Effective 21 September 2026
The short version. CallVerify exists to tell you whether a phone call really comes from the person it claims to. To do that we need your phone number and a way to notify your phone. We never hear or record your calls, we never sell your data, we show no ads, and we do not track you across other apps or websites.
CallVerify is operated by Aarush Sharma ("CallVerify", "we", "us"). You can reach us at hello@callverify.app.
| Information | Why we need it | Where it lives |
|---|---|---|
| Your phone number | It is your account. Other CallVerify users who already have your number can see that you use CallVerify, so their calls to you can be checked. | Our server, until you delete your account. |
| Your public security key | Lets other phones confirm that a check really came from your phone. It is not secret and cannot be used to impersonate you. | Our server, until you delete your account. |
| Your private security key | Proves your phone is yours during a check. | Only on your phone, protected by the device's secure hardware. It is never sent to us or anyone else. |
| A push notification token | So we can wake your phone to run a check when someone calls you. | Our server, until you delete your account or the token is replaced. |
| A sign-in token | Proves that later requests (for example updating your notification token) come from your phone. | On your phone. Our server keeps only a scrambled (hashed) copy. |
| Your contacts' phone numbers | To show which of your contacts also use CallVerify. With your permission, the app sends phone numbers only. It never sends names, photos, emails or anything else. | Not stored. The server answers the question and discards the numbers. They are not written to logs. |
| Check details (the two phone numbers, a random call ID, the time, and the signed messages the two phones exchange) | To pass the check between the caller's phone and yours. | Server memory for up to 10 minutes, then gone. Server logs keep the time and the last four digits of the numbers for troubleshooting and abuse prevention. |
| Your call history and results inside the app | So you can look back at which calls were verified. | Only on your phone. |
| One-time verification codes | To confirm you own your phone number when you sign up. | Server memory for up to 5 minutes. |
We do not sell or rent personal information. We use a small number of service providers, each of which receives only what it needs to do its job:
We may also disclose information if the law requires it, or to protect people from fraud, abuse or harm.
When you sign up, or ask for a new code, we send one text message containing a one-time verification code to the number you entered. We send no marketing or recurring texts. Message and data rates may apply. Mobile numbers and text-messaging consent are never shared with third parties for their marketing.
We keep your phone number, public security key and push token for as long as you have an account. To delete them, open the app and go to Settings → Delete account. Deletion is immediate. It also erases everything the app stored on your phone. If you no longer have the app, email hello@callverify.app from any address and tell us the phone number; we will confirm ownership with a one-time code and delete the account.
Server logs, which contain times and the last four digits of phone numbers, are removed automatically by our hosting provider on its normal schedule.
All traffic between the app and our server is encrypted. Your private security key is generated on your phone, stored using the device's secure hardware, and never leaves it. No system is perfectly secure, and CallVerify is an aid to your judgement, not a guarantee. See the Terms.
CallVerify is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has signed up, contact us and we will delete the account.
If we change this policy in a way that matters, we will update the date above and tell you in the app before the change takes effect.