Privacy Policy

Sidekick Tel is provided by Maverick Systems (company number [company number], registered office [registered address]). We are the controller of the personal data described here, under the UK General Data Protection Regulation and the Data Protection Act 2018. Contact us about privacy at hello@sidekicktel.com.

If you use Sidekick through your employer's Team plan, your employer decides who is in its company and can see the details listed under Companies below.

• Your account. Your name, email address, username and, if you set one up, a passkey. Sign-in is run by our provider Clerk, which also holds your sign-in details and the devices you're signed in on.
• Your card. What you choose to put on your profile: name, company, handle, phone numbers, email addresses and photo.
• Your lines. The settings of each phone line on your account, such as the server, extension and display name, so they appear on all your devices. Not the passwords: the SIP and messaging passwords are kept only in your iPhone's Keychain, and in iCloud Keychain if you use it, which is end-to-end encrypted. They are never sent to us.
• Your phone line on the Sidekick phone system. When we set up a line for you, we create an extension on our phone system with your name and email address. The phone system handles your calls and holds your chat messages, voicemail and call records, as any phone system must to deliver them.
• Call history. Who you called or who called you (name and number), when, for how long, whether it was answered, and the line used, so your history is the same on every device.
• Contacts. The contacts you add in Sidekick and, if you allow it, the ones you import from your iPhone's address book, including their photos, so they're on all your devices.
• Recordings and photos. Call recordings you choose to make, and profile or contact photos. These are stored as files under a random name, with the original file name kept alongside.
• Chat settings. Which conversations you've removed on your devices. The messages themselves stay on the phone system, not with us.
• Your plan. Which plan you're on, whether you're in a trial, and the status of any subscription. If you pay on our website, Stripe processes the payment and gives us a customer reference and the subscription's status; we never see your card details. If you pay in the app, Apple processes the payment and gives us a signed record of the subscription.
• Companies. If you're in a company on Sidekick, the company's name and your role in it.
• Technical records. Our servers keep short-lived logs of requests and errors (for example, the time and the endpoint called) to keep the service secure and working.

• The assistant runs on your iPhone, using Apple's on-device model. What you ask it, and the calls, voicemail and messages it reads to answer, don't leave the phone. If we later offer Apple's Private Cloud Compute for harder questions, it will be off until you turn it on, and only the question you choose to send will go to Apple.
• Dictation is transcribed on your iPhone.
• Your location is only used when you choose to send a place in a chat. It's then sent as a map picture and link in that message. We don't track where you are.
• Microphone and camera are used only for calls, video calls, recordings, voice notes and the photos you choose to take.
• Storage location. You can choose to keep recordings and other files in your own iCloud Drive instead of on the iPhone alone. Apple holds those under its terms.

• To provide Sidekick, including your line, calls, messages, syncing between your devices and the features of your plan. This is necessary for our contract with you.
• To take payment and manage subscriptions, including trials, renewals and refunds. This is necessary for our contract with you, and for our legal obligations on tax and accounting.
• To keep the service secure and working, such as preventing abuse, fixing faults and verifying that messages from Stripe, Apple and Clerk are genuine. This is in our legitimate interests, and yours.
• To contact you about your account, such as sign-in codes, receipts and important changes to the service or these terms. We don't send marketing email unless you ask for it.
• Contacts you import are other people's details. We hold them only so they appear on your devices, on your instruction, and never contact those people or use their details for anything else.

We use a small number of providers who process data for us, under contract and only on our instructions:

• Microsoft Azure hosts our service, database and file storage in the UK (UK South).
• Clerk runs sign-in and company membership. Clerk is based in the United States.
• Stripe processes payments made on our website. Stripe acts as a controller for some payment data, under its own privacy policy.
• Apple processes App Store purchases, and delivers call and message notifications to your iPhone through the Apple Push Notification service. Apple acts under its own privacy policy.
• Vercel hosts our website.

The people you call and message see your caller name and number, and what you send them, as with any phone. We don't sell personal data or share it for advertising. We'll disclose data if the law requires it, and only as much as it requires.

When a company invites you and you join, its admins can see your name, email address and role in the company, and whether you have one of its Team seats. Through Sidekick they can't see your calls, messages, recordings, contacts or call history. If you leave or are removed, you go back to your own plan and keep your line and everything on your account.

Our service and your data are hosted in the UK. Clerk, Stripe and Apple may process data in the United States. Where they do, the transfer is protected by the UK's adequacy regulations for the UK Extension to the EU-US Data Privacy Framework, or by the International Data Transfer Addendum to the EU Standard Contractual Clauses.

• While you have an account, we keep your account data so the service works. You can delete contacts, recordings and other items at any time, and they're deleted from our service too.
• When you delete your account, in the app under Account, Delete Account, we delete your account, everything synced to it, your files, and the extension we created for you on the phone system. Your sign-in with Clerk is deleted at the same time.
• Server logs are kept for up to 90 days.
• Payment records are kept by Stripe and Apple for as long as the law requires them to.

Everything between your devices, our service and the phone system is encrypted in transit. Calls on lines we set up use encrypted signalling and media (TLS and SRTP). Files are kept in private storage and can only be reached through links that expire after 15 minutes. Phone-system passwords are kept only in your Keychain.

You have the right to:

• ask for a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted, which you can do yourself with Delete Account;
• object to, or ask us to restrict, how we use it;
• receive the data you gave us in a portable format.

Email hello@sidekicktel.com to use any of them. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd like the chance to put it right first.

Our website uses only the cookies needed to keep you signed in, which are set by Clerk. There are no analytics or advertising cookies, so there's nothing to opt out of.

Sidekick isn't meant for children under 13, and we don't knowingly collect their data.

If we change this policy in a way that matters, we'll tell you by email or in the app before the change takes effect. The date at the top shows when it was last updated. Our Terms of Use cover the rest of our agreement with you.