Privacy Policy
Phantom is built around a simple principle: your device does the work, not our servers — because we don't have any. This policy explains, plainly, what Phantom does and doesn't do with your information.
On This Page
Phantom is a voice and text messaging app that works entirely over Meshtastic-compatible LoRa mesh radio hardware, without cellular service, Wi-Fi, or the internet. There is no Phantom account, no sign-up, and no company server that your messages, voice, or identity ever pass through. Everything Phantom needs to function is generated and stored locally, on your device.
Phantom does not ask for your name, email address, phone number, or any other personal identifier to use the app. Your identity within Phantom — your callsign and a locally generated cryptographic identity key — is created entirely on your device the first time you open the app, and is never transmitted to us because there is no "us" to transmit it to. One Island LLC does not operate any backend service that Phantom communicates with during normal use.
The following is stored locally on your device only, and never leaves it unless you explicitly export or share it:
None of this data is backed up to iCloud, Google Drive, or any other cloud service by Phantom itself, and none of it is sent to One Island LLC.
Phantom uses your device's microphone for two purposes: recording your voice print during setup, and capturing what you say when you hold to talk to send a voice capsule. Both your voice recording and its transcription happen entirely on-device, using Apple's on-device speech recognition. Your raw voice audio is not transmitted anywhere — Phantom converts what you say into text, transmits the text over the mesh network, and reconstructs audio using your cloned voice print on the receiving device. No audio recording of your voice is ever sent over the mesh network or to One Island LLC.
Phantom uses Bluetooth to connect to your own Meshtastic-compatible mesh radio hardware. This connection is used to send and receive mesh packets and is not used for any other purpose, such as tracking nearby devices unrelated to the mesh network.
Phantom's mesh map displays position data reported by mesh nodes themselves (including your own, if your node has a GPS fix), so you can see where other nodes on your mesh are located. This position data comes from the mesh radio hardware, travels over the mesh network the same way any other node data does, and is not collected or transmitted by One Island LLC.
Your voice print never transmits automatically to anyone. To let a specific contact hear messages from you in your actual cloned voice, you export a voice capsule file and share it with them directly — over AirDrop, cable transfer, or another method you choose. This is a deliberate, manual action you take for each contact; Phantom does not upload voice prints anywhere or share them without your explicit action.
Because Phantom operates over Meshtastic radio hardware, it's worth being precise about what "private" actually means on a mesh network, since this differs from a normal texting app:
In short: treat the Primary/Broadcast channel like an open radio channel, because that's what it is. Direct messages to paired contacts are protected by your mesh hardware's own encryption.
Phantom does not sell your data, does not share it with advertisers, and does not include third-party analytics or advertising SDKs. Phantom uses on-device Apple frameworks (Speech recognition, on-device text-to-speech/voice synthesis) that run locally and do not transmit your data to Apple or anyone else as part of Phantom's use of them.
Because Phantom stores your data locally rather than on a server, the security of your information depends significantly on the security of your own device. We recommend using your device's standard security features (passcode, biometric lock) to protect locally stored data. Direct messages between paired contacts rely on your mesh hardware's own encryption, as described in Section 8.
Your data stays on your device for as long as you keep the app installed, or until you delete it yourself. Phantom's Profile screen includes a Delete Everything option that permanently erases your identity key, voice print, contacts, and message history from your device. Because nothing is stored on a server, deleting this data on-device is complete — there is no separate copy elsewhere for us to delete, since one was never created.
Phantom is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Since Phantom does not collect personal information on any server in the first place, this is largely inherent to how the app is built, not a separate policy layered on top.
If this policy changes, we'll update the effective date at the top of this page. Since Phantom has no way to contact you directly (no account, no email on file), we encourage checking this page periodically if you'd like to stay current.
Questions about this policy or Phantom's data practices can be sent to One Island Tech via the contact page.