CallShield Privacy Policy

CallShield Privacy Policy

Last updated: 5 October 2026

CallShield ("the app") is a caller ID, spam blocker and phone app for Android, developed by Mihir Kacha ("we", "us"). This policy explains what data the app uses, what leaves your phone, and the choices you have.

1. Data that stays on your phone

The app reads your contacts and call history to show caller names, your call log and blocking decisions. This data is processed only on your device. We never upload your contacts or call history to our servers.

Your block list, settings, the reports you make and the caller information the app has looked up are also stored only on your device.

2. Data that is sent to our servers

The following is sent only if you turn on "Online caller ID". You are asked during setup, and you can change it at any time in Settings > Caller ID.

a) Phone numbers you look up

What: a phone number that is not in your contacts.

When: when that number calls you, or when you search for it in the app.

Why: to check it against our spam database. Lookups are not stored with your identity, and results are saved on your phone so the same number is not checked again for 7 days.

b) Spam reports

What: the reported phone number, the label you choose (Spam, Telemarketing or Scam) and the country of the number.

When: when you report a number.

Why: to warn other users about spam callers. Other users only see the total number of reports for a number, never who reported it.

c) A random anonymous ID

What: an ID created by Firebase Authentication when online caller ID is on.

Why: to allow only one report per number per user, and to let you delete your reports. It is not linked to your name, your phone number, your email address or your Google account.

d) Offline spam list

The app downloads a list of known spam numbers for your country so that calls can be blocked without an internet connection. Downloading this list does not send any personal data, apart from the technical information (such as IP address) that any web request includes.

We do not collect your own phone number, your location, names you might type for a caller, or your advertising ID.

3. Crash reports and usage statistics

We use Google Firebase Crashlytics and Google Analytics for Firebase to find crashes and understand how features are used. They collect device and app information such as device model, Android version, app version, crash traces and app interactions, together with an app instance identifier. Advertising ID collection is turned off.

4. Permissions the app uses

- Phone, call log and contacts: to work as your phone app, show your call history and identify callers. Used only on your device.

- Call screening and default phone app roles: to identify and block unwanted calls.

- Notifications: to show incoming calls, ongoing calls and blocked-call alerts.

- Internet: for online caller ID, spam reports, the offline spam list, and crash reports.

5. Service providers

Data sent to our servers is stored and processed by Google Firebase (Cloud Firestore, Firebase Authentication, Firebase Hosting, Crashlytics and Analytics), operated by Google LLC. Data may be processed in the United States or other countries where Google operates. See Firebase privacy and security: https://firebase.google.com/support/privacy

We do not sell your data, and we do not share it with advertisers or any other third parties.

6. Security

All data is encrypted in transit (HTTPS/TLS) and encrypted at rest by Google Cloud. Access rules allow each user to read and delete only their own reports.

7. Data retention

- Spam reports are kept while they are useful for identifying spam, or until you delete them.

- The total report count for a number contains no information about who reported it.

- Crashlytics data is kept for 90 days. Analytics data is kept for up to 14 months.

- Data stored on your phone is kept until you delete it or uninstall the app.

8. Deleting your data

In the app, open Settings > Delete my online data. This immediately deletes all your spam reports and your anonymous ID from our servers, and turns online caller ID off.

Uninstalling the app removes all data stored on your phone.

If you no longer have the app, email us at the address below with the subject "Delete my data" and we will help you.

9. Your choices

- You can use the app without online caller ID. Blocking, your block list and the phone features keep working using only data on your phone.

- You can turn online caller ID on or off at any time in Settings > Caller ID.

10. Children

The app is not directed at children under 13, and we do not knowingly collect data from children.

11. Changes to this policy

If this policy changes, we will update this page and the "Last updated" date at the top.

12. Contact

If you have questions or requests about your privacy, contact us at: apexabenvadadoriya@gmail.com