Private by design. Secure by default.

A second number is about privacy, so we built HeyNum to know as little about you as possible — and to protect the little we do hold. Here's exactly what that means.

Read our privacy policy Report a security issue

No ID, no KYC
No ads, no data selling
Encrypted in transit and at rest

Data minimisation

What we need — and what we never ask for

The less we collect, the less there is to leak. Here is the complete list.

What we keep to run your line

Your email address — to sign you in and send receipts.
Payment confirmation — from our processor. We never see your full card number.
Call and text records — numbers, times and durations, needed for billing and support.
Your messages and voicemails — so you can read them on every device, until you delete them.

What we never ask for

An ID document, passport or driving licence
A selfie or face scan
Your home address or proof of address
Your existing phone number
Access to your contacts or your location

Security

How your data is protected

Security isn't a feature you switch on. It's how HeyNum is built.

Encrypted connections

HeyNum is only served over HTTPS (TLS 1.2 or later, with HSTS). Call audio between your browser and our servers is encrypted with DTLS-SRTP.

Encrypted storage

Messages, voicemails and transcripts are encrypted at rest. Backups are encrypted too, and kept for a limited time.

Account protection

Passwords are hashed with Argon2id, never stored in clear. Add two-factor authentication with an authenticator app for extra protection.

Minimal logs

Our web servers don't record IP addresses in their access logs, and technical logs are rotated automatically.

Certified payments

Card payments are handled by a PCI DSS–certified payment processor. Card numbers never touch our servers.

Limited internal access

Only a small number of trained staff can access customer data, only when needed to help you, and every access is logged.

Retention

How long we keep things

We keep data only as long as we need it to run your line, or as long as the law requires. Then it's deleted.

Full details in our privacy policy

Messages and voicemails: Until you delete them, or 30 days after you close your account
Call and text records: 12 months, for billing and disputes
Account details: While your account is open, then 30 days
Invoices: As long as tax law requires (up to 10 years)
Support conversations: 24 months after your last message
Web server logs: Rotated automatically, without IP addresses

Responsible use

No KYC doesn't mean no rules.

We don't check IDs because privacy matters. That's also why we don't tolerate people who use HeyNum to harm others.

Abuse is bannedSpam, scams, harassment, impersonation and bulk messaging lead to immediate suspension. See our acceptable use policy.
Report a numberReceived spam or a scam from a HeyNum number? Tell us at abuse@heynum.com and we'll investigate.
Lawful requestsWe respond to valid legal requests from competent authorities, after checking them — and we only hold minimal data.

Responsible disclosure

Found a vulnerability? Tell us.

We welcome reports from security researchers. If you act in good faith, we won't take legal action against you, and we'll keep you informed while we fix the issue.

How to report

Email security@heynum.com with the steps to reproduce the issue. Our security.txt has the details.
Give us reasonable time to fix it before sharing it publicly.
Don't access other people's data, disrupt the service or use social engineering.
We reply within 3 business days.

Do you listen to my calls or read my messages?

No. Your messages and voicemails are stored so that you can read them on all your devices, and only automated systems process them — for example to deliver them, or to transcribe voicemail. Our staff don't access their content, except if you ask us to for a support request.

Do you sell or share my data?

Never for advertising or marketing. We share data only with the providers that make the service work — carriers that connect your calls and texts, our payment processor, our hosting and delivery providers — under contracts that protect it.

Can the police get my data?

Like any telecom service, we must respond to valid legal requests from competent authorities. We check each request, disclose only what the law requires, and we hold very little: no ID document, no address, no contacts list. Read more in our privacy policy.

How do I delete my data?

Delete any conversation or voicemail from your inbox at any time. To delete everything, close your account in your settings: your data is erased within 30 days, except the invoices we're legally required to keep.

Is HeyNum end-to-end encrypted?

No phone service that connects to the regular phone network can be end-to-end encrypted, because calls and texts have to reach ordinary phones. Everything between your browser and HeyNum is encrypted, and your stored data is encrypted at rest.

A private number, without the paperwork.

Pick a country, pay with just an email and start calling from your browser in seconds.

Instant deliveryNo ID requiredCancel anytime