/call-me — Privacy Policy

Effective: November 1, 2026

/call-me lets your own AI agents call and text your phone (iOS and Android). This policy describes what the service stores and why. Short version: there are no user accounts, no ads, no tracking, no sale of data, and nothing is shared except with the services below.

What we collect

• Your /call-me number — a random number the app assigns on first launch. It is the only identifier for you; we never ask for your name, email, or real phone number.
• Push tokens and device name — the push token for your platform (Apple APNs on iOS, Firebase Cloud Messaging on Android) so calls and texts can reach your device. On Android, if push is unavailable the app instead keeps a connection open to our own server and no third party is involved.
• Messages and call transcripts — texts between you and your AI agents, the question an agent asked, and the transcript of what was said on a call. These exist so your history tab works and so your agent receives your answer.
• Voice audio — processed in real time during a call to synthesize speech and transcribe your reply. Our servers do not record or store audio; only the text transcript is kept. The voice provider, ElevenLabs, keeps what it processes under its own terms (see below).
• Your App Store subscription identifiers — access to /call-me is an auto-renewable subscription bought in the app. Apple sends us a signed receipt, and we keep the parts that say whether it is still active: the transaction identifier Apple assigns to the subscription, the product identifier, the renewal date, and whether it is a trial. We never see your name, your Apple ID, or your payment details — Apple handles the payment and tells us nothing about it. The transaction identifier is what lets a reinstall get the same /call-me number back.
• Your Google Play subscription identifiers (Android) — when you subscribe on Android, the app sends us the purchase token Google Play issued, and we ask Google whether it is a live /call-me subscription. We keep the token, the order identifier, the plan, the renewal date and whether it is a trial. We never see your name, your Google account or your payment details.
• Feedback you send — if you write to us from the Feedback tab, the text and your /call-me number are delivered to the developer's own phone so he can read and answer it. Nothing else about you is attached, and it is used only to answer you and improve the app. Deleting your number deletes the conversation.
• Anonymous usage analytics — only after you accept the data-sharing disclosure, the app sends first-party usage events: which screens were opened, and the steps of the subscription screen (viewed, purchase tapped, purchase completed, cancelled or failed, restore). Each event carries the app version, the platform, the build type (store, beta or development) and a random session identifier that is generated fresh at every launch and never stored. It contains no device or advertising identifier, no /call-me number, no messages and nothing else that identifies you, so it is not linked to your identity and cannot connect one session to the next. It is not used for tracking or advertising and is not shared with anyone. The developer's server keeps the country the request came from, as reported by our network provider; the IP address itself is used only to tell the developer's own and Apple review traffic apart from real use and is never stored. Events are deleted after 45 days.
• Apple Ads attribution (iOS, from version 1.6.4) — after you agree on the first-launch screen, the app asks Apple's AdServices framework once for an attribution token and sends it, with a random ID created for this install, to RevenueCat (below). Purchases you make in the app carry the same random ID, so the developer can see how many subscriptions came from each Apple Ads campaign and keyword. The token contains no name, Apple ID, device identifier or advertising identifier, the random ID is not your /call-me number, and none of it is used for tracking you across other companies' apps or websites.

How it is used

Solely to operate the service: ringing your phone, delivering texts, and returning your spoken answers to your own AI agents, plus counting which of our own ad campaigns led to subscriptions (see Apple Ads attribution above). We do not use your data to target ads, for profiling, or for training AI models, and we never sell it.

AI services & third parties

The app asks for your explicit consent on first launch, before any data leaves your device. When you use /call-me, the following processors are involved:

• ElevenLabs — turns the agent's text into speech and transcribes your voice in real time during a call, so it receives the text read to you and the audio of your reply. ElevenLabs keeps the text and audio it processes for a period set by its own privacy policy; our plan does not offer zero retention.
• Anthropic Claude Haiku, via Amazon Bedrock — if you speak while your agent is still working on its next line, the transcript of what you said and of the call so far goes to Claude Haiku, which writes a one-sentence reply (for example, that your agent is still working on it). It only relays and never answers for your agent; what you said also reaches your agent with your next answer. Amazon Bedrock does not store these prompts or use them to train models.
• Amazon Web Services — hosts our servers. Its Polly and Transcribe services are our backup voice provider; they process audio transiently and do not store it.
• The built-in demo agent — the demo call on our website simply reads your words back to you. It does not send what you say to any language model.
• The AI agents you connect — your transcribed replies and the messages you send are delivered to the agents you personally gave your /call-me number to (for example a coding assistant running on your own computer). They are under your control, not ours.
• Apple Push Notification service (iOS) — delivers call and message pushes to your device.
• Firebase Cloud Messaging, Google (Android) — delivers call and message pushes to your device. The push carries the caller's label and the first line of the question so your phone can show who is calling.
• Apple (App Store) — sells and renews the subscription, takes the payment, and notifies us when it renews, lapses or is refunded. Apple is the merchant here, not a processor acting for us, and its own privacy policy covers what it collects.
• RevenueCat — a subscription analytics service. It receives the attribution token and random install ID described above, asks Apple whether an Apple Ads ad led to the install and which campaign, and receives copies of Apple's subscription notifications from our server (product, trial, renewal, cancellation and refund events, with Apple's transaction identifier and that random ID). It never receives your /call-me number, messages, transcripts or voice. We use it only to count subscriptions and revenue per ad campaign.
• Google (Google Play) (Android) — sells and renews the subscription and takes the payment. We send Google the purchase token to check that it is valid and to acknowledge it. Google is the merchant here, and its own privacy policy covers what it collects.
• Apple, for refund requests — only if you opt in — if you turn on Help with refund requests in the app and later ask Apple for a refund, we tell Apple that your subscription was delivered and working, and that we would prefer the refund be declined. Apple uses this to review the request and still makes the decision. We send nothing else: no messages, transcripts or your /call-me number. It is off unless you turn it on, and you can turn it off at any time on the My Number tab; after that we send nothing. Apple handles this data under its privacy policy, and you can ask Apple for access to it or deletion of it at privacy.apple.com.

These providers act as data processors bound by their service terms and data-processing agreements, providing protection of your data equal to this policy. They do not use your data for advertising or to train AI models. We never sell your data, and never share it with anyone else.

Retention & deletion

Data is kept only while your number exists. In the app, My Number → Delete my number & all data permanently deletes your number, device tokens, messages, transcripts, call history, and the stored subscription identifiers from our servers, immediately. That does not cancel the subscription itself — cancel it in iOS Settings or in Google Play, or the store keeps billing you. RevenueCat's subscription records are filed under the random install ID, not your number; email us to have them deleted.

Security

All traffic uses TLS (HTTPS/WSS). Your /call-me number works like a phone number: anyone who has it can send you messages and ring your phone, so share it as you would a phone number. It cannot act for you: reading your history, deleting your data or moving the number needs the device credential held by the app on your phone. If someone you don't want keeps reaching you, block that sender or regenerate the number in the app.

Children

The service is not directed at children under 13 (or the equivalent minimum age in your jurisdiction).

Contact

Questions or requests: info@callmemcp.com.

Changes

Material changes to this policy will be posted at this URL with an updated effective date.