Cevix
Privacy Policy

Privacy Policy

Effective date: 2 October 2026

Cevix is a self-hosted VoWiFi SIM gateway. Your gateway, and the data on it, run on hardware you control. The maintainer operates no central server that holds your content, and does not collect your calls, texts or line data.

1. Self-hosted: your data stays with you

  • Your gateway and its data — SIMs, messages, call history and settings — live on hardware you control.
  • The maintainer never handles or keeps this content. There is no cloud account to sign up for, and none is required.
  • Because Cevix is self-hosted, whoever runs the gateway is in control of the data on it; please protect that machine and its backups.

2. What the gateway stores

  • Local data may include SIM identifiers, phone numbers, SMS and call metadata and content, notification-channel credentials, phone push tokens and push-relay grants, subscription URLs and a SIM PIN.
  • Runtime directories and credential-bearing files are owner-only by default, but the host's storage and backups still need your protection.
  • The carrier's authentication happens inside the SIM chip; Cevix never reads or stores the SIM's keys.

3. The phone app

  • The app connects to your own gateway, authenticating with a token the gateway issues when you first sign in; for push notifications it also registers the phone's push token with the push relay (see section 4).
  • The phone keeps your gateway address, that connection token, its push-relay registration and grants, and your preferences.
  • The phone does not keep your admin password — after sign-in only the token is kept, not the password.
  • Your messages, call history and line content live on your gateway; the app fetches them from it when needed.

4. Push notifications

  • When a call or text arrives on your line, your gateway sends a push notification: by default it goes first through the maintainer's push relay, then to Apple's push service (APNs) or Google's push service (FCM), and finally to your phone to wake or alert the app.
  • So you can see at a glance who is calling or texting, the notification includes which line it is (your number), the kind of event (call, text, missed call, voicemail, and so on), the other party's number, and a preview of a text message's content. Full message and call history stays on your gateway; the app fetches it from there.
  • The relay keeps the device push token needed to deliver the notification, and the grant that pairs your phone with each gateway (kept as a hash); it forwards the notification to Apple or Google and does not store your message content or numbers.
  • The notification passes through Apple's and Google's push services, which handle it under their own terms.
  • Push is off by default. You can turn it off entirely or per event, but there is no option to send a push without its content — if a message must not leave your gateway, turn off push for the text event.

5. Demo mode

  • The app includes a demo mode that uses fictional sample data and needs no account.
  • Demo mode may connect to a demonstration gateway run by the maintainer, which holds only fictional lines, messages and calls and, like any server, keeps ordinary connection records (such as the connecting IP address and device name). If it cannot be reached, the app uses built-in sample data and connects to nothing.
  • Demo mode involves none of your real numbers or data — it is there for trying the app before you have a gateway, or for app review.

6. Outbound connections

  • Cevix connects out only for the carrier/IMS calling and texting you configure, eSIM profile downloads, software and dependency installation, and explicit update checks.
  • If you set up notification channels (such as Telegram or a webhook) or subscription URLs, the related data goes to the destinations you choose. These are connections you configure and control.
  • When you reach your own gateway from outside with Cevix Link, the connection is end-to-end encrypted.

7. No ads, tracking or selling of data

  • Cevix has no product analytics and no telemetry.
  • There are no ads and no third-party analytics or tracking SDKs.
  • We do not sell your data.

8. Diagnostics and support

  • When you generate a support bundle to ask for help, known identities, credentials, URLs, activation codes and cryptographic material are redacted automatically — but please review a bundle yourself before sharing it.

9. Deleting your data

  • You can delete the data on your gateway at any time. Removing the data directory with uninstall --purge is irreversible unless you have a backup.

10. Children's privacy

Cevix is a technical tool for adults managing their own phone lines. It is not directed to children, and we do not knowingly collect personal information from children.

11. Changes to this policy

If this policy changes, we will update the effective date at the top of this page.

12. Contact us

If you have any questions about this policy, email privacy@cevix.tech.