Privacy Policy for the MikoTalk iOS Application

Effective date: August 20, 2026
Version: 1.0

1. General provisions

This Privacy Policy explains how information is processed when the MikoTalk mobile application for iOS (the “Application”) is used.

The Application is developed by:

MIKO LLC
Taxpayer Identification Number: 7735518433
Primary State Registration Number: 1067746410907
Registered address: Premises 1/5, 8 Yunosti Street, Zelenograd, Savelki Municipal District, Moscow, 124536, Russian Federation
Email: info@miko.ru
Website: https://www.mikopbx.com/

The Application is intended to connect to a corporate MikoPBX telephone system installed and managed by the user’s organization.

The MikoPBX system is hosted on the customer’s equipment or infrastructure. MIKO does not have routine access to the customer’s PBX, call content, contacts, call history or call recordings.

The organization operating the PBX independently determines how the data of its employees, subscribers and customers is processed and may act as an independent data controller.

2. Information processed by the Application

2.1. PBX connection information

To connect to a PBX selected by the user, the Application may process:

the address and port of the MikoPBX server;
the user’s extension number or user identifier;
passwords and authentication tokens;
SIP and WebSocket connection settings;
an automatic provisioning token or link;
a randomly generated Application instance identifier.

Credentials and connection settings are stored in the protected iOS Keychain and are transmitted only to the PBX selected by the user over a secure connection where supported and configured by the PBX administrator.

MIKO does not receive the user’s password or PBX access tokens.

2.2. Licensing information

To verify access to MikoTalk functionality, MIKO’s licensing system may receive:

the PBX registration number or license key;
a technical MikoPBX installation identifier;
the PBX network identifier;
the user’s extension number;
the client type, such as iOS;
software version and operating system information;
licensing session identifiers and status;
the IP address and technical information about the network request.

The extension number is used as a user identifier for providing Application functionality. This information is not used for advertising or for tracking the user across other applications and services.

2.3. Contacts

If permission is granted, the Application accesses contacts stored on the device in order to:

display a caller’s name during incoming and outgoing calls;
search for contacts while dialing;
match telephone numbers with contact names.

Contacts are processed directly on the device. The Application does not upload the address book to MIKO’s servers or to the customer’s PBX.

Contact permission may be withdrawn in iOS Settings.

2.4. Microphone and audio data

Microphone access is required to make and receive telephone calls.

Audio is transmitted in real time between the Application, the customer’s PBX and other call participants according to the customer’s telephone system and network configuration.

MIKO does not record, listen to or store the content of calls.

If call recording is enabled by the PBX administrator, recordings are created and stored on the customer’s PBX. The Application may play recordings made available to the user but does not independently record calls.

2.5. Camera

The camera is used only after permission is granted and is required to scan a QR code for automatic PBX connection setup.

The Application does not retain or transmit camera images to MIKO’s servers.

2.6. Directory, call history and recordings

After authentication, the Application may retrieve the following information from the customer’s PBX:

employees and extension numbers;
employee names and images;
current and completed call information;
caller and called-party numbers;
call date, time, direction and duration;
call status;
call recordings available to the user.

This information is transmitted directly between the device and the customer’s PBX. Some call history and images may be temporarily cached on the device to improve Application performance.

MIKO does not receive this information during the normal operation of the Application.

2.7. Push notifications

The Application uses Apple Push Notification service and PushKit to receive incoming calls while running in the background.

The Application sends the device token to the customer’s PBX. The PBX uses this token to send notifications through Apple’s infrastructure.

An incoming-call notification may contain:

the caller’s name and telephone number;
the recipient’s extension number;
a call identifier;
technical SIP connection and telephone-channel identifiers.

Apple processes the device token and notification in accordance with the Apple Privacy Policy. The use of APNs may involve processing in countries where Apple or its service providers operate infrastructure.

MIKO does not use push notifications for advertising or marketing messages.

2.8. Diagnostic information

The Application may maintain a technical diagnostic log on the device containing:

dates and times of technical events;
device model and iOS version;
authentication and connection status;
SIP registration results;
incoming and outgoing call events;
audio-route information;
anonymized, shortened or hashed technical identifiers;
error messages.

The diagnostic log is not automatically transmitted to MIKO.

MIKO receives diagnostic information only when the user manually exports the log and sends it to MIKO Support. In this case, the information is used solely to diagnose the issue, respond to the support request and improve Application reliability.

Before sending a log, the user should make sure that it does not contain information the user does not wish to disclose.

3. Purposes of processing

Information may be processed to:

connect the user to the selected PBX;
authenticate the user and maintain the session;
make and receive calls;
display caller information;
provide call history and access to recordings;
deliver incoming-call notifications;
verify licensing and feature availability;
maintain security and prevent misuse;
diagnose errors at the user’s request;
comply with legal obligations.

Processing is based on the user’s consent, the need to provide requested functionality, performance of an agreement or applicable license terms, and other grounds permitted by applicable law.

4. Disclosure to third parties

MIKO does not sell or rent personal information.

Information may be processed by or disclosed to:

the organization that owns or operates the user’s PBX;
Apple for delivery of VoIP push notifications;
MIKO’s infrastructure providers to the extent required to operate the licensing system;
government authorities where required by law;
MIKO Support when the user voluntarily submits a support request or diagnostic material.

The Application does not contain advertising SDKs and does not use third-party analytics systems to track users across applications or websites.

5. Retention and deletion

Credentials and connection settings are retained on the device until the user signs out, deletes the relevant information or changes the settings. Ordinary Application caches are removed when the Application is deleted, subject to iOS system behavior.

Information stored on the PBX is retained according to the settings and policies of the organization operating the PBX. Requests concerning deletion of call history, recordings, employee information or other PBX data should be directed to the PBX administrator or the user’s employer.

MIKO retains licensing and technical information for as long as necessary to:

maintain an active licensing session;
verify the right to use the product;
maintain security;
handle support requests and disputes;
comply with legal obligations.

Information processed by Apple is retained in accordance with Apple’s policies.

6. Information security

MIKO applies reasonable organizational and technical safeguards, including:

use of the protected iOS Keychain;
secure network connections;
minimization of transmitted information;
access controls;
local storage of diagnostic data;
exclusion of passwords and authentication tokens from diagnostic logs.

No storage or transmission method can guarantee absolute security. The security of the PBX connection also depends on the settings, certificates, network and actions of the customer’s PBX administrator.

7. User rights

The user may:

request information about the processing of their data;
request correction, restriction or deletion of data;
withdraw previously granted permissions;
disable access to contacts, microphone or camera in iOS Settings;
stop using the Application;
submit a complaint to a competent supervisory authority.

Requests concerning information stored on the customer’s PBX should be addressed to the organization or administrator operating that PBX.

Questions concerning licensing, the Application or information submitted directly to MIKO may be sent to info@miko.ru.

Deletion or restriction of certain information may prevent the corresponding Application functionality from working.

8. Children

The Application is primarily intended for corporate telephony and is not specifically directed at children.

If the Application is used by a minor, the organization providing access to the PBX and the minor’s legal representative must ensure that an appropriate lawful basis is available.

9. Changes to this Policy

MIKO may update this Policy when the Application’s functionality, applicable law or information-processing practices change.

The current version will be published on MIKO’s website. The effective date is stated at the beginning of the document.

10. Contact information

MIKO LLC
Registered address: Premises 1/5, 8 Yunosti Street, Zelenograd, Moscow, 124536, Russian Federation
Email: info@miko.ru
Website: https://www.mikopbx.com/