Privacy Policy
Last updated: 13 November 2026
CallVault ("the app") is a personal call-recording app published by Ahsan Mahmood ("we", "us"). This policy explains what the app stores, where it goes, and the choices you have. Questions: aoneahsan@gmail.com.
In short
- Your recordings and call details are stored on your device first. Recording, playback, search, notes and export work with no connection; CallVault still needs one now and then to check for a required update.
- Cloud backup is optional and stays off until you sign in and turn it on. When on, audio goes to our FilesHub storage and call details to our Supabase database — both operated by us to back up your data for you.
- We show no ads. We count how CallVault is used with Google Analytics, Amplitude and Microsoft Clarity, and never send them your recordings, notes, phone numbers or contact names.
- Data sent for backup travels over HTTPS. We do not sell your data.
What the app stores
- Call recordings (audio) you make with the app.
- The phone number of the other party on the call, and a contact name if your device matches one.
- Notes you add to a recording.
- Basic technical details per recording: date, time, duration, file size, direction (incoming/outgoing), device label, and SIM slot.
CallVault does not ask you to provide your location, contacts list, messages or photos. Recordings and notes may contain personal or sensitive details you choose to capture. CallVault does not ask you to enter card or bank details into a plan request. It does store the plan price and request details described below.
Where your data goes
- On your device: recordings are kept in CallVault's private app storage that other apps can't read; call details are kept in a local database. These recordings and call details stay on your device unless you enable backup. Optional Speak processing has its own choice before a dictated clip or transcript leaves your device.
- If you enable backup: audio is uploaded to our FilesHub storage, and call details are synced to our Supabase database, scoped to your account. These are our own services acting as your storage and processor — not third-party controllers — and access is over HTTPS.
- If you choose Speak processing: a Speak clip you choose to process goes to private FilesHub storage even if private cloud backup is off. The planned server transcription route may send the clip audio to Groq; the note-proposal route sends transcript text to Anthropic, or to OpenAI when Anthropic isn't available. The consent screen names the one used before you send anything. FilesHub supplies the account route. CallVault's server makes the provider request. Typed notes need no AI. Device or browser speech recognition stays absent until it is configured and measured, then disclosed for the request. CallVault records Speak metadata, transcripts and the proposal in its Supabase database under your account.
How we count usage
The app and the website tell Google Analytics and Amplitude which screens were opened and which features were used, along with the app version, device or browser type, rough region and a random or account ID. This helps us see what works and what breaks.
Microsoft Clarity records how people move through our public pages: the landing page, walkthrough and legal pages. It never runs once you're signed in, or on any page showing a recording.
None of these services receive your audio, notes, phone numbers, contact names, or a recording's file name. Counting is on for everyone, and we tell you once in a bar at the bottom of the screen.
The Android app declares Android's advertising ID permission, which our analytics can read to count installs. We don't show ads or use it to target you.
CallVault news
If you ask for news on our website, we keep your email address on a list held by FilesHub, which sends the emails. We use it only for CallVault news. Every email has an unsubscribe link. The form uses Cloudflare Turnstile to keep bots out, which checks your browser when you use it.
Invite links
If you use someone's invite link or code, we record that they invited you, so their reward can be counted. They see how many people joined, never your name or email. After you delete your account we keep a one-way fingerprint of your email address, so the same address can't be invited twice. It can't be turned back into your address.
Plans, households and administrator access
A plan sets how much private cloud backup your account gets. Recording, import, playback, search, notes, favorites and export are free on every plan.
When you submit a paid-plan request, we store your account, requested plan and period, Family seat count where relevant, the price per seat and total in USD at the time of the request, its status and its timestamps. A request may be pending, confirmed, rejected or canceled. An administrator records a short reason when rejecting a request, or a reference to independently verified payment when confirming one. The request alone does not charge you or grant a plan.
After an administrator confirms payment, we store the grant and its end date, who applied it and an administrator's note. For each request event, administrators keep an audit log of changes, including creation, cancellation, rejection and confirmation: the action, target request identifier, time and selected before-and-after values. The log can include the plan, seat count, total and status. It lets us trace the grant to the confirmation; it is not a record of every time an administrator opens a backed-up file.
A CallVault administrator can see which plan your account is on, when it ends, who applied it, how much cloud storage the account is using, and the household it belongs to. An administrator can open the audio you backed up to CallVault's servers. Those files are private: only you and a CallVault administrator can reach them, and there are no public links to recordings. The audit log above records privileged changes an administrator makes; it is not a record of every time a file is opened. That distinction matters.
Paid-plan requests start after you sign in on the CallVault website. An administrator sends payment instructions privately, verifies payment independently and confirms the request before the plan becomes active. CallVault does not publish payment details on a plan page or ask you to put card or bank details in a request. We keep the price and status records described above; the request itself does not process a payment.
We never use your recordings, notes or call details to train anything, on any plan.
The Family plan is held by a household. We store the household's name, how many seats it has, the account that owns it, each member account and the date it joined, and for each pending invitation the address it was sent to, who sent it and when it expires. An invitation expires 7 days after it is sent. The owner counts as one of the members.
A household shares the plan. It never shares recordings. Your audio, your notes and your call details stay in your own account, and no other member of the household can open them.
Leaving a household, or being removed from one, ends the plan share and touches no recording. Your limits go back to your own plan, or to Free, immediately. New backups pause at the lower limit, and nothing already stored is deleted. The owner cannot leave. The owner can close the household instead, which ends every membership in it and leaves every member's recordings exactly where they are. Closing a household does not end the owner's own plan, which runs to its end date on the owner's account.
Profile, in the app or the web library, shows the plan you are on and the date it ends. Leaving a household is on Profile too. If your account is over a limit, you can export a recording and then delete it everywhere; that frees its space, and a paused backup can then resume.
A confirmed plan purchase is final, and payments already made are not refunded. A plan confirmed through a manual request has an end date and does not renew automatically. Your Profile shows the active plan and its end date.
Permissions and why
Each permission below does one job. Capture setup, inside the app, shows which of the recording permissions are allowed and what to do about the ones that are not.
| Permission | Why |
|---|---|
Microphone (RECORD_AUDIO) | Record the audio of your own calls. |
Phone state (READ_PHONE_STATE) | Detect when a call starts and ends, and its direction, so recording is automatic. |
| Foreground service + microphone service | Keep recording while the screen is off, with an ongoing notification. |
| Notifications | Show the live recording notification and backup status, the reminder to reopen CallVault after a restart, and an update-required notice. |
Run after restart (RECEIVE_BOOT_COMPLETED) | Remind you to open CallVault after the phone restarts, because Android does not let it resume recording on its own. |
| Ignore battery optimizations | Ask Android not to stop the recorder mid-call. This one is a request, and you can refuse it. |
| Modify audio settings | Turn the speaker on for a call, when you switch that setting on. |
| Install packages | Open the Android installer when a verified update is ready. Android asks your permission for this once. |
| Biometric or fingerprint | Unlock the optional app lock with your fingerprint, face or device PIN. Biometric data never leaves the phone. |
| Wake lock | Keep the phone awake long enough for the background job to finish uploading, syncing and tidying up. |
| Internet and network state | Reach the backup you turned on, apply the Wi-Fi-only rule, and check for a new version. |
| Write to storage on Android 9 and older | Save an export to your Downloads folder. Newer Android versions do not need it. |
| Accessibility service, optional ("Call monitoring aid") | Learn when a window opens or comes to the front, which keeps CallVault awake for the start and end of a call. It cannot see what is on your screen, does not read screen content, cannot tap or swipe for you, and cannot unlock call audio Android restricts. It is off unless you turn it on in Android's accessibility settings. |
Some of these are yours to decide. The app lock is optional, the speaker setting is optional, the accessibility assist is optional, and the battery exemption is a request Android lets you decline. Refusing the battery exemption can let Android stop the recorder during a call. Capture setup lists that as something you can fix without leaving the app. Open Capture setup whenever a call did not record.
Sharing
We do not sell your data or share it with advertisers. The services named under "How we count usage" receive only what that section lists. Other data goes to the private storage services described above when you enable backup or choose Speak processing. If you separately choose Speak processing, the named transcription and note-proposal processors may also receive the clip or transcript as described under Where your data goes. White-label requests and licence checks go to our licensing service, as described under White-label buyers and licence checks. We may disclose data only if required by law.
Your choices and deletion
- Use the app without an account. Leave private cloud backup off and no recording, note or call detail leaves the phone. CallVault still needs a connection now and then to check for a required update; after a set number of days without one (14 by default), new recording pauses until it connects once.
- Delete any recording in the app, from this phone only or everywhere. Deleting it everywhere cannot be undone. It frees that recording's cloud space as each of its files is removed.
- Delete your account from Profile in the app or the web library, or email aoneahsan@gmail.com. This cannot be undone, so export anything you want to keep first. Account deletion starts removal of its backed-up data and deletes its plan-request records. The steps are on the Data Deletion page.
- The administrator audit log can retain entries after account deletion, including an action, request identifier, time, plan, status or amount. Deleting your account clears its ID as the actor in request and cancellation entries, but grant and limit-change entries can still hold that account ID in their target or before-and-after values. Administrator actor IDs and request identifiers can also remain.
- Deleting your account removes your household membership as well. If you own the household, it is closed, every membership in it ends, and the recordings that belong to the other members are left exactly where they are. If you are a member of someone else's household, your seat is freed and the household continues without you.
Recording responsibly
CallVault is for recording your own calls. Recording laws vary; you are responsible for getting any consent required where you are. This is general information, not legal advice. The app shows a live banner and a persistent notification whenever it is recording.
Children
CallVault is intended for adults (18+) and is not directed to children.
Security
Backup traffic is HTTPS only (cleartext is disabled). Recordings stay in the app's private storage on your device. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your data.
White-label buyers and licence checks
If you ask about, buy or renew a white-label licence, we keep your name, email, company, domain, country if you give it, your message and the order, to issue, verify and renew the licence. Our licensing service processes these details for us. When card payment is open, the payment provider processes the payment on its own page.
The white-label pages and the licence check page load prices, quotes and licence results from our licensing service directly in your browser, so your IP address and the request reach that service. The request forms load a Cloudflare Turnstile check, which also receives your IP address.
A licence check shows only public details: the licensee's name, its domains, the licence status and its dates. It never shows an email, a phone number or a price.
Licence, renewal, buyout and custom-work payments are final, and payments already made are not refunded.
Changes
We may update this policy; the "Last updated" date above will change to reflect material updates.
Contact
Ahsan Mahmood · aoneahsan@gmail.com · https://callvault.aoneahsan.com