Most "anonymous" channels ask you to trust that no one will look. We built Proper Feedback so there's nothing to look at. Caller identities aren't protected behind a permission — they're never stored in a form anyone could retrieve. Here's exactly how that works.
Before a caller's phone number ever touches our database, it's run through a one-way hash with a secret key stored outside the database. We keep the hash, never the number.
The caller chooses how they want to sound — their own voice, a pitch shift, or a different voice entirely. Masking is applied before the audio is written to disk. The original recording is discarded.
The masked audio is transcribed and auto-screened for threats, doxxing, hate speech, and CSAM. Clear cases are blocked; borderline ones are held for a human moderator.
You receive the transcript, the tags, and the masked audio. You do not receive, and cannot request, a caller's identity. There is no admin setting that reveals it.
We keep the hash for one reason only: rate-limiting spam. If the same caller floods a line, we can throttle the hash without ever knowing who they are. The hash can't be reversed to a phone number, and the secret that produces it lives outside the database — so even a full database breach reveals no caller identities. We use the hash for nothing else.
All traffic runs over TLS. Stored audio and transcripts are encrypted at rest. Access is scoped to your organization.
Callers stay anonymous; recipients stay safe. Abuse is caught before it lands, with a moderation threshold you control.
We collect what's needed to run the line and nothing more. No caller identities, no original recordings, no ad trackers.
SAML SSO, SCIM provisioning, and admin audit logs on Enterprise — so you control who on your side can see what.
Set how long transcripts and audio are kept, then auto-deleted. Export anytime; delete on demand.
HIPAA, SOX, and FERPA packages, plus data-processing agreements, available for Enterprise deployments.
Because caller identities aren't stored, we can't produce them — not for you, not in response to a subpoena. We can provide the masked audio and transcript that exist; we cannot provide an identity that was never collected. The full legal detail lives in our Privacy Policy and Terms.
Reviewing us for a procurement or security assessment? We're happy to walk through the architecture and share documentation.
Contact security → Or walk the live dashboard to see the no-identity model in action.