Privacy Policy
Last updated: 24 June 2026
CallVault (“the app”) is a personal call-recording app published by Ahsan Mahmood (“we”, “us”). This policy explains what the app stores, where it goes, and the choices you have. Questions: aoneahsan@gmail.com.
In short
- Your recordings and call details are stored on your device first. The app works offline.
- Cloud backup is optional and stays off until you sign in and turn it on. When on, audio goes to our FilesHub storage and call details to our Supabase database — both operated by us to back up your data for you.
- We show no ads, use no analytics SDKs, and use no advertising identifier.
- Data sent for backup travels over HTTPS. We do not sell your data.
What the app stores
- Call recordings (audio) you make with the app.
- The phone number of the other party, and a contact name if your device matches one.
- Notes you add to a recording.
- Basic technical details per recording: date, time, duration, size, direction, device label, SIM slot.
We do not collect your location, contacts list, messages, photos, health or financial data, or any advertising identifier.
Where your data goes
- On your device: recordings are kept in CallVault’s private app storage that other apps can’t read; call details are kept in a local database. This stays on your device unless you enable backup.
- If you enable backup: audio is uploaded to our FilesHub storage, and call details are synced to our Supabase database, scoped to your account. These are our own services acting as your storage and processor — not third-party controllers — and access is over HTTPS.
Permissions and why
| Permission | Why |
|---|---|
Microphone (RECORD_AUDIO) | Record the audio of your own calls. |
Phone state (READ_PHONE_STATE) | Detect when a call starts/ends and its direction so recording is automatic. |
| Foreground service + microphone service | Keep recording while the screen is off, with an ongoing notification. |
| Notifications | Show the live recording notification and backup status. |
| Run after restart | Re-arm call detection after the phone restarts. |
| Ignore battery optimisations | Ask the OS not to kill the recorder mid-call. |
| Internet / network state | Only for the optional backup you turn on (and Wi-Fi-only logic). |
Sharing
We do not sell your data and do not share it with third-party advertisers or analytics providers. Data goes only to the storage services above, which we run to provide backup to you. We may disclose data only if required by law.
Your choices and deletion
- Use the app fully offline — leave backup off and nothing leaves your device.
- Delete any recording in the app (from your device, or everywhere if it was backed up).
- Delete your account and all backed-up data — see Data Deletion or email aoneahsan@gmail.com.
Recording responsibly
CallVault is for recording your own calls. Recording calls may be regulated where you live — please follow your local laws and tell people when required. The app shows a live banner and a persistent notification whenever it is recording.
Children
CallVault is intended for adults (18+) and is not directed to children.
Security
Backup traffic is HTTPS only (cleartext is disabled). Recordings stay in the app’s private storage on your device. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your data.
Changes
We may update this policy; the “Last updated” date above will change to reflect material updates.