CallEN RU ES

Call Privacy Policy

Effective October 16, 2026

Who we are and what this policy covers

Call is an end-to-end encrypted messenger with voice and video calls, provided by TecnoHelp S.A.C. (“we”). This policy explains what data Call receives, where it is stored and who it is shared with — on the website callchat.pro (and call.flg10.bet), in the Android app and in the iPhone app.

Call is a closed service: you can only sign up with an invitation from someone who already uses Call.

The key point: we don’t read your messages

Messages, files, voice messages and calls are encrypted on your devices (end-to-end encryption). Only the devices of the chat participants have the keys to decrypt them. Our server only receives encrypted data and cannot read it.

The only exceptions are features you turn on yourself, described below: AI features, “Keep key on the server” and chats with bots.

Not encrypted and visible to us: your username, display name and profile photo, group names and photos, and service metadata — who wrote or called whom and when. The service cannot deliver messages without them.

What data we store and why

We store only what Call needs to work and information for fixing errors. We do not collect data for advertising or analytics.

Data	Why	Can we see the content
Username, display name, profile photo	Your profile. Visible to Call users, used to find you in search	Yes
Password	Sign-in	No, we only store a strong hash
Devices: name (e.g. “iPhone Safari”), public key, last sign-in time, notification addresses	Encryption for your devices, device list in settings, notifications	Yes (private keys never reach the server)
Sign-in sessions	So you don’t have to enter your password every time	No, we only store a hash of the session token
Chats: members, roles, group names and photos	Chats and groups	Yes
Messages and files	Delivery	No: only who, which chat, when, message type and file size
“Delivered” and “read” marks, saved and pinned messages, mentions	Chat features	Only message numbers, not text
Your own names for contacts, chat list names	Visible only to you	Yes
“Online” and “last seen”	Visible only to people you share a chat with. Can be turned off in settings	Yes
Invitations: who invited whom	Sign-up by invitation	Yes
Acceptance of the Terms of Use (date)	Confirmation that you accepted the rules	Yes
Who you blocked	A blocked person can’t message you in a direct chat, call you, add you to groups or see whether you are online. They are not notified	Yes
Reports: about whom, from whom, which chat and which message (number), reason and your comment	Reports are reviewed by Call administrators, who can ban the offender	Yes, but without message text: it is not attached to the report
Call log: who called and when, duration, device, browser and OS, network type, connection quality	Troubleshooting poor connections	Yes, but not the content of the conversation
Error reports: error text, app version, browser, recent actions in the app	Fixing bugs	Yes, without message content

IP addresses are not stored in the database. They are used temporarily to protect against password guessing and appear in server technical logs, which are kept for 14 days.

Notifications and calls

To deliver notifications and incoming calls while Call is closed, we send them through notification services: Apple Push Notification service (iPhone and Safari), Google Firebase Cloud Messaging (Android app) and browser push services (Google, Apple, Mozilla, Microsoft).

A notification contains:

the sender’s name or group name, words like “new message” or “incoming call”, the chat number and the unread count;
a copy of the message or call key encrypted for your device. Only your device can decrypt it to show the text or connect the call. Apple and Google cannot read it.

You can hide message text in notifications in Call settings.

Calls go through our own call server and are also encrypted on the participants’ devices: the server relays audio and video but cannot decrypt them. A call recording is made on the phone of the person who started it, all participants see a “Recording” label, and the file is sent to the chat encrypted.

AI features — only if you turn them on

AI features are off by default. Each one is turned on by the user — for a single chat, call or message — after a warning. Only then is text or audio decrypted on your device, passed through our server and sent to the AI service Timeweb AI (OpenAI models).

Feature	What is sent to the AI service
“Translate chat”, “Translate”	Text of the messages you see in that chat, or of one message
“Text” on a voice message	The audio of that voice message
“Translated subtitles” in a call	Other participants’ speech (audio)
“Live AI voice”	The translated text to be spoken
“AI style”	Your own text before sending and the chosen style
“Make a summary” of a call recording	The recording and its transcript
Chat with an AI bot	Messages in that chat, photos and documents sent to the bot

We do not store or log the text, audio or results: a finished translation is stored only on your device, and we keep only usage counters. The AI service processes data under its own rules: Timeweb AI and OpenAI.

A bot reads only the direct chat with it: bots can’t be added to groups. The bot’s key is stored on our server, so a chat with a bot is not end-to-end encrypted — the bot warns about this in the chat. The company’s service bots may pass what you write to them to the internal company systems they were built for.

Where encryption keys are stored

Encryption keys are created and stored on your devices. Our server only receives public keys, which allow encrypting a message for you but not reading it.

Recovery key. If you created one, the server stores your account keys encrypted with it. Only you have the recovery key; without it we cannot decrypt them.
“Keep key on the server”. Off by default. If you turn it on, a new device is approved automatically with your password, but then anyone with access to the server or your password could read your messages. Turning it off erases the key from the server.
iPhone app. By default it stores this device’s key and your sign-in in the iPhone Keychain — only on this phone, without backup or sync to other devices. This is needed to show message text in notifications and answer calls from the lock screen. The key never reaches our server.
“Strict mode” (Call settings on iPhone) erases the key and sign-in from the Keychain and stops storing them there. Notifications will then have no text, and calls can only be answered with the app open.

Who we share data with

We don’t sell data, show ads, or use analytics or tracking tools. Call apps contain no third-party trackers, and the website loads nothing from third-party servers.

Data is shared only with those the service cannot work without:

With whom	Why	What
Timeweb Cloud (Moscow, Russia)	Call runs on its server	Everything described above; messages only in encrypted form
Apple, Google and browser push services	Notifications and incoming calls	See “Notifications and calls”
Timeweb AI (OpenAI models)	Only if you turned on an AI feature	See “AI features”
GIPHY	GIF search	Only the search text and language. The request goes through our server, without your IP address or account

Upon a lawful request from authorities we can only hand over what we have. We cannot decrypt your messages (unless “Keep key on the server” is on).

How long we keep data and how to delete your account

Data	How long
Encrypted messages for your devices	You choose in settings: 7, 30, 91, 183 (default) or 365 days. Saved messages, “My notes” and messages with files (unless their deletion is on) are kept. Other participants have their own copies and their own settings
Files	As long as a message with them exists; unsent files — 2 days
Sign-in sessions	End after 180 days of inactivity
Invitations	Valid for 2 days
Meetings	Deleted entirely (messages, files, guests, call log) after they end
Call log	90 days
Error reports	30 days
Server technical logs (IP addresses)	14 days

You can delete your account in Call itself: Settings → “Delete account”, confirmed with your password. After deletion:

your name, photo, password, recovery keys stored on the server, all sessions and notification addresses, your names for contacts, saved messages, chat lists, block list and unused invitations are erased;
you leave all groups and are signed out of all devices;
messages remain with the other participants — they are encrypted for their devices, and the author is shown as “Deleted account”;
the username stays reserved so nobody can impersonate you; device public keys are kept so others can still read old messages.

If you can no longer sign in, write to support@callchat.pro and we will delete the account on request.

Security, age, changes and contacts

Security. All connections to the server are protected (HTTPS), messages and calls are additionally encrypted on devices, and passwords are stored only as a strong hash. A new device must be approved from an already connected one or with the recovery key. The service panel is available only to Call administrators and only from inside the server.

Age. Call is not intended for children under 16, and we do not knowingly collect their data.

Changes. A new version of the policy is published on this page with its date. We will announce significant changes in Call itself.

Contacts. Questions about your data, requests for a copy or deletion: support@callchat.pro. TecnoHelp S.A.C. (RUC 20613529510), Calle Juan de la Fuente 960, Lima 15076, Peru.