summarized.
- Usage: minutes and texts used, used to apply your plan's allowances.
- Device information: push notification tokens (Apple Push Notification service and Firebase Cloud Messaging) so calls can ring your phone, plus device type, operating system and app version.
- Logs: IP address, timestamps and error reports used to run, secure and debug the service.
Contacts
If you give the app access to your contacts, they are used on your device to show names for calls and messages. Your contacts are not uploaded to our servers unless you turn on contact sync, in which case the contacts you sync are stored with your account so they appear on your other devices.
Payments
Payments are handled by Apple (App Store), Google (Google Play) or Stripe (web). We never see or store your full card number. We receive your subscription status, plan, renewal date and, for web purchases, a billing address needed to calculate taxes.
2. How we use it
- To provide the service: assign your number, connect calls, deliver texts, ring your devices, and record, transcribe and summarize calls.
- To apply your plan, trial and allowances, and to process payments and taxes.
- To prevent fraud, spam, robocalls and abuse, for example by confirming your mobile number, limiting how many new people a new account can contact, and watching for patterns like many short outbound calls.
- To provide support and send service messages (for example, a summary is ready, or a payment failed).
- To meet legal obligations, including telecom regulations and lawful requests.
- To improve reliability and fix bugs, using logs and aggregated usage, not the content of your calls.
We do not sell your personal information, share it for cross-context behavioral advertising, or use your recordings, transcripts, summaries or messages to train AI models.
Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (running the service), our legitimate interests (security, fraud prevention, improving the service), legal obligation, and your consent where we ask for it (for example, contact sync or optional identity verification).
3. Recordings and consent
Recording laws differ by place. In some US states and many countries, everyone on a call must agree to it being recorded. By default, every Ferry call starts with a short announcement, "This call is recorded," that both sides hear before the conversation begins.
You can turn the announcement off. If you do, or if you call or receive calls from somewhere with stricter rules, you are responsible for getting any consent the law requires from the people you talk to. See our Terms of Service.
If you called or were called by a Ferry user and want a recording of you deleted, contact the user directly or email us at the address below.
4. Who we share it with
We share information only with service providers that help us run Ferry, under contracts that limit how they can use it, and when the law requires.
| Provider | What they do | What they receive |
|---|---|---|
| Telnyx | Phone numbers, calling, texting, call recording, speech-to-text transcription, and AI summaries (generated by the DeepSeek V4.1 Flash model run through Telnyx) | Call and text records, message content, call audio, transcripts |
| Google Cloud | Hosting our servers, database and encrypted file storage | All service data, stored encrypted |
| Apple | Sign in with Apple, App Store payments, iPhone push notifications | Account and subscription information, push tokens |
| Google sign-in, Google Play payments, Android push notifications | Account and subscription information, push tokens | |
| Stripe | Web payments and taxes; Stripe Identity for ID checks | Billing details; ID document and selfie for identity checks |
We ask AI and transcription providers to process your data without keeping it or using it for training, where they offer those terms.
We may also share information: to comply with law, a court order or a valid request from law enforcement; to protect the safety, rights or property of our users, the public or us, including to stop fraud and abuse; and as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.
5. How long we keep it
- Recordings, transcripts and summaries: kept until you delete them or your account. You can set them to delete automatically after 30, 90 or 365 days. Deleting a recording also deletes its transcript and summary.
- Messages and call history: kept until you delete them or your account.
- Account profile (name, email, mobile number): kept while your account is open, then erased 30 days after you delete your account.
- Billing and legal records: usage records (quantities and times only, no content), subscription records and security audit logs are kept as long as needed for tax, accounting and legal obligations.
- Free trial check: if your account used a free trial, we keep a one-way, keyed fingerprint of your verified email and mobile number after deletion so the same person can't start another free trial. It can't be turned back into your email or number.
6. Deleting your account
You can delete your account in the iPhone or Android app: tap your initials (top left) → Settings → Delete Account. See all the ways to delete your account.
Right away, we delete your recordings, transcripts, summaries, messages, call history, synced contacts and devices, and sign you out everywhere. After 30 days, your phone numbers are released and your profile (name, email, mobile number) is erased. The billing, legal and trial records described above are kept.
Deleting your account doesn't cancel an App Store or Google Play subscription. Cancel it in your store settings so you aren't charged again.
7. Your rights
Depending on where you live, you may have the right to:
- know what personal information we have about you and get a copy;
- correct information that is wrong;
- delete your information;
- object to or restrict some processing, and withdraw consent you gave;
- get your information in a portable format;
- opt out of the "sale" or "sharing" of personal information (we don't do either);
- complain to a data protection authority.
California residents (CCPA / CPRA)
In the last 12 months we collected the categories described in section 1: identifiers (name, email, phone numbers, IP address, device identifiers); commercial information (subscriptions); internet or network activity (logs); audio and electronic information (call recordings and messages); and, if you choose an ID check, sensitive personal information (government ID and a selfie processed by Stripe). We use these only for the purposes in section 2 and disclose them only to the providers in section 4. We do not sell or share personal information and do not use sensitive personal information to infer characteristics about you. We will not discriminate against you for using your rights. You can use an authorized agent; we may need to verify your identity and the agent's authority.
EEA, UK and Switzerland (GDPR)
Montauk Analytics Inc. is the controller of your personal information. You have the rights listed above and can complain to your local data protection authority.
To use any of these rights, email us at the address below or use the in-app deletion option. We respond within the time the law requires (usually 30 or 45 days).
8. Security
We encrypt data in transit and at rest, limit staff access to what is needed, and keep audit logs. Recordings are stored in encrypted storage. No system is perfectly secure, so we can't guarantee absolute security; if a breach affects you, we'll tell you as the law requires.
9. International transfers
We are based in the United States and store data in the United States. If you use Ferry from another country, your information is transferred to and processed in the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
10. Children
Ferry is not for children. You must be at least 18 to create an account, and we do not knowingly collect information from children under 13. If you think a child has given us information, contact us and we will delete it.
11. Changes
We may update this policy. If we make a significant change, we'll tell you in the app or by email before it takes effect, and update the date at the top.
12. Contact us
Montauk Analytics Inc.
Email: [email protected]
Postal address: [to be added]