# Privacy Policy & User Data Deletion — WhoCaller
- Application: WhoCaller
- Package Name: com.whocallerapp.com
- Developer: Wallstreet Bull Capital Business Consultancy
- Last Updated: August 31, 2026 • Compliant with Google Play Store Listing, DPDP Act 2023 & GDPR
---
## Core Privacy Guarantee
WhoCaller (com.whocallerapp.com), published by WhoCaller Inc., is built on a zero contact harvesting architecture. We never sell personal data, never share your contact address book with advertising brokers or data aggregators, and safeguard local audio recordings and security tokens using hardware-backed Android KeyStore AES-256-GCM encryption.
---
## 🗑️ How to Request Account & Data Deletion (#data-deletion)
In full compliance with Google Play Account Deletion Policies, GDPR Article 17 (Right to Erasure), and India's DPDP Act 2023, users of WhoCaller (Package: com.whocallerapp.com) have the absolute right to delete their account and all associated personal data at any time.
### Method 1: Instant In-App Data Deletion (Recommended)
1. Open the **WhoCaller** app on your Android device.
2. Tap the **Settings (⚙️)** icon in the top right corner.
3. Scroll to the **Account & Privacy** section.
4. Tap **"Reset All Profile Data & Cache"** or **"Leave Family Shield & Purge Records"**.
5. Confirm your selection. All local cached identifiers, call history metadata, family tracking tokens, and remote synchronized profile records are **immediately and permanently erased (0 seconds retention)**.
### Method 2: Web & Email Deletion Request (Without Reinstalling App)
1. Send an email to our dedicated Data Protection Officer at **privacy@whocallerapp.com**.
2. Set the subject line to: **"Account & Data Deletion Request - [Your Registered Phone Number]"**.
3. Provide your registered phone number (including international country code, e.g., `+91 XXXXX XXXXX`) and your registered name.
4. Our Data Protection Officer will process the request and permanently delete all your account records, profile details, and cloud logs within **48 to 72 business hours**, sending an official confirmation email upon completion.
---
### Exact Breakdown of Data Deleted vs. Kept & Retention Periods
| Data Category | Specific Data Items | Action on Deletion | Retention Period / Timeline |
|---|---|---|---|
| **User Profile Info** | Name, Phone Number, Profile Picture, Bio, Verified Badges | **Permanently Deleted** | **Immediate** (In-App) / Max 72 hrs (Email) |
| **Contacts & Caller ID** | On-device address book cache, caller lookup history | **Permanently Deleted** | **Immediate** (Purged from local sandbox & servers) |
| **Family Shield Telemetry** | Child GPS coordinates, geofence logs, pairing tokens | **Permanently Deleted** | **Immediate** upon leaving family or account reset |
| **Audio Recordings** | Local call recordings, WhatsApp audio backups | **Permanently Deleted** | **Immediate** (Stored strictly locally, erased with cache) |
| **Push & Device IDs** | FCM Push Token, Hardware Installation UUID | **Permanently Deleted** | **Immediate** (Unlinked and invalidated) |
| **Telemetry & Diagnostics** | Anonymized crash stacktraces, latency metrics | **Permanently Deleted** | Auto-purged after **90 days** maximum |
| **Financial Invoices** | Payment reference IDs, Razorpay tax invoices, GST transaction records | **Statutory Retention** | Retained for **7 years** solely to comply with statutory accounting & tax laws (Indian Income Tax Act / GST regulations). *All personal profile linkages are completely stripped/anonymized.* |
---
## 1. Google Play Data Safety Declaration
| Data Category | Specific Data Types | Purpose & Functionality | Collection Type |
|---|---|---|---|
| Location | Approximate & Precise GPS Coordinates | Family Shield parental protection, child safety zones & real-time SOS alerts. | Optional (User Choice) |
| Personal Info | Name, Phone Number, Profile Bio | Account authentication, verified caller ID display & spam reporting. | Optional (User Choice) |
| Messages | SMS / MMS Messages | Default SMS handler, dual-SIM thread management, OTP categorization & spam SMS shield. | Optional (User Choice) |
| Photos & Media | Profile Pictures & Avatars | Custom caller profile pictures, contact photos & badge personalization. | Optional (User Choice) |
| Audio Files | Voice & Microphone Input | Local dual-voice call recording, WhatsApp audio backup & smart alarm audio. | Local Only (Encrypted) |
| Contacts | Phonebook Contacts & Names | On-device T9 search, post-call caller identification & spam reputation lookup. (Zero Harvesting) | Optional (User Choice) |
| App Info & Performance | Crash Logs, Latency Diagnostics | Crash troubleshooting, telemetry & performance optimization. | Optional (User Choice) |
| Device or Other IDs | FCM Push Token, Hardware ID | Firebase push notifications, session security & Family Shield device pairing. | Optional (User Choice) |
---
## 2. Specific Feature Disclosures & Privacy Protections
### A. On-Device Call Recording & WhatsApp Audio Privacy
- **100% Local Storage:** All audio recordings remain strictly on your physical device within the app's sandboxed storage. They are never transmitted, uploaded, streamed, or transcribed to WhoCaller servers or any 3rd-party cloud without your explicit, manual export.
- **Hardware AES-256 Encryption:** Local audio files are encrypted at rest using AES-256-GCM keys managed by the Android KeyStore hardware security module.
- **Legal Recording Notice:** Call recording laws vary by jurisdiction (single-party vs. all-party consent). Users are responsible for complying with local recording disclosure regulations.
### B. Accessibility Service API & System Overlay Disclosures
WhoCaller utilizes Android Accessibility Service API and `SYSTEM_ALERT_WINDOW` (Display Over Other Apps) strictly for:
- Rendering real-time Caller ID floating heads over incoming calls and suppressing floating action docks during keyboard input to prevent UI obstruction.
- Enabling VoIP call identification and assisting audio routing for WhatsApp incoming calls.
- **Zero Data Exfiltration:** Accessibility services are never used to log keystrokes, read chat messages, access screen contents of unrelated apps, or harvest user data.
### C. Family Shield Child GPS & Parental Protection
- Location telemetry is end-to-end encrypted between linked family devices using cryptographic group pairing tokens.
- Parental controls and location tracking can be paused or disconnected anytime via the security PIN.
- Leaving a family group instantly purges all linked location history and parental telemetry records.
### D. Special & Toll-Free Helpline Handling
WhoCaller maintains a verified database of national emergency numbers (112, 100, 101, 108), cybercrime helplines (1930), railway assistance (139), and toll-free services (1800*, 1600*). These numbers are classified as `RiskLevel.TRUSTED` by default and are processed with zero tracking or telemetry overhead.
---
## 3. Security, Encryption & Data Transport
All data transmitted between WhoCaller mobile applications and backend services is encrypted in transit using **Transport Layer Security (TLS 1.3 / HTTPS)** with strict certificate pinning. Local sensitive data is secured using **AES-256-GCM encryption** powered by the Android KeyStore.
---
## 4. Third-Party Integrations & Sub-Processors
- **Google Firebase (Google LLC):** For crash diagnostics, latency monitoring, and Firebase Cloud Messaging (FCM) push alerts.
- **Razorpay Software Private Limited:** PCI-DSS Level 1 certified payment gateway for processing in-app credits and subscription transactions under Reserve Bank of India (RBI) guidelines. Zero credit card or banking PIN details are processed or stored on WhoCaller servers.
---
## 5. Data Retention Guidelines
Personal profile data is retained only for as long as your account remains active. Telemetry and crash diagnostics are automatically purged after 90 days. When you delete your account or initiate data deletion, all associated records are permanently erased without backup retention.
---
## 6. Grievance Redressal & Contact Officer
Data Protection & Grievance Officer
WhoCaller Inc., Cyber Security & Privacy Division
- **Email:** privacy@whocallerapp.com
- **Grievance Escalation:** grievance@whocallerapp.com
- **Website:** https://whocallerapp.com