Privacy Policy
What SpamFence handles, and what its server cannot read.
Effective November 6, 2026. It applies to the SpamFence iPhone app and its servers. During the pilot, the app is available in Argentina, Chile and Uruguay.
Who is responsible
SpamFence is developed by SpamFence Development Team, in Argentina. For any question about your data: support@spamfence.site.
What we never receive
There are no user accounts, and we don't ask for your name, email or phone number. The app doesn't read your contacts or your call history: iOS doesn't give them to it. It uses no third-party analytics, advertising or crash-reporting tools, and it doesn't track you across apps or websites.
Live lookup
When a call comes in, iOS can ask our server whether that number is spam. The question travels encrypted with a technique called private information retrieval (homomorphic PIR): the server computes the answer without being able to read the number. It also goes through a relay operated by Apple that hides your IP address, and it is authorized with anonymous tokens (Privacy Pass) that don't identify who is asking. Our servers keep no logs of lookups: not the number, not the IP address, not the time.
This iPhone's credential
To use live lookup, the app obtains a credential on its own, with no codes. It does so by proving with App Attest, an Apple service, that it is a genuine iPhone running the genuine app. Our server keeps the public key from that check and a fingerprint of the credential (not the credential itself), so it can revoke it and limit how many are requested per day. That key isn't linked to your name or your number, and the server that stores it is not the one that answers lookups. The credential can be removed from the app.
What stays on your iPhone
Your list of blocked numbers, the live lookup credential and the country you chose are stored on the iPhone, encrypted by the system and excluded from the iCloud backup. The credential never leaves the iPhone.
The list is also stored in the iPhone's keychain, outside the backup, and it is restored if you reinstall the app. The optional iCloud copy goes to iCloud Keychain, end-to-end encrypted by Apple, and it is deleted when you turn it off. SpamFence doesn't receive the list.
If you report a number
Reporting is optional. A report contains only the number that bothered you, the reason you chose and the day. It carries an anonymous token proving it came from a genuine iPhone and app without saying which ones (App Attest and Privacy Pass), with a limit of 3 per day. We don't receive your IP, your device or the exact time. A single report doesn't block anyone: the list is built by matching several independent sources.
Where the spam list comes from
The list is built from anonymous user reports and publicly available information: community complaint websites and official records. For each number we keep how many sources flag it, the category and the date, never any data about who reported it. Old evidence loses weight over time, and numbers with no new evidence are forgotten after 180 days.
If your number is on the list
If your number is listed by mistake, write to support@spamfence.site with the number. We review it and reply; if appropriate, we remove it from the list in the next publication, which is daily.
Your rights
You can request access, correction or deletion of data within the time limits set by the law of your country: in Argentina, Personal Data Protection Law 25.326 (supervisory authority: Agencia de Acceso a la Información Pública); in Chile, Law 19.628 on the Protection of Private Life and, once in force, Law 21.719 (Agencia de Protección de Datos Personales); in Uruguay, Personal Data Protection Law 18.331 (Unidad Reguladora y de Control de Datos Personales). If we change this policy, we publish the new version on this page with its date. If this translation and the Spanish version differ, the Spanish version prevails.