Privacy Policy
This policy explains what personal data wNum collects, why we collect it, who we share it with, and the rights you have over it.
Data controller. BUBU APPS LLC ("we", "us", "our") is the controller responsible for your personal data.
Registered address: [[COMPANY_ADDRESS]]
Privacy contact: wnum@codepad.studio
1. Scope
This policy applies to the wNum website at www.wnum.net, the wNum iOS and Android applications, and any related support channels operated by BUBU APPS LLC (together, the "Service").
It does not apply to third-party services you choose to activate with a number you purchase, such as WhatsApp. Those services are governed by their own privacy policies.
2. Data we collect
Information you give us
- Account data: your email address and a password. Passwords are stored only as a salted bcrypt hash — we never store or have access to your plaintext password.
- Support correspondence: the content of emails or WhatsApp messages you send us, including any details you choose to share.
Information we collect automatically
- IP address, collected when you register or sign in.
- Approximate country and time-zone offset, derived locally from your IP address so we can show relevant content and detect abuse.
- Session cookie, used to keep you signed in.
- Usage and device data, such as pages viewed, referring page, browser type and general device information.
- Account timestamps, such as when your account was created.
Purchase data
- Order records: which virtual number, country and tier you purchased, the amount, and the transaction ID.
- Verification codes: the SMS verification code received on a number you purchased, so it can be displayed to you.
- Payment data: handled entirely by our payment provider. We receive only a confirmation of payment and limited billing details such as country and the last four digits of the card. We never receive or store your full card number, CVV or bank credentials.
Data we do not collect
We do not collect or request your personal phone number, government identification documents, precise GPS location, contact lists, photos or files. We do not read the content of your WhatsApp conversations — that is technically impossible for us, as a number only ever relays a single verification SMS to us.
3. Why we use your data, and our legal bases
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and secure your account | Email, password hash | Performance of a contract |
| Deliver a purchased number and its verification code | User ID, order data, verification code | Performance of a contract |
| Process payments, tax and invoices | Billing details, order data | Performance of a contract; legal obligation |
| Provide customer support | Email content, order data | Performance of a contract; legitimate interests |
| Prevent fraud, abuse and chargeback risk | IP address, country, order history | Legitimate interests |
| Measure and improve the Service | Aggregated usage and device data | Legitimate interests; consent where required |
| Meet accounting and legal obligations | Transaction records | Legal obligation |
We do not sell your personal data, and we do not use it for third-party advertising or profiling.
4. Cookies and analytics
We keep cookie use to a minimum:
- Essential session cookie — required to keep you signed in. It expires after 7 days or when you sign out. The Service cannot function without it.
- Analytics — we use Google Firebase Analytics to understand aggregate usage, such as which pages are visited. Where consent is legally required, analytics is only enabled after you consent.
You can block or delete cookies in your browser settings, but doing so may prevent you from signing in.
5. Who we share data with
We share personal data only with service providers who process it on our behalf, under contract, and only as far as necessary:
| Recipient | Purpose | Data shared |
|---|---|---|
| Paddle.com Market Limited | Merchant of Record: payment processing, tax, invoicing, refunds | Email, billing country, payment and order details |
| Apple / Google | In-app purchases and app distribution | Purchase confirmation data |
| Telecommunications providers | Supplying virtual numbers and relaying the verification SMS | Your wNum user ID, selected country, transaction ID |
| Google (Firebase) | Product analytics | Aggregated usage and device data |
| OpenAI | Helping draft replies to support emails | The content of your support email |
| Hosting and database providers | Running the Service infrastructure | All stored account and order data |
Our support inbox uses an automated assistant to help draft replies, which means the text of your support message may be processed by OpenAI. Please do not include passwords or payment card details in support messages. If you prefer your message not to be processed this way, write "no automated processing" in your email and we will handle it manually.
We may also disclose data where we are legally required to do so, to comply with a valid legal request, to enforce our Terms & Conditions, or to protect the rights, safety and property of BUBU APPS LLC or others. If our business is transferred, data may pass to the acquirer under this same policy.
6. International transfers
We and our providers operate internationally, so your data may be processed outside your country of residence, including in the United States and the European Economic Area. Where data leaves the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. How long we keep data
| Data | Retention period |
|---|---|
| Account data | Until you delete your account, then removed within 30 days |
| Order and transaction records | Up to 7 years, to meet accounting and tax obligations |
| Verification codes and assigned numbers | Short-term only, typically deleted within 30 days |
| Support correspondence | Up to 24 months |
| Analytics data | Up to 14 months, in aggregated form |
8. Security
We apply technical and organisational measures appropriate to the risk, including HTTPS/TLS encryption for all traffic, bcrypt password hashing, restricted internal access to production data, and server-side handling of all third-party API credentials so they are never exposed in your browser.
No system is completely secure. If a breach affects your personal data and poses a risk to your rights, we will notify you and the competent supervisory authority as required by law.
9. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten"), subject to our legal retention duties.
- Restrict or object to certain processing, including processing based on legitimate interests.
- Data portability — receive your data in a machine-readable format.
- Withdraw consent at any time, where processing is based on consent.
- Not be discriminated against for exercising your privacy rights.
To exercise any right, email wnum@codepad.studio from the address registered to your account. We respond within 30 days. We may ask you to confirm your identity before acting on a request.
California residents
Under the CCPA/CPRA you may request disclosure of the categories of personal information collected, the purposes, and the categories of third parties involved, and you may request deletion. We do not sell or share personal information for cross-context behavioural advertising.
EEA and UK residents
If you believe we have not handled your data lawfully, you may lodge a complaint with your local data protection authority. We would appreciate the chance to address your concern first.
10. Children's privacy
The Service is not directed at children and is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The updated version will be posted on this page with a new "Last updated" date, and we will notify you of material changes by email or an in-app notice where practicable.
12. Contact us
- Company: BUBU APPS LLC
- Registered address: [[COMPANY_ADDRESS]]
- Email: wnum@codepad.studio
- WhatsApp: +351 926 012 604
- Contact page: wnum.net/contact.html
See also our Terms & Conditions and Refund Policy.