Privacy Policy
Last updated: 23 September 2026
CallVault ("the app") is a personal call-recording app published by Ahsan Mahmood ("we", "us"). This policy explains what the app stores, where it goes, and the choices you have. Questions: aoneahsan@gmail.com.
In short
- Your recordings and call details are stored on your device first. Recording, playback, search, notes and export work with no connection; CallVault still needs one now and then to check for a required update.
- Cloud backup is optional and stays off until you sign in and turn it on. When on, audio goes to our FilesHub storage and call details to our Supabase database — both operated by us to back up your data for you.
- We show no ads, use no analytics SDKs, and use no advertising identifier.
- Data sent for backup travels over HTTPS. We do not sell your data.
What the app stores
- Call recordings (audio) you make with the app.
- The phone number of the other party on the call, and a contact name if your device matches one.
- Notes you add to a recording.
- Basic technical details per recording: date, time, duration, file size, direction (incoming/outgoing), device label, and SIM slot.
We do not collect your location, your contacts list, your messages, photos, health or financial data, or any advertising identifier.
Where your data goes
- On your device: recordings are kept in CallVault's private app storage that other apps can't read; call details are kept in a local database. This stays on your device unless you enable backup.
- If you enable backup: audio is uploaded to our FilesHub storage, and call details are synced to our Supabase database, scoped to your account. These are our own services acting as your storage and processor — not third-party controllers — and access is over HTTPS.
Plans, households and administrator access
A plan sets how much private cloud backup your account gets. Recording, import, playback, search, notes, favorites and export are free on every plan.
When you buy a plan, a CallVault administrator applies it to your account. We store the plan you are on, the date it was applied and by whom, the date it ends, and an administrator's note about it. Administrators keep an audit log of changes like these: who made the change, what it changed, and the values before and after. It means the plan on your account can be traced back to the person who granted it.
A CallVault administrator can see which plan your account is on, when it ends, who applied it, how much cloud storage the account is using, and the household it belongs to. An administrator can open the audio you backed up to CallVault's servers. Those files are private: only you and a CallVault administrator can reach them, and there are no public links to recordings. The audit log above records privileged changes an administrator makes; it is not a record of every time a file is opened. That distinction matters.
Paying happens off-site, at https://aoneahsan.com/payment. Nothing is sold inside the Android app. That page shows account details for paying the developer directly and processes no payment itself; CallVault never receives or stores card or bank details.
Free accounts help pay for themselves. We may use content from free accounts to improve and train the features we build. Content in a paid plan is not used this way without your explicit consent. You can object by email to aoneahsan@gmail.com.
The Family plan is held by a household. We store the household's name, how many seats it has, the account that owns it, each member account and the date it joined, and for each pending invitation the address it was sent to, who sent it and when it expires. An invitation expires 7 days after it is sent. The owner counts as one of the members.
A household shares the plan. It never shares recordings. Your audio, your notes and your call details stay in your own account, and no other member of the household can open them.
Leaving a household, or being removed from one, ends the plan share and touches no recording. Your limits go back to your own plan, or to Free, immediately. New backups pause at the lower limit, and nothing already stored is deleted. The owner cannot leave. The owner can close the household instead, which ends every membership in it and leaves every member's recordings exactly where they are. Closing a household does not end the owner's own plan, which runs to its end date on the owner's account.
Profile, in the app or the web library, shows the plan you are on and the date it ends. Leaving a household is on Profile too. If your account is over a limit, you can export a recording and then delete it everywhere; that frees its space, and a paused backup can then resume.
Permissions and why
Each permission below does one job. Capture setup, inside the app, shows which of the recording permissions are allowed and what to do about the ones that are not.
| Permission | Why |
|---|---|
Microphone (RECORD_AUDIO) | Record the audio of your own calls. |
Phone state (READ_PHONE_STATE) | Detect when a call starts and ends, and its direction, so recording is automatic. |
| Foreground service + microphone service | Keep recording while the screen is off, with an ongoing notification. |
| Notifications | Show the live recording notification and backup status, the reminder to reopen CallVault after a restart, and an update-required notice. |
Run after restart (RECEIVE_BOOT_COMPLETED) | Remind you to open CallVault after the phone restarts, because Android does not let it resume recording on its own. |
| Ignore battery optimizations | Ask Android not to stop the recorder mid-call. This one is a request, and you can refuse it. |
| Modify audio settings | Turn the speaker on for a call, when you switch that setting on. |
| Install packages | Open the Android installer when a verified update is ready. Android asks your permission for this once. |
| Biometric or fingerprint | Unlock the optional app lock with your fingerprint, face or device PIN. Biometric data never leaves the phone. |
| Wake lock | Keep the phone awake long enough for the background job to finish uploading, syncing and tidying up. |
| Internet and network state | Reach the backup you turned on, apply the Wi-Fi-only rule, and check for a new version. |
| Write to storage on Android 9 and older | Save an export to your Downloads folder. Newer Android versions do not need it. |
| Accessibility service, optional ("Call monitoring aid") | Learn when a window opens or comes to the front, which keeps CallVault awake for the start and end of a call. It cannot see what is on your screen, does not read screen content, cannot tap or swipe for you, and cannot unlock call audio Android restricts. It is off unless you turn it on in Android's accessibility settings. |
Some of these are yours to decide. The app lock is optional, the speaker setting is optional, the accessibility assist is optional, and the battery exemption is a request Android lets you decline. Refusing the battery exemption can let Android stop the recorder during a call. Capture setup lists that as something you can fix without leaving the app. Open Capture setup whenever a call did not record.
Sharing
We do not sell your data and do not share it with third-party advertisers or analytics providers. Data goes only to the storage services above, which we run to provide backup to you. We may disclose data only if required by law.
Your choices and deletion
- Use the app without an account. Leave private cloud backup off and no recording, note or call detail leaves the phone. CallVault still needs a connection now and then to check for a required update; after a set number of days without one (14 by default), new recording pauses until it connects once.
- Delete any recording in the app, from this phone only or everywhere. Deleting it everywhere cannot be undone. It frees that recording's cloud space as each of its files is removed.
- Delete your account and everything backed up with it. It cannot be undone, so export anything you want to keep first. Open Profile, in the app or the web library, or email aoneahsan@gmail.com. The steps are on the Data Deletion page.
- Deletion is finished only when every cloud file that belongs to your account is gone. If you started it in the app, it shows you progress until then.
- Deleting your account removes your household membership as well. If you own the household, it is closed, every membership in it ends, and the recordings that belong to the other members are left exactly where they are. If you are a member of someone else's household, your seat is freed and the household continues without you.
Recording responsibly
CallVault is for recording your own calls. Recording laws vary; you are responsible for getting any consent required where you are. This is general information, not legal advice. The app shows a live banner and a persistent notification whenever it is recording.
Children
CallVault is intended for adults (18+) and is not directed to children.
Security
Backup traffic is HTTPS only (cleartext is disabled). Recordings stay in the app's private storage on your device. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your data.
Changes
We may update this policy; the "Last updated" date above will change to reflect material updates.
Contact
Ahsan Mahmood · aoneahsan@gmail.com · https://callvault.aoneahsan.com