Notice: This privacy policy is provided for informational purposes and has not been reviewed by legal counsel. It should be reviewed by a qualified attorney before being relied upon for legal compliance.
1. Introduction
SpamSlayer ("we," "our," or "us") provides a spam call detection and deterrence service. Our Android app identifies suspected spam calls and, when enabled, forwards them to our AI-powered backend where a conversational persona ("Eleanor") engages the caller to waste their time and protect you.
This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your data. By using SpamSlayer, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you sign in with Google via Firebase Authentication, we collect:
- Your Google account email address
- Your display name
- A unique user identifier (Firebase UID)
2.2 Phone Number Data
- Your Twilio number: When you register, we provision a dedicated Twilio phone number for your account, used to receive forwarded spam calls.
- Incoming caller numbers: Phone numbers of callers who are forwarded to your Twilio number are processed to identify and classify spam.
2.3 Call Data
- Call logs: We record metadata about forwarded calls, including timestamps, call duration, and the identified scam type.
- Call transcripts: Conversations between the AI persona and callers are transcribed and stored to improve spam detection and provide you with call summaries.
- Audio data: Call audio is processed in real-time for speech-to-text conversion. Audio is streamed and processed but is not permanently stored.
2.4 Spam Database Contributions
Phone numbers identified as spam may be added to a shared community spam database to help protect all SpamSlayer users. Only the phone number and spam classification are shared; no personal information about you is included.
2.5 Device and Usage Data
- Local database: The Android app stores spam numbers and call logs locally on your device using a Room database.
- Crash and error data: We use Sentry to collect crash reports and error logs to improve app stability. This may include device model, OS version, and stack traces. No personally identifiable call content is included in crash reports.
3. How We Use Your Information
We use the information we collect to:
- Provide the service: Route forwarded spam calls to the AI persona, detect scam types, and generate appropriate conversational responses.
- Improve spam detection: Analyze call patterns and scam techniques to enhance our detection algorithms and community spam database.
- Extract intelligence: Identify scam operations, techniques, and organizations from call transcripts to help protect users.
- Display call history: Show you logs and summaries of intercepted spam calls.
- Maintain and improve the app: Diagnose technical issues, monitor performance, and improve user experience.
4. Third-Party Services
SpamSlayer uses the following third-party services, each with their own privacy policies:
- Twilio (Privacy Policy): Provides phone numbers and handles voice call routing. Twilio processes call audio in real-time.
- Google Cloud Platform (Privacy Notice): Provides text-to-speech (TTS) for the AI persona's voice, Firebase Authentication for sign-in, and Cloud Firestore for data storage.
- Deepgram (Privacy Policy): Provides real-time speech-to-text transcription of call audio.
- Sentry (Privacy Policy): Collects crash reports and error data for debugging and app stability monitoring.
We do not sell your personal information to any third party.
5. Data Storage and Retention
5.1 Where Data Is Stored
- On your device: Spam numbers and call logs are stored locally in a SQLite database (Room).
- In the cloud: Call transcripts, extracted intelligence, call records, and account data are stored in Google Cloud Firestore, scoped to your user account.
5.2 Retention Periods
- Call transcripts and records: Retained for as long as your account is active. You may request deletion at any time.
- Community spam database entries: Phone numbers flagged as spam are retained indefinitely to protect all users.
- Audio data: Not stored. Audio is streamed and processed in real-time only.
- Crash reports: Retained according to Sentry's data retention policies (typically 90 days).
6. Your Rights
You have the following rights regarding your personal data:
- Access: You can request a copy of the personal data we hold about you.
- Deletion: You can request that we delete your account and all associated data, including call transcripts, call records, and your provisioned Twilio number.
- Portability: You can request an export of your data in a machine-readable format.
- Correction: You can request correction of any inaccurate personal data.
- Opt-out: You can stop using call forwarding at any time by disabling it through your carrier settings. You can also deactivate your Twilio number through the app.
To exercise any of these rights, contact us at support@spamslayer.app.
7. Security
We take the security of your data seriously and implement the following measures:
- Encryption in transit: All data transmitted between the app, our servers, and third-party services is encrypted using TLS (HTTPS).
- Encryption at rest: Data stored in Google Cloud Firestore is encrypted at rest using Google-managed encryption keys.
- Authentication: All API endpoints require Firebase JWT authentication. Twilio webhook endpoints are verified using HMAC-SHA1 signature validation.
- Rate limiting: API endpoints are rate-limited to prevent abuse.
- Access control: Your data in Firestore is scoped to your user account and protected by Firebase Security Rules.
While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Children's Privacy
SpamSlayer is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@spamslayer.app, and we will take steps to delete such information.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective Date" at the top of this page and, for significant changes, notify you through the app or via email.
Your continued use of SpamSlayer after any changes to this policy constitutes your acceptance of the updated terms.
10. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@spamslayer.app