Policy summary and compliance
RealCaller Privacy Policy
Effective Date: June 7, 2026 - Last Updated: June 7, 2026
IMPORTANT - PLEASE READ CAREFULLY
This Privacy Policy ("Policy") is a legally binding document between you ("User", "you", "your") and RealCaller ("Company", "we", "us", "our"). It governs the collection, use, storage, sharing, and protection of information when you download, install, access, or use the RealCaller mobile application ("App") on any Android device. By installing or using RealCaller you acknowledge that you have read, understood, and agree to be bound by this Policy in its entirety. If you do not agree, please uninstall the application immediately.
Introduction And Company Information
1.1 Who We Are
RealCaller is a mobile caller identification and community safety application developed and operated by RealCaller ("the Company"). Our application is designed to help smartphone users identify unknown callers, protect themselves from telecommunications fraud, and contribute to safer digital communications.
We are committed to responsible data stewardship and to operating RealCaller in line with applicable privacy, consumer protection, telecommunications, cyber-safety, and platform rules that apply to our service.
1.2 Purpose of This Policy
This Policy is intended to provide you with clear, complete, and transparent information about:
- What categories of information RealCaller collects from or about you
- The reasons and purposes for which we process that information
- How and why we use the information we collect
- With whom we share information and under what circumstances
- How long we retain information and our deletion practices
- Your legal rights as a data subject under applicable law
- How we protect your information from unauthorised access or disclosure
- How to contact us regarding privacy matters or data subject requests
1.3 Scope of This Policy
This Policy applies to users of the RealCaller Android application. It applies to information collected automatically through the App, information you voluntarily provide through in-app features, and limited identity signals processed by our backend to operate caller identification.
This Policy does not apply to third-party websites, applications, or services that may be linked to or accessible from within RealCaller. We encourage you to review the privacy policies of any third-party services you access through our App.
1.4 Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
- "Personal Data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
- "Data Subject" means the natural person to whom personal data relates.
- "Installation ID" means the anonymous Firebase Installation ID assigned to each RealCaller installation.
- "Community Report" means a voluntary fraud or spam categorisation submitted by a user regarding a telephone number.
- "Contact Name Vote" means a cleaned contact name and phone number signal contributed from a user's address book, where permitted, to help RealCaller identify the most likely public display name for a number when stronger identity signals are unavailable.
- "Manual Name Suggestion" means an optional full name typed by a user in response to a contact confirmation prompt. Manual suggestions are never displayed automatically and require matching submissions plus administrator approval.
- "Premium User" means a user who has subscribed to RealCaller Pro via Google Play Billing.
Information We Collect
2.1 Information Collected Automatically
2.1.1 Anonymous Installation ID
Upon first installation of RealCaller, our system automatically generates and assigns a unique anonymous installation ID using Google's Firebase Installation ID service. This identifier is a randomly generated alphanumeric string. It is not derived from, linked to, or correlated with your name, government identification number, financial identity credential, telephone number, email address, physical address, or any other personally identifiable information.
The Installation ID serves the following limited technical purposes:
- Associating your in-app preferences (such as ad-free subscription status) with your installation
- Enforcing the one-report-per-device limit on community spam reports to prevent abuse
- Enabling you to delete or amend your own community reports
- Supporting contact-name vote deduplication where contact sharing is enabled, so one person cannot repeatedly vote the same contact name for the same number
- Ensuring a contact is not shown again to the same installation after that user submits a manual name suggestion
We do not combine or attempt to combine the Installation ID with any other data in a manner that would identify you as a natural person. The Installation ID is reset if you uninstall and reinstall the application, or perform a factory reset of your device.
2.1.2 Incoming Call Telephone Numbers
When your device receives an incoming telephone call, RealCaller's CallScreeningService intercepts the calling party's telephone number at the operating system level, with your explicit prior consent granted through the Android default phone app permission flow. The telephone number is transmitted over an encrypted HTTPS connection to our secure backend servers for the sole purpose of performing a caller identification lookup.
We wish to be explicitly clear about what we do NOT do with incoming call numbers:
- We do not build or maintain a call log of your incoming calls on our servers
- We do not associate incoming call numbers with your Installation ID in a persistent manner
- We do not share the fact that a particular number called you with any third party
- We do not use incoming call numbers for advertising targeting or profiling
- We do not retain incoming call numbers beyond the technical caching period described in Section 5
2.1.3 App Usage Analytics
RealCaller collects limited, anonymised analytics data to help us improve the performance and reliability of our service. This data includes:
- App launch frequency and session duration (anonymised)
- Feature usage patterns (which screens are visited, not what is viewed)
- Crash reports and stack traces via Firebase Crashlytics (containing no personal data)
- Ad impression and click rates (reported in aggregate by Google AdMob)
All analytics data is collected in aggregated and anonymised form. No analytics data is linked to a specific user's identity, telephone number, or personal characteristics.
2.2 Information You Voluntarily Provide
2.2.1 Community Spam and Fraud Reports
RealCaller includes a voluntary community reporting feature that allows users to flag telephone numbers as potential sources of spam, fraud, or harassment. When you submit a community report, we collect the following information:
- The telephone number being reported
- The fraud/spam category you selected from our predefined list
- Any optional bad-review comment you submit
- Your anonymous Installation ID (to enforce the one-report-per-device-per-number limit)
- The date and time the report was submitted
Tags and comments can only be submitted after an answered incoming call within the configured time window that lasted at least one second. Comments remain hidden until the configured public threshold is reached. You can edit or delete your own comment. We do not display your identity as the reporter to other users, the reported party, or third parties.
2.2.2 Manual Number Lookup
RealCaller allows you to manually enter any telephone number into the search feature to retrieve caller identification information. When you perform a manual lookup, the telephone number you enter is processed identically to an incoming call number - transmitted securely to our servers, queried against our identification systems, and returned to your device. We do not log which specific numbers you manually search or associate manual searches with your Installation ID beyond the rate-limiting described above.
2.2.3 In-App Purchase and Subscription
If you choose to subscribe to RealCaller Pro (our ad-free premium tier), your payment is processed entirely through Google Play Billing. RealCaller does not at any point collect, process, store, or have access to your payment card number, bank account details, billing address, or any other financial information. The only payment-related data we receive from Google is:
- A confirmation that a valid subscription exists for your Google Play account
- The subscription product identifier (realcaller_remove_ads_monthly)
- The subscription expiry timestamp
- An obfuscated purchase token for validation purposes
This subscription status information is associated with your Installation ID solely to determine whether to display advertisements within the App.
2.2.4 Contacts and Community Name Signals
If you grant Contacts permission, RealCaller may read names and phone numbers saved in your device address book. Contacts are used in two ways:
- Local contact matching: to show names you have already saved on your own device
- Community name matching: where the relevant in-app setting is enabled, to upload cleaned contact name and phone number signals so RealCaller can identify the most likely name for numbers that do not have a stronger verified identity
When community name matching is enabled, RealCaller may upload the following limited contact data to our backend:
- The contact display name after cleaning and sanitisation
- The associated phone number after normalisation
- A Firebase Installation ID and voter key used for deduplication, abuse prevention, and update/delete handling
RealCaller may also show an optional contact confirmation prompt. The first prompt is delayed after installation, later prompts are spaced apart, and no more than two prompts are shown per day. If you voluntarily type a full name, we store the phone number, suggested full name, anonymous Installation ID, review status, and submission time. The same contact will not be prompted again for that Installation ID after submission. Manual suggestions remain hidden unless multiple users submit the same name and an administrator explicitly approves it. Automatic contact-sync fallback continues to use its configured matching thresholds separately.
- The time the contact signal was last synced
We use these contact signals as confidence-based votes. A name is not displayed publicly merely because one user saved it. RealCaller requires configured vote thresholds and name-token agreement before a community-derived name may be shown. Contact names are sanitised, case-normalised, and may be rechecked periodically. If a stronger verified identity is later found, that stronger identity may replace the community result.
RealCaller does not upload contact photos, email addresses, postal addresses, notes, birthdays, relationship labels, contact groups, ringtone settings, social profiles, or any other address-book fields unrelated to caller identification. You may stop future contact processing by revoking Contacts permission in Android settings or by disabling the community sharing option in RealCaller settings.
2.3 Information We Do NOT Collect
For absolute clarity and to avoid any misunderstanding, RealCaller categorically does NOT collect any of the following:
- Contact details beyond the limited name and phone number fields described in Section 2.2.4, such as contact photos, email addresses, postal addresses, notes, birthdays, relationship labels, or social profiles
- Your government-issued identity number or identity document
- Your financial identity credentials
- Your GPS location, physical address, or geolocation data of any kind
- Biometric data including fingerprints, facial recognition data, or voice prints
- The content of your telephone calls, SMS messages, or any communications
- Your email address, social media accounts, or online identity
- Your date of birth, gender, marital status, or any demographic information
- Health information, religious beliefs, political opinions, or any special category data
- Information about other applications installed on your device
- Your device's camera, microphone (outside of active calls), or storage
How Realcaller Identifies Callers
3.1 Caller Identification Process
RealCaller combines user-contributed name signals and safety information. When an incoming call is received, the following identification process occurs:
- Step 1: The calling telephone number is extracted by the Android CallScreeningService
- Step 2: The number is transmitted via encrypted HTTPS to our Cloud Run backend
- Step 3: Our backend checks whether the number exists in our secure identification database
- Step 4: If avaliable, the result is returned immediately.
- Step 5: Results are cross-referenced, confidence-scored, and the highest-confidence result returned
- Step 6: The App displays the identification result to you in real time
The entire process from call receipt to name display typically completes within 1-3 seconds, depending on network conditions.
3.2 Caller Name Sources
Caller names may be produced from cleaned contact-name votes shared by participating RealCaller users, full-name suggestions users voluntarily submit and administrator-approved corrections.
3.3 Accuracy, Limitations, and Disclaimers
While RealCaller strives to provide accurate caller identification, users should be aware of the following inherent limitations:
- Community reports and flags are user-generated and are explicitly labelled "Unverified - Community Generated" within the App
- RealCaller identification results should be used as a guide to inform your decision to answer a call, not as definitive legal proof of identity
If you believe a name displayed by RealCaller for your own number is inaccurate, you have the right to contact us to request a correction. See Section 7 for your data subject rights.
3.4 Community Reports - Important Distinctions
RealCaller's caller identification system operates on two distinct and clearly separated layers:
- VERIFIED IDENTIFICATION: Names on our database submited by users manually or Automatically, displayed with a green verified badge
- COMMUNITY FLAGS: Spam and fraud reports submitted voluntarily by users, always displayed with the label "Community Flags - Unverified" and a separate visual treatment
These two layers are never merged or presented in a manner that could cause a user to mistake a community flag for a verified identity. RealCaller does not endorse, validate, or take responsibility for the accuracy of community-generated reports.
Why We Process Personal Data
4.1 Overview
RealCaller processes personal data only for purposes connected to caller identification, contact-name matching, call safety, fraud and spam reporting, app reliability, subscription handling, advertising, abuse prevention, and user support. The table below summarises our main processing purposes:
Processing Activity | Main Purpose | User Control
Caller identification lookup | User safety and caller identification | Phone/call permissions and app use
Anonymous installation ID assignment | Service operation, rate limiting, anti-abuse | App uninstall or reset where available
Community spam reports and comments | Community safety | User-submitted action, comment editing, and deletion
Contact name vote sync | Community name matching fallback | Android Contacts permission and in-app setting
Subscription status verification | Ad removal and paid feature entitlement | Google Play subscription controls
Anonymised analytics | Service improvement | Platform/device privacy controls where available
Crash reporting | App stability and debugging | Platform/device privacy controls where available
Ad serving (AdMob) | Showing ads to non-subscribers | Google and Android ad/privacy controls
4.2 Legitimate Interests Assessment
Where we process data to operate caller identification and safety features, we limit processing to what is reasonably needed and apply safeguards including:
- Our interest in providing caller identification to protect users from fraud and crime is genuine and compelling
- The processing is necessary to achieve that purpose and cannot be reasonably achieved in a less intrusive manner
- The processing does not override users' fundamental rights and freedoms, particularly given the anonymised nature of installation IDs, Android permission controls, in-app community sharing controls, and our minimisation of contact processing to names and phone numbers needed for caller identification
- Users retain full control through Android permission settings and can revoke access at any time
4.3 Withdrawal of Consent
Where our processing is based on your consent (including consent to community reports and AdMob personalised advertising), you may withdraw that consent at any time without detriment, through the following means:
- For community reports: delete your report directly within the App at any time
- For contact name signals: revoke Contacts permission in Android settings, disable the community sharing option in RealCaller settings, or contact us to request server-side deletion where applicable
- For personalised advertising: opt out via Android Settings > Privacy > Ads
- For all processing: uninstall the RealCaller application from your device
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
How We Use Your Information
5.1 Primary Service Delivery
The primary and overriding purpose for which we collect and use information is to deliver the RealCaller caller identification service to you. Every piece of information we collect is either directly necessary for this purpose or supports the security and reliability of the service. Specifically, we use information to:
- Process incoming call numbers and return caller identification results in real time
- Use contact name votes from participating users to help resolve a likely display name where no stronger verified identity is available
- Display community spam flags and fraud warnings alongside identification results
- Determine your subscription status and suppress advertising for Premium users
5.2 Service Improvement
We use anonymised, aggregated data to continuously improve RealCaller's accuracy, performance, and reliability. This includes:
- Identifying and resolving technical errors, crashes, and performance bottlenecks
- Analysing feature usage patterns to prioritise product development
- Detecting and mitigating abuse patterns including coordinated false reporting campaigns
5.3 Legal Compliance and Safety
We may use or disclose information where necessary to:
- Comply with applicable law, regulations, or lawful governmental requests
- Enforce our Terms of Service and protect the rights and safety of RealCaller and its users
- Detect, investigate, and prevent fraud, abuse, or illegal activity on our platform
- Protect the vital interests of a data subject or another natural person
5.4 Advertising
For users who have not subscribed to RealCaller Pro, we display advertisements served by Google AdMob within the following placements:
- Banner advertisements on the Caller Detail screen and Call History screen
- Interstitial advertisements displayed at configurable intervals within the call history list
- Rewarded video advertisements that users may optionally watch to unlock additional caller data
RealCaller does not itself build advertising profiles, conduct behavioural tracking, or share your data with advertisers. Ad serving and any associated data processing is governed exclusively by Google's Privacy Policy and AdMob Terms of Service. We encourage you to review those documents at policies.google.com.
5.5 Purposes for Which We Will NOT Use Your Information
We make the following explicit commitments regarding purposes for which your information will never be used:
- We will never sell, rent, or license your personal data to third parties for any commercial purpose
- We will never use your data to build individual credit scores, risk assessments, or financial profiles
- We will never use your data for employment screening, tenant screening, or any vetting purpose
- We will never share your data with law enforcement except as required by valid legal process
- We will never use your data to send you unsolicited marketing communications of any kind
- We will never use your data for political campaigning, profiling, or voter targeting
- We will never upload or use contact fields beyond the limited name and phone number signals described in this Policy for caller identification and abuse-prevention purposes
Data Sharing And Third-party Disclosure
6.1 Our Commitment: We Do Not Sell Your Data
RealCaller does not sell, trade, barter, or otherwise transfer personal data to third parties for their own commercial purposes. This commitment is absolute and unconditional.
6.2 Authorised Service Providers
We share limited technical data with the following categories of service providers who assist us in operating RealCaller. Each provider is engaged under a binding data processing agreement and is permitted to use shared data only for the specific purpose of providing services to RealCaller:
Service Provider | Category | Data Shared | Purpose
Google Cloud Run | Cloud Hosting | Backend infrastructure
Google Cloud SQL | Database | reports, contact name votes | Data storage
Firebase Crashlytics | Crash Reporting | Anonymised crash data | App stability
Google AdMob | Advertising | Device ad ID (non-personal) | Ad serving
Google Play Billing | Payments | Subscription token only | Premium subscription
6.3 Legal Disclosure
We may disclose information about you if we are required to do so by applicable law, valid court order, subpoena, or other compulsory legal process. In such circumstances:
- We will only disclose the minimum information strictly required by the legal process
- We will notify affected users of any disclosure request to the maximum extent permitted by law
- We will challenge any requests we believe to be overly broad, disproportionate, or unlawful
- We will maintain a transparency report documenting government data requests on an annual basis
6.4 Business Transfers
In the event that RealCaller is acquired by, merges with, or transfers its assets to another entity, user data may be transferred as part of that transaction. In such circumstances:
- We will provide at least 30 days prior notice to users via an in-app notification
- The acquiring entity will be required to honour the commitments made in this Privacy Policy
- Users will be provided with the option to delete their data prior to the transfer taking effect
6.5 Aggregated and Anonymised Data
We may share aggregated, anonymised statistical data about RealCaller usage, fraud trends, and telecommunications safety patterns with research institutions, telecommunications industry bodies, and law enforcement agencies for public safety purposes. Such data does not contain any information that could identify individual users.
Data Retention And Deletion
7.1 Retention Principles
RealCaller retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, as required by applicable law, or as needed to protect our legitimate business interests. We apply the principle of data minimisation throughout our retention practices.
7.2 Retention Schedule
Data Category | Retention Period | Reason
Community spam reports and comments | Until user deletes or number deregistered | Ongoing community safety benefit
Contact name votes | Until disabled, replaced, deleted, or no longer needed | Caller identification fallback and abuse prevention
Manual name suggestions | Until reviewed, rejected, approved, or removed on request | Administrator-reviewed caller identification
Installation ID | Duration of installation | Service continuity; deleted on uninstall
Subscription records | Subscription term + 12 months | Accounting and dispute resolution
Crash reports | 90 days | Debugging; automatically purged by Crashlytics
Anonymised analytics | 24 months rolling | Trend analysis; aggregated, no personal data
7.3 Deletion Requests
Users may request deletion of data associated with their Installation ID by contacting us at hundredqore3@gmail.com. We will process verified deletion requests within 14 business days. Note that deletion of your Installation ID will result in loss of your report history, subscription status, and any saved preferences.
Your Rights As A Data Subject
8.1 Your Choices
You may contact us about privacy questions, correction requests, access requests, deletion requests, objections, complaints, and data removal. We are committed to reviewing legitimate requests promptly and without unnecessary complexity.
Access Requests
You have the right to request confirmation of whether we process personal data about you, and if so, to receive a copy of that data together with information about how it is processed. Given RealCaller's anonymised architecture, the data we hold about you is primarily limited to your Installation ID and any community reports you have submitted.
Correction Requests
You have the right to request correction of inaccurate personal data. If you believe the caller name displayed for your own telephone number is incorrect, you may submit a correction request via hundredqore3@gmail.com. We will investigate and update our records within 14 business days.
Deletion Requests
You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected, or where you withdraw consent. Uninstalling the App automatically deletes your Installation ID from your device. For server-side deletion, contact us.
Data Export Requests
You may request a copy of personal data you have provided to us in a structured, commonly used, and machine-readable format where technically feasible. To exercise this request, contact us at hundredqore3@gmail.com.
Objection Requests
You have the right to object to processing of your personal data for legitimate interest purposes. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Restriction Requests
You have the right to request restriction of processing in certain circumstances, such as while a rectification request is under review.
Right to Lodge a Complaint
You may contact us if you believe your privacy rights or choices have not been respected.
8.2 How to Exercise Your Rights
To exercise any of the rights described above, please contact us using the details in Section 13. To protect against fraudulent requests, we may ask you to verify your identity before processing your request. We will respond to all legitimate requests within 14 business days. In complex cases we may extend this period by a further 30 days, in which case we will notify you.
Data Security
9.1 Technical Security Measures
RealCaller implements industry-standard technical security measures to protect the data we process against unauthorised access, disclosure, alteration, or destruction:
- All data in transit between the App and our servers is encrypted using TLS 1.3
- All data at rest in our Google Cloud SQL database is encrypted using AES-256
- Our Google Cloud Run backend operates in a private network environment with strict firewall rules
- Database access is restricted to authenticated application processes only - no direct public database access
- All server access is logged and monitored for anomalous activity
- Security patches and updates are applied to our infrastructure within 48 hours of release
- Our PHP backend source code does not contain hardcoded credentials - all sensitive configuration is managed through Google Cloud Secret Manager
9.2 Organisational Security Measures
In addition to technical controls, RealCaller maintains the following organisational security practices:
- Access to production systems is restricted to authorised personnel on a need-to-know basis
- All personnel with access to user data are bound by confidentiality obligations
- We conduct periodic security reviews of our data processing practices
- Our application code is regularly reviewed for security vulnerabilities
- We maintain an incident response plan to address data breaches promptly
9.3 Breach Notification
In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of data subjects, RealCaller will:
- Review and address the incident promptly after becoming aware of the breach
- Notify affected users without undue delay via in-app notification where the breach is likely to result in high risk
- Document all breaches in our internal breach register regardless of notification obligations
- Take immediate remedial action to contain and resolve the breach
9.4 Security Limitations
While we implement robust security measures, no system is completely immune to security risks. We cannot guarantee absolute security of information transmitted over the internet or stored in any digital system. We encourage users to keep their Android operating system and the RealCaller App updated to the latest version to benefit from the most current security protections.
Children's Privacy
10.1 Age Restriction
RealCaller is not directed at, designed for, or intended to be used by children under the age of 13 years. We do not knowingly collect personal data from children under 13. If you are under 13, please do not install or use RealCaller.
10.2 Parental Action
If you are the parent or legal guardian of a child under 13 and you believe that your child has installed or used RealCaller, please contact us immediately at hundredqore3@gmail.com. Upon verification, we will take prompt action to delete any data associated with that installation.
International Data Processing
11.1 Data Location
RealCaller's primary data processing infrastructure is hosted on Google Cloud in data centre regions selected for performance and compliance. Some data may be processed by Google's global infrastructure in connection with services such as Firebase Crashlytics and Google AdMob.
11.2 Safeguards for International Processing
Where personal data is processed by infrastructure or service providers outside your country, we use appropriate safeguards such as reputable cloud providers, contractual data-processing commitments, access controls, encryption, and data minimisation.
Third-party Services And Links
12.1 Google Services
RealCaller integrates with several Google services including Google Play Billing, Firebase Crashlytics, Google AdMob, and Google Cloud infrastructure. Each of these services operates under Google's own privacy policy, which can be reviewed at policies.google.com/privacy. RealCaller is not responsible for Google's data processing practices.
12.2 Advertiser Links
Advertisements displayed within RealCaller through Google AdMob may contain links to third-party websites or applications. RealCaller has no control over, and accepts no responsibility for, the privacy practices of any advertiser or linked third-party service. We encourage users to review the privacy policies of any third-party service they access through an advertisement.
Contact Information
13.1 Privacy and Removal Contact
You may contact RealCaller for privacy, correction, deletion, removal, support, and complaint requests using the following details:
Email: hundredqore3@gmail.com
Response time: within 14 business days of receipt of a verified request
Changes To This Privacy Policy
14.1 Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our service. When we make material changes, we will:
- Update the "Last Updated" date at the top of this Policy
- Notify all active users via an in-app notification within the RealCaller App
- For significant changes affecting your rights, provide at least 14 days notice before the changes take effect
- Keep reasonable records of previous policy versions where required for compliance, review, or dispute handling
14.2 Continued Use
Your continued use of RealCaller following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the updated Policy, you should uninstall RealCaller from your device.
Governing Law And Jurisdiction
This Privacy Policy is governed by applicable law. Any disputes arising in connection with this Policy shall be handled by a court or authority with lawful jurisdiction.
Document Version 1.0 - Effective June 7, 2026 - 15 Sections - Comprehensive Edition
RealCaller - hundredqore3@gmail.com