Last updated 3 October 2026. This policy applies to foen at freefoen.com, to homefoen.com, and to the other addresses that lead to them. It says what is collected, why, for how long, and what we cannot see.
foen is operated by sun-dive, a sole operator, from Taiwan. The server that carries calls and holds the items below is in Tokyo, Japan. You can reach us through the contact page.
foen has no accounts. We do not ask for, and do not hold, your name, email address, telephone number, date of birth, payment details or password. Your foen number is made on your own device from twelve recovery words. We never receive the words and cannot recover a number for you.
| What | Why | How long |
|---|---|---|
| Call traffic. The pictures and sound of a call pass through our relay, encrypted end to end (section 4). We cannot read them. | To carry the call. | A rolling window of about six seconds per direction while the call runs, deleted within an hour after it ends. |
| A call record: the network address of your device when you place, answer or are invited to a call, or ask a number to connect, the time, the call's identifier, and the signed invitation or request itself, which carries the sending number. | To prevent abuse of the service, to block a device or number that harms it, and to be able to answer a lawful request from a law enforcement agency. The record is kept in a form that cannot be altered without leaving a trace. | Thirty days. |
| Your foenbook backup, if backup is on (it is on unless you turn it off): your contacts, blocked numbers and settings, as a signed record encrypted with a key that exists only on your devices. We hold it and cannot read it. | So that your foenbook comes back on a new device from your recovery words. | Until you ask us to remove it (section 8). |
| Messages. A text message is a signed entry on the sender's thread, encrypted between the two numbers with a key that exists only on their devices. We hold it and cannot read it. | So that a message reaches a person who is not there when it is sent. | Thirty days, then the content is removed from the server. Each device keeps its own copy. |
| Call invitations and requests to connect. A short signed note saying that a number is calling you, or asking you to add it, waiting for your page to pick it up. A request carries the sender's name and a public key, never anything of yours. | To ring your phone, and to show you who asks to connect. | Deleted within an hour of the last note on your number. |
| A public phone book listing, only if you choose to list yourself: the name you typed and your number. | So that people can find you by name. Anyone can read the public book; that is its purpose. | Thirty days after you last listed or refreshed it. |
| Advertising records. How many times each banner was shown and clicked, per minute, and where it was shown. Each time a banner is shown or clicked: your device's network address, the time, and which banner. For each click, also: the network your address belongs to and its country, and a one-way hash of the address under a key that never leaves our server. A click on a banner passes through our own address on its way to the advertiser's. For how many different devices saw a banner in a day, a one-way hash of the address under a key made fresh each day and then discarded. | To run our own advertising (section 6), to give an advertiser figures they can check, as signed records anyone can verify, and to prevent fraud, including on payments that can be disputed months later. | Network addresses: 120 days, then deleted. The counts and the click records without addresses: for good. The daily hashes: until the next day. |
| Requests to connect and missed-call notices. A signed entry on the sender's thread, addressed to your number: their name, a public key or the time of the call. Not encrypted, since a person who holds only your number cannot seal anything to you; it carries nothing of yours. | So that a request or a missed call reaches you when your page was not open. | Thirty days, then the content is removed from the server. |
| Your channel and its posts, if you fill them in: the name, text, picture, schedule and link you chose, and the posts you write, as signed entries anyone with your channel link can read. A picture you upload is kept as a file named by its content, signed by your number, with a fixed amount of space per number. It is public by design, and it is shown as a web page on a separate address of ours that search engines may index. The link you chose is shown only inside foen, never on that page. | So that people can find out who a number belongs to before they call. | For as long as you keep it; remove a field to remove it. |
| A notification address, only if you turn on "Tell me when they go live": the address your browser's push service gave us, the two keys it needs, and the list of channels you follow, signed by your number. | To tell you, even with the page closed, when a channel you follow announces it is live. The push service carries only an encrypted message it cannot read. | Until you turn it off, or the address stops working. |
| Ad packs, if you advertise: the title, link, banner and placements you chose, kept under your number, and the counts of how often the banner was shown and clicked. | To show your banner where you asked and to bill and report by the count. | For as long as the pack exists. |
| Messages you send us through the contact form on Deals Boss, our advertising business. | To answer you. | Held by Deals Boss under its own policy. Nothing from that site loads on foen. |
We do not keep web server access logs. The call record above is the only record of who called whom, and it holds numbers and addresses, never the content of a call.
Two things are designed so that we cannot read them, rather than merely promising not to.
A policy can be changed later; a design cannot be re-declared. That is why these two are built this way.
Your browser keeps, for this site only: the key that signs your calls, held by the browser so that no web page, including ours, can read it; your recovery words, sealed on the device, or behind a PIN if you set one; your foenbook and settings; the last person you called; your choice of look, camera and microphone. Clearing the site's data in your browser removes all of it. Your number and, if backup was on, your foenbook can then be restored from your words.
foen sets no cookies and loads nothing from any advertising network. An advertisement on foen is an image we host and a link we chose, shown on the idle screen and after a call, never during one. We count views and clicks, and keep a record of each as section 3 describes. Some links are affiliate links, which means we may earn a commission if you buy something after following them; this does not change what you pay. When you follow a link you leave foen, and the site you arrive at applies its own policy. You can turn the advertisements off under Settings. homefoen.com shows no advertising at all.
We do not sell, rent or trade any of the information above, and we do not share it with advertisers. We would disclose what we hold only where the law requires it, and then only what we hold, which for a call's content and for your foenbook is nothing readable.
foen is a telephone. It is not directed at children under thirteen, has no features aimed at them, and collects no personal details from anyone.
Calls and foenbooks are encrypted as described in section 4. Connections to the server use HTTPS. The server keeps only what section 3 lists. No system is perfectly secure, and we cannot guarantee that unauthorised access will never occur; what we can say is that the items most worth protecting are ones we cannot read.
The server is in Japan. If you use foen from elsewhere, the items in section 3 travel to and are held there.
When the service changes, this page changes with it, and the date at the top is updated. Continuing to use foen after a change means you accept the changed policy.
Questions about this policy go through the contact page.