1. Introduction & Data Controller

At Cally ("we", "app"), we take your privacy and data sovereignty seriously. This policy explains what information is collected, how it is safeguarded, and your rights under Google Play Developer Policies, GDPR, and global data privacy standards.

Data Controller: Özkan Akçay / Cally Technologies

Email: support@callypro.app

Package ID: com.cally.callerid.ai

2. Core Functionality & Sensitive Permissions

Cally operates in two core system roles on Android:

Default Phone Handler (Dialer): CALL_PHONE, READ_CALL_LOG, WRITE_CALL_LOG, READ_PHONE_STATE, and ANSWER_PHONE_CALLS permissions are required for placing/receiving calls and managing call logs. Call logs remain strictly on-device in local storage and are never uploaded to our servers.

Default SMS Handler: READ_SMS, RECEIVE_SMS, SEND_SMS, and WRITE_SMS permissions are used for messaging and spam defense. Message contents are processed entirely on-device; they are never uploaded, profiled, or sold.

Contacts (READ_CONTACTS, WRITE_CONTACTS): Used to render names/avatars in incoming calls and SMS threads, allow contact management, and enable T9 dialing. Address book data is never uploaded without explicit user request.

3. Data Collection & Processing Scope

Phone Number & Auth: Processed via Firebase Auth over a TLS-encrypted connection for sign-in and license verification (this is standard secure network transport, not the "end-to-end encryption" used for messaging).
Call & SMS Content: Processed on-device only by default. One exception: when you manually enable "Live Guard", short speech clips may be sent to a server to be transcribed (see Section 4).
User Call Recordings: Standard recordings are stored strictly on local device storage. One exception: evidence recordings kept during high-risk scam calls under AI Hand-Off — those are stored both on-device and on the server, purged within 15 days (see Section 4).
Social Profile Handles (Optional): Linked IG/X/TikTok usernames are stored encrypted in Cloud Firestore and displayed only to authorized members looking up your number.
Spam & Fraud Reports: Phone number, call pattern (frequency/duration), and report category are processed for community-wide scam detection; no name or identity data is included.
Analytics & Diagnostics: Firebase Analytics & Crashlytics use a pseudonymous app-instance identifier not directly tied to your real identity. This data is de-identified but not mathematically anonymous.

4. Cally AI Guard: Scam Shield & Audio Security

Cally AI Guard is an advanced anti-fraud shield designed to detect and deter phone scammers. It has three distinct levels, each with a different data-processing scope:

Passive Monitoring (default, automatic): Acoustic indicators (speech rate, pressure cues) run entirely on-device once a call connects; unless you manually turn on Live Guard, no audio ever leaves your phone and the risk score stays at zero.
Live Guard (manually activated, its own consent screen): When you manually enable "Live Guard", the system tries to transcribe speech — on-device first; if that fails, short audio clips (a few seconds) are sent to an App Check–protected server function solely to be transcribed, and are not permanently stored. This stream processes the mixed audio from your speaker; it cannot reliably separate your voice from the caller's.
Live AI Hand-Off: Activated only when the user explicitly taps the on-screen "Guard Hand-Off" button. Caller audio is streamed via secure channels to AI speech recognition and language services (Deepgram, Google Gemini), with synthesized vocal replies generated by Cartesia/ElevenLabs.
Evidence Audio Retention: For high-risk scam calls (Hand-Off only), after playing an audible notice to the caller, a short recording may be kept. These recordings — on-device and on the server — are automatically purged within 15 days. Never used for advertising; AI models are not retrained on this data — it may only be added to the known-scam-voice fingerprint database.
Banking Shield (PACKAGE_USAGE_STATS): Detects if a financial app opens in the foreground during an active suspicious call to protect users against fraud. General app history is never monitored or uploaded.

5. On-Device Call Recording & Legal Duty

Standard call recordings remain strictly in your device local storage. They are never uploaded to Cally servers or cloud repositories.
An in-app notice is displayed prior to recording.
User Compliance: Complying with wiretapping and consent recording statutes in your jurisdiction is your sole legal responsibility. Cally Technologies disclaims liability for unauthorized recordings.

6. Cally Chat (E2E) & Anonymous Confessions

Cally Chat: Direct messages between Cally users are encrypted on your device with AES-256 and stored encrypted on our servers. We state plainly that this is NOT end-to-end encryption: the decryption key is also held server-side, so it is technically possible to decrypt messages server-side. Messages are never used for advertising or shared with third parties.
Confessions: Sent anonymously to recipients. Identity parameters are never revealed without explicit user action.

7. Social Profile Linking & Community Caller ID

Users may voluntarily link Instagram, Twitter/X, or TikTok handles:

Linked handles may be viewed by verified members querying your phone number.
You can remove these handles at any time from your Profile settings.
Account deletion permanently removes all associated social records immediately.

8. Ads & Google Play Billing

Google AdMob: Free tiers may display advertisements served via Google Mobile Ads SDK, using the Google Advertising ID (AD_ID) in compliance with Google Play terms.
Google Play Billing: All subscriptions (Pro, VIP, Elite, Premium) and Cally Coin transactions are handled by Google Play In-App Billing.
Cally never accesses or stores credit card or financial account numbers.

9. User Rights & Account Deletion (Google Play Compliance)

Data Portability: Go to Profile → "Export My Data" to obtain a full JSON export of your profile information.
In-App Account Deletion: Tap Profile → "Delete Account" to permanently and irreversibly erase your account, profile, and server records.
Web-Based Account Deletion: You can request account deletion by emailing support@callypro.app with your registered phone number. Deletions are completed within 48 hours.

10. Children's Privacy

Cally is not directed to children under 13 years of age. We do not knowingly collect personal data from children. Any inadvertently gathered data will be purged immediately upon discovery.

11. Contact & Legal Enquiries

For questions regarding our privacy practices or exercising data rights:

Developer: Cally Technologies — Özkan Akçay