Privacy Policy
Effective date: 10 June 2026 · Last updated: 10 June 2026
Caller Shield (“we”, “us”, “the app”) is a caller-identification and spam-blocking mobile application. This policy explains what data we collect, why we collect it, how we protect it, how long we keep it, and how you can delete your data.
We wrote this to be read. If anything is unclear, contact us at privacy@callershield.app. By using the app you agree to this policy and to our Terms of Service.
1. What we collect
1.1 Your phone number (required)
When you register, you verify your own phone number via a one-time SMS code. We store your number as your account identity. We never see or store your SMS messages.
1.2 Your contacts (optional, with your explicit consent)
If — and only if — you accept the in-app disclosure (“Caller Shield uploads your contacts to our servers to identify unknown callers and flag spam”) and grant the contacts permission, the app uploads:
- contact names
- contact phone numbers
- contact photos, where present — these are only the pictures saved inside your address book entries
Uploads happen over an encrypted connection in small batches, and resume rather than re-upload if interrupted. If you decline the disclosure, no contact data ever leaves your device, and the rest of the app keeps working. Contributed contact information is shown to other users only as a caller-ID display name, without revealing who contributed it.
1.3 Call information (optional)
To identify callers, the app sends the phone number of an incoming call to our servers and, if you enable call-log enrichment, the phone numbers appearing in your recent call log. Call timestamps, durations, and recordings are not collected — we have no access to the content of any call.
1.4 Spam reports
When you report a number as spam, we store the reported number, the category you chose, optional notes, and the link to your account (to prevent duplicate or abusive reporting).
1.5 Device and diagnostic data
At registration we record your device model, operating-system version, and app version, plus your IP address and the approximate country derived from it. We also store a push-notification token to deliver notifications, and receive crash reports to fix bugs. We do not collect GPS location and the app requests no location permission.
2. How we protect your data
- In transit: all communication between the app and our servers uses TLS (HTTPS). There are no unencrypted endpoints.
- At rest: data is stored in our database and our private storage with encryption at rest. Contact photos are kept in private storage that is never publicly readable; they are served only through our authenticated API.
- Access control: production credentials are held in a secret manager; administrative access is separately protected; user endpoints require a signed token issued only after phone verification.
- Abuse controls: lookups and reports are rate-limited per user and per IP, and reporting is capped daily to prevent abuse.
3. Data retention
| Data | Retained |
|---|---|
| Account (your phone number, profile) | Until you delete your account |
| Spam reports you submitted | Until you delete your account; anonymous aggregate scores persist |
| Device/diagnostic metadata | Up to 24 months |
| Crash reports | Up to 90 days |
4. Deleting your account and your data
You can delete your account directly in the app, with no email or support ticket needed:
This immediately and permanently deletes your account and your user data — your phone number, profile, spam reports, profile photo, and push-notification token. Anonymous, aggregated information that no longer identifies you (e.g. “this number was reported 7 times”) persists to protect the community.
If you no longer have the app installed, email privacy@callershield.app from any address and include your registered phone number; we verify ownership via a one-time code and complete deletion within 30 days.
5. Sharing
We do not sell data and do not share it with advertisers or data brokers. Data is shared only with:
- other Caller Shield users — only as caller-ID display names and anonymous spam scores, as described in section 1.2;
- authorities — if legally compelled by a valid request.
6. Children
Caller Shield is not directed at children under 16 and we do not knowingly collect data from them. If you believe a child has registered, contact us and we will delete the account.
7. Changes to this policy
We will post any changes on this page and update the date above. Material changes (new data types, new sharing) will additionally be announced in the app before they take effect.
8. Contact
Caller Shield
Email: privacy@callershield.app
Data protection inquiries: same address, subject line “Privacy”.