Privacy Policy

1. Information We Collect

• Account data: Name, email address, phone number, and preferred name provided at signup.
• Call data: Caller phone numbers, call duration, timestamps, AI-generated transcripts, call summaries, credibility scores, and caller intent classifications. Call data may be retained in anonymized form after account deletion to support community scam intelligence.
• Voice and audio data: Incoming calls are processed in real time by Calla, MyCalla's AI voice assistant, and are recorded. Call audio is converted to text, and Calla's spoken replies are generated, using third-party service providers engaged by MyCalla to deliver the service. Call recordings are retained for up to 30 days and then deleted; they are used to improve transcription quality and to preserve evidence of scam or abusive calls. If you record a custom voice greeting, that recording is processed by a third-party voice provider and deleted after processing is complete.
• Billing data: Payment details are handled exclusively by our third-party payment processor (web purchases) and by the app store you purchased through (mobile purchases). MyCalla never receives or stores raw credit card numbers. We retain billing event records (plan, amount, date) for accounting.
• Device data: Device type, OS version, and push notification tokens for your device. Used to deliver call alerts and notifications.
• Usage data: Features used, settings configured, and app session events. Used to improve the service.
• Caller intelligence data: Phone numbers, anonymized call patterns, and scam reports from all users are aggregated into a community threat intelligence database. No personally identifiable user data is included.

2. How We Use Your Information

• To operate the call screening and AI receptionist service
• To generate call summaries, credibility scores, and caller intelligence
• To send push, email, and (if you opt in) SMS/text notifications about calls, scam alerts, and account activity
• To process billing and manage your subscription
• To improve scam detection using anonymized, aggregated community data
• To comply with legal obligations

We do NOT sell your personal information, use your call data to train AI models without your explicit consent, or share your data with advertisers.

3. Call Recording, Automated Answering, and Consent

What your callers are told: Every call answered by MyCalla opens with a spoken notice that the caller has reached a recorded answering service, before any substantive conversation begins. Calla does not claim to be a human being and identifies herself as an assistant answering on the account holder's behalf.

Call recording and transcription: Calls answered by Calla are recorded and transcribed in real time. Recordings are retained for up to 30 days and then deleted (see Data Retention); transcripts and AI-generated summaries are stored and accessible only to the account holder.

All-party consent states: Twelve states generally require all parties to a phone call to consent before recording. These states are: California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, and Washington. The spoken notice at the start of every call is the notification mechanism: a caller who continues the call after hearing it has been informed the call is a recorded answering service.

Your responsibility: Recording, wiretap, and artificial-voice or AI disclosure requirements differ by state and change over time. MyCalla provides the notice mechanism; you are responsible for determining whether your use and configuration of MyCalla satisfies the requirements that apply to you and to your callers, and for configuring or discontinuing the service accordingly.

4. Information About Your Callers

People who call a MyCalla number are usually not MyCalla users and do not have an account with us. We collect information about them in the course of screening the call on the account holder's behalf: their phone number, the audio of what they say, a transcript of it, and the summary, intent classification, and credibility or scam assessment Calla generates from it.

• Callers are notified at the start of every call that they have reached a recorded answering service.
• This information is collected for, and made available to, the account holder who received the call. It is not used to build marketing profiles, and it is not sold or shared with advertisers.
• Caller audio follows the same 30-day recording retention as any other call. The account holder can delete an individual call at any time, and caller data is deleted or anonymized when that account is deleted.
• Phone numbers and call patterns associated with scam or unlawful calling activity may be retained in anonymized form in our community threat intelligence database, and shared in anonymized form with carriers, anti-fraud efforts, and enforcement authorities.
• If you called a MyCalla number and want to know what we hold about that call, or want it removed, write to privacy@mycalla.ai. We may need to route the request through the account holder, who controls the call record, and we may need information from you to locate the call.

5. Voice and Biometric Data

Voice audio processed during calls is treated as sensitive data. In Illinois, voice data may constitute biometric information under the Illinois Biometric Information Privacy Act (BIPA), and similar laws exist in Texas and Washington. MyCalla records calls for AI-assisted call screening and retains recordings for no more than 30 days. We do not create voiceprints or biometric templates, and we do not use voice data to identify any individual. If you record a custom greeting in your own voice, that recording is used only to produce your greeting and is deleted after processing; no voiceprint is derived from it or retained. If you have questions about biometric data handling in your jurisdiction, contact privacy@mycalla.ai.

6. How We Share Information

We share personal information with third-party service providers who process it on our behalf so we can operate and deliver the MyCalla service. Each provider receives only the information it needs to perform its function, is bound by a written agreement, and is restricted to processing that information solely to provide services to MyCalla.

The categories of service providers we use are:

• Cloud hosting, database, and storage providers — account data, call records, settings, call recordings
• Telecommunications and voice infrastructure providers — phone number provisioning, call connection, call audio
• Speech recognition and artificial intelligence providers — call audio, transcripts, summaries, and scam analysis
• Voice synthesis providers — the text of Calla's spoken replies
• Payment processors and app store billing providers — billing information, subscription and entitlement status, purchase receipts
• Email and push notification providers — email address, device token, notification content
• Error monitoring and diagnostics providers — anonymized error and performance traces

We may also disclose information when required by law or valid legal process; to protect the rights, property, or safety of MyCalla, our users, or the public, including reporting suspected fraud or unlawful calling activity to carriers or authorities; and to an acquirer or successor in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy.

We share anonymized scam intelligence with the MyCalla community threat database — no personal data included. We do not share data with advertisers and do not sell personal information.

You may request the identity of the specific service providers we use at privacy@mycalla.ai.

7. Text Message (SMS) Notifications

Text message (SMS) notifications. If you opt in, MyCalla sends text messages to the phone number on your account to alert you to calls your Calla line handled — primarily missed calls. Message frequency varies. Message and data rates may apply. Reply STOP to any message to unsubscribe, or HELP for help. You can also turn text alerts off at any time in the app or at mycalla.ai/sms. We do not share your mobile opt-in or phone number with third parties or affiliates for their own marketing purposes. Your number is shared only with the telecommunications provider that delivers the message on our behalf, as described in “How We Share Information.”

8. Automated Decision-Making

MyCalla uses automated AI systems to screen calls, generate credibility scores, classify caller intent, and flag potential scam activity. These decisions affect how calls are routed and presented to you. They do not produce legal or similarly significant effects on callers. You may review, correct, or override any automated classification within the app.

9. Data Retention

• Call recordings (audio): Up to 30 days, then deleted.
• Call records and transcripts: Retained for the life of your account; deleted or anonymized when you delete your account.
• Account data: Retained until account deletion.
• Deletion record: When you delete your account we keep a short record of the deletion (your phone number, email, and the Calla number being released) so we can complete the release of that number and notify affected family-plan members. The phone number and email are replaced with one-way hashes as soon as the deletion completes, and the record is deleted within 30 days after that.
• Community scam intelligence: Call records associated with scam or unlawful calling activity, retained in anonymized form after account deletion with no personal identifiers, for no longer than 5 years from the date of the call.
• Caller profiles: Retained in anonymized form after account deletion, for no longer than 3 years from the last call.
• Billing events: 7 years for accounting compliance.
• Voice recordings (custom greeting): Deleted after processing.
• Legal holds: We may retain information longer where required by law, or where it is needed to establish, exercise, or defend a legal claim, and only for as long as that need lasts.

10. Your Rights

All users may exercise the following rights through Settings or by contacting privacy@mycalla.ai: access your data, correct inaccurate data, delete your account and personal data, request a data export, and opt out of automated call scoring.

State-specific rights: Residents of states with comprehensive privacy laws have additional rights. We honor all applicable rights for residents of California (CCPA/CPRA), New Jersey (NJDPA — opt-out requests processed within 15 days), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Montana (MCDPA), Tennessee (TIPA), Maryland (MODPA), Minnesota (MCDPA), Indiana (ICDPA), Kentucky (KCDPA), Rhode Island (RIDTPPA), Iowa (ICDPA), Delaware (DPDPA), Utah (UCPA), New Hampshire (NHCDPA), and Nebraska (NDPA). Common rights include: access, correct, delete, portability, and opt out of sale or profiling.

We do not sell personal information. California and New Jersey residents may request written confirmation at privacy@mycalla.ai.

Right to appeal: If we deny a privacy request, you may appeal by emailing privacy@mycalla.ai with the subject “Privacy Request Appeal.” We will respond within 60 days.

Do Not Track: There is no accepted industry standard for how websites should respond to browser “do not track” signals, and our site does not currently respond to them. We do not engage in cross-site behavioral tracking of our users. Where we are required to honor a universal opt-out signal such as Global Privacy Control, we do so.

Notice to Nevada residents: We do not sell covered information as defined by Chapter 603A of the Nevada Revised Statutes, and we have no plans to. Nevada residents may submit a verified request regarding the sale of covered information to privacy@mycalla.ai.

11. Children's Privacy

MyCalla accounts are for adults 18 and older, and the service is not directed to children. We do not knowingly collect personal information from anyone under 13.

On a family plan, the plan administrator may add a member under 18 only if the administrator is that member's parent or legal guardian; by adding them, the administrator consents on the minor's behalf to the collection and processing described in this policy and is responsible for informing the minor that calls to their MyCalla number are screened, recorded, and transcribed. Members under 13 are not permitted. A parent or guardian may review or delete a minor member's data at any time through the plan, or by contacting privacy@mycalla.ai. If we learn we have collected information from a child under 13, we delete it.

12. Where Your Information Is Processed

MyCalla is operated from the United States and is offered to users in the United States. Your information is processed and stored in the United States, and our service providers may process it in other countries. If you access the service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

13. Data Security

We use encryption in transit (TLS), encryption at rest (AES-256), row-level database security, and field-level encryption for sensitive data. We conduct regular security audits. In the event of a breach affecting your personal information, we will notify you as required by law.

14. Changes

We may update this Privacy Policy. Material changes will be communicated by email and an in-app notice. The effective date at the top reflects the most recent update.

15. Contact

privacy@mycalla.ai · MyCalla LLC, New Jersey