Privacy policy — Call Impostor Shield

Call Impostor Shield is published by Atria.Eponym, an independent developer based in France. Contact: atria.eponym@gmail.com

What stays on your phone, and nowhere else

• your name and photo for your family, your family members' names and photos, the history of your checks;
• your keys: they are created in the phone's security chip and never leave it.

What the relay server (hosted by Cloudflare) sees

• one anonymous id per phone, derived from its public key, and that public key;
• the token used to send a notification to that phone, and when it last connected;
• who is linked to whom, as anonymous ids;
• an open question and its signed answer: they are erased one hour after they expire (a question expires after 2 minutes);
• during pairing, the exchanged profiles, encrypted with a secret that only the invitation link carries: the server cannot read them. They are erased within 24 hours.

What the app never does

Read your calls or messages, access your address book, locate you, show ads, measure your use, sell or share data.

On Android: the tile and the widget

The Quick Settings tile and the home-screen widget show the names and photos of your family members, read on your phone.

Family member without the app: the text message

For a family member who does not have the app yet, it opens your own messaging app with a ready message and no recipient. You pick their number and send the text yourself: the app does not see the number and sends nothing.

Free trial and subscription

The start date of the free trial stays on your phone. On Android, buying, paying for and cancelling the subscription are handled by Google Play, under its own privacy rules: the app only learns whether a subscription is active, and sees neither your payment method nor your identity. The subscription is described in the terms of sale.

Notifications

The questions are carried by Google (Firebase Cloud Messaging) on Android and by Apple (Apple Push Notification service) on iPhone. They contain only anonymous ids and a signature, never a name or a text: your phone writes the sentence itself.

Erasing your data

Removing a family member cuts the link on both sides at once. “New phone”, in the settings, erases all your links. Uninstalling the app erases everything it kept on the phone. The anonymous ids left on the server cannot identify you. For any request: atria.eponym@gmail.com

Children

The app asks for no personal data; a child can be linked by a parent.