Privacy Policy

Effective 15 November 2026

PyoorCall is a messaging and calling app. This policy explains what we collect, why, how long we keep it, and how you can delete it. We do not sell your data, we show no ads, we use no third-party analytics, and we do not track you across other apps or websites. The app sends crash reports, which you can turn off, as described under Crash reports.

What you give us

• Your phone number. It is your account. We verify it with a code sent by SMS through Google Firebase Authentication, which also gives your account a Firebase user ID.
• Your profile, if you add it: a name, an about line, a username and a profile photo. A username is an optional @name that lets people find you and start a chat without your phone number. You can change it, or remove it, once every 60 days. While you have a username you can hide your phone number from people who do not already have it (Settings → Privacy → Phone number).
• Your messages and media. Texts, photos, videos, voice notes and documents you send, and the reactions, stars, pins and edits you make, pass through our servers so they can be delivered to the people you send them to and to your own devices. We hold them only until every one of those devices has received them, and then we erase the content from our servers. If someone never comes to collect, we erase it after 30 days. A record that a message existed stays in the chat. Your own copy of a chat lives on your phone, and getting it back after reinstalling the app needs your own backup. Messages are encrypted in transit and while we hold them. They are not end-to-end encrypted. Uploaded files are scanned for malware.
• Your calls. One-to-one voice calls are connected through our call servers. We keep who called whom, when, how long the call lasted, how it ended, and which devices took part. We do not record or transcribe calls.
• Reports and support requests. When you report something we keep a copy of what you reported. When you contact support we keep your message and how to reach you.

Your contacts

If you allow access to your contacts, the app sends the phone numbers in your address book to our servers over an encrypted connection only to find which of them use PyoorCall. Contact names never leave your phone. The numbers are checked and then discarded: we keep only which PyoorCall accounts are in your contacts, not the numbers of people who are not on PyoorCall. You can use PyoorCall without giving access to your contacts.

Who sees your phone number

Your phone number is your account, and we always keep it. Who else sees it depends on Settings → Privacy → Phone number:

• Everyone: anyone you chat or call with.
• My contacts: people you have saved in your phone's contacts.
• Nobody: nobody new.

Whatever you choose, someone who already has your number saved in their contacts still sees it, because they already have it. When your number is hidden, people see your username instead, and the country code of your number with its flag (for example "+234"), never the rest of the digits. If someone reports you, our moderators see your full number so that they can act on the report.

Messages from people you don't know

A first message from someone who is not in your contacts goes to Message requests, not to your chat list. Until you accept, they cannot call you, and photos, videos, files and links they send are not shown. You can accept, delete, block or report from the request; the sender is not told that you have seen it or deleted it.

To help you decide, a request shows what we know about the other account, without showing their number if they hide it: whether they are in your contacts, the country code of their number, roughly when the account was made (for example "joined 3 days ago" or "joined March 2026"), whether they changed their username in the last 60 days, and the names of groups you are both in. Other people see the same about you when you write to them first.

To record a request we keep only who started the chat, how they found you (username, QR code, group or contacts) and whether you accepted it. The message itself is handled like any other message: we erase it from our servers once it has been delivered.

New accounts can start only a limited number of chats a day by username or QR code. Username key: you can set a four-digit key that anyone who finds you by your username must enter before they can message you. We keep the key only in a form that cannot be turned back into the digits.

What your device tells us

• Whether it is an Android phone or an iPhone, an ID for this installation of the app, and a token that lets us send notifications through Firebase Cloud Messaging and Apple Push Notification service.
• Your IP address when you connect, used for security, abuse prevention and rate limiting.
• When you were last active, and whether you are online, which you control in Privacy settings.

Crash reports

When PyoorCall crashes, or meets an error it cannot recover from, the app sends a crash report to Firebase Crashlytics, a Google service, so that we can find and fix the problem. A report holds what went wrong and where in the app's code, the version of PyoorCall, which of our servers the app was using, and technical details of the phone: its model, its operating system version, free memory and storage, and a random ID that Crashlytics makes for this installation of the app to count how many phones a crash affects.

A crash report never holds your messages, contacts, phone number, name or account ID, and we do not link reports to your account. Words that could come from a message, a contact or an address are removed from the description of the error before the report is made.

Crash reports are on unless you turn them off in Settings → Privacy → Send crash reports. Turning them off also deletes any report still waiting on the phone. Crashlytics keeps reports for 90 days.

Features that work differently

• Disappearing messages have their text, link preview and media erased from our servers when their timer ends; a placeholder saying a message existed remains in the chat.
• View once media is erased after everyone it was sent to has opened it, or after 14 days if it is never opened. On Android, screenshots of it are blocked; on iPhone, the sender is told if someone takes one.
• Link previews are fetched by our servers from the website you link to, so that site sees our server, not you.
• The word filter hides blocked words in messages you receive. It runs on your phone and you can turn it off in Privacy settings.
• Nearby delivery is off until you turn it on, and only on Android. When your phone has no internet, a text you send can pass over Bluetooth through a nearby phone that has PyoorCall and Nearby delivery on, which forwards it to us. The text travels sealed with our key: the nearby phone cannot read it, or see who sent it or who it is for. For abuse handling we record which account's phone carried it and which of your devices sent it, never the text. While it is on, your phone also tells phones around it, over Bluetooth, that PyoorCall is on it, and may carry other people's sealed texts over its own mobile data or Wi-Fi, a few a minute at most.
• Location sharing happens only when you choose it: you open Attach, then Location, and send where you are, or share it live. Live location lasts the time you pick (15 minutes, 1 hour or 8 hours), keeps updating while the screen is off, shows a notice while it runs, and you can stop it at any time. A location is stored like your other messages, only until it has been delivered to the people in that chat. Live location can be extended an hour at a time, up to 8 hours in all. The map pictures are fetched from Esri for every map type you can pick (standard, satellite and terrain), and the place name of a location you send from OpenStreetMap's servers; each sees the area shown and your phone's internet address. When Google Maps is switched on, the map pictures come from Google instead, which then sees the area shown and your phone's internet address. Your map type is remembered on your phone only. Nearby places, and the places you search for, are asked from your phone too: the area around you, and what you type into the search as you type it, go to komoot's Photon service, which runs on OpenStreetMap data and also sees your phone's internet address. While you share live, your phone asks OpenStreetMap's servers now and then for the name of where it is, so the people in the chat see "Near …"; their phones never ask. We never ask for location "all the time".
• GIFs are searched from your phone: while you use the GIF tab, the words you type into its search, and your phone's internet address, go to GIPHY (Giphy, Inc.), which sends back the GIFs to choose from. No account, name, number or device identifier is sent with them, and we never see your search. The GIF you pick is downloaded by your phone and sent as an ordinary message from you, so the people you send it to never contact GIPHY. Stickers, including the ones you make from a photo, are made and kept on your phone; cutting a subject out of a photo happens on your phone too.
• Translation and voice note text are made on your phone. When you translate a message, the text is translated on your phone by Google's ML Kit and is never sent to us, to Google or to anyone else; each language you translate from is downloaded from Google once, about 30 MB. ML Kit tells Google which languages were used, with your phone's model and the app version, to help Google improve it; never the text. When you ask for the text of a voice note, your phone makes it with a speech model (Whisper, about 550 MB) that it downloads once from Hugging Face, which sees your phone's internet address as any download does; the recording and its text never leave your phone. Translations and voice note text are kept on your phone only.
• Phones with no internet can also reach each other, when Nearby delivery is on for both. While you have internet we give your phone a nearby pass: a statement signed by us that this phone belongs to your account and your phone number, valid for 14 days, so other phones can check it without internet. With no internet, your texts can then go from phone to phone over Bluetooth, through up to four other PyoorCall phones. Those phones cannot read them, show nothing, and keep them in memory only, for an hour at most. Anyone near you who knows your number can ask for it this way and learn that your phone is in reach, as they could by messaging you; a phone passing such a question on can learn that someone nearby is looking for that number, but not who is asking. The person you write to sees your number as your pass proves it. When either phone is back online, the chat and its texts are saved to our servers like any other.

Account information we keep

Whatever you choose for News and offers, we keep this about your account for as long as it exists, to run PyoorCall, keep it safe and understand how it is used:

• your phone number, and your email address if you added one;
• your name and profile photo;
• your country, region and city, worked out on our servers from the internet address your phone connects from, at most once a day. We do not ask for location permission for this, and we do not keep the address for it;
• your phone's model, its operating system and the version of PyoorCall it runs;
• when you were last active;
• your News and offers choice, and when and where you made or changed it;
• your username, when you set it and when you last changed it, and whether you set a username key;
• when your account was made;
• whether your account is suspended or banned, why, and until when.

You can see this list in the app under Settings → Privacy → What we keep.

News and offers

If you allow it, we may send you news about PyoorCall and offers by notification, SMS or email, and use the account information above to choose who receives them, for example people in one country or on one version of the app. For phone numbers from the EU, the EEA and the UK it is off until you turn it on; elsewhere it starts on, and we ask you once after you sign in. One switch covers all three. To stop them:

• turn off News and offers in the app under Settings → Privacy;
• use the unsubscribe link in any offer email;
• reply STOP to an offer SMS.

Turning it off never stops messages, calls, or account emails such as sign-in codes. We do not sell this information or share it with advertisers.

Chat backups and Google Drive

Backups are optional and made on your phone. They are encrypted with a recovery key that only you hold; we never receive the key or the backup. If you choose Google Drive, you connect a Google account with Google Sign-In for that purpose only, and the encrypted backup is stored in a hidden app folder in your own Google Drive. We cannot open it, and deleting your PyoorCall account does not remove it; you can delete it from Google Drive.

A backup holds your chats and, only if you turn on "Include photos and videos", the photos and videos your phone has downloaded, each encrypted on its own. You can back up when you choose, or have your phone do it on the schedule you choose (daily, weekly or monthly; off until you turn it on), by default only on Wi-Fi. The app keeps the two newest backups in your Drive and deletes older ones. Google stores the encrypted files and can see their sizes and the times they were saved, but not what is in them. Each file carries a code that lets the app tell your backups apart from another account's on the same Google Drive; Google cannot tell which PyoorCall account or phone number it belongs to.

How PyoorCall uses Google user data. With your permission, the app asks Google for access to its own hidden app folder in your Google Drive (the drive.appdata scope) and nothing else in your Drive. It uses that access only on your phone, to save your encrypted backup and read it back when you restore. The data never passes through our servers, is not used for advertising, is not sold or shared with anyone, and no person at PyoorCall reads it. You can disconnect Google Drive in the app, or remove PyoorCall's access in your Google account settings, at any time.

PyoorCall's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Chats with PyoorCall Support

PyoorCall Support is the official chat pinned at the top of your chat list, where our automatic assistant and our support team answer you. It works differently from your other chats: we keep its messages on our servers, so our team can help you now and look back later. That includes what you write there, any picture you send there, the topics and buttons you tap, the requests you open with us, your rating of our help, and notes our team writes about your request. When you ask for a person, we also note the app version, phone model and operating system of the phone you asked from.

Our support staff see only this chat, with your name, phone number, when you joined, and your phone's model and app version. They never see your other chats. We also post security alerts in this chat, such as a new device linked to your account. You can mute the chat, but security alerts still come through. We keep the Support chat until you delete your account, and it is deleted with your account.

Who we share data with

Only service providers that run PyoorCall for us: Google Firebase (phone verification, Android notifications and crash reports), Apple (iPhone notifications), and our hosting, file storage and call infrastructure providers. They process data on our instructions. We share data with authorities only when the law requires it. Messages you send are, of course, shared with the people you send them to.

Safety

You can block anyone and report users, messages, groups and message requests from inside the app. Because we do not keep messages after delivery, a report sends us only what your phone sends with it: the reported message, or the last few messages of that chat, and your reason. We add who sent each message and when, from our own records. Moderators reviewing a report see the reported account's username, full phone number, country, when the account was made and earlier reports about it. We review reports within 24 hours and act on content and accounts that break our Terms of Service.

If an account breaks our terms, we can suspend it until a date we set, or ban it. Its owner sees a screen in the app that says so and why. From that screen they can ask us to review the decision, save their chats, and still delete their account.

If we ban an account for breaking our terms, we can also ban its phone number, so that it cannot be used to make a new account. For this we keep a scrambled (hashed) form of the number, not the number itself, even if the account is later deleted.

How long we keep data

• The content of a message is kept only until it has been delivered to every device it was sent to, and at most 30 days. Your account details and call history are kept while your account exists.
• Your chat with PyoorCall Support, the pictures sent in it, your support requests and our team's notes on them are kept until you delete your account, and are deleted with it.
• IP addresses are removed from device, session and account security records after 90 days.
• Records of which links you asked to preview are deleted after 30 days.
• Records of which phone carried a message sent through Nearby delivery are deleted after 7 days.
• Closed support requests, completed deletion requests and resolved reports are deleted a year after they are closed.
• Message request records (who started a chat, how they found you, and whether it was accepted) are kept while the chat exists.
• Requests to review a ban or suspension are deleted 90 days after we answer them.
• The hashed form of a banned phone number is kept for as long as the ban stands, and deleted if the ban is lifted on review.

How to delete your account

You can delete your account in the app under Profile → Delete account. If you cannot open the app, you can ask us to delete your account on the web.

Deleting your account erases your profile, phone number, username, photo and media, the messages and reactions you sent, your contacts matches, blocks, privacy settings, devices and notification tokens, your location and News and offers record, and signs you out everywhere. What remains: a record that an account was deleted, holding no phone number; the calls you took part in, shown to the other person as a deleted account; messages other people sent you; reports about content, which are kept for safety for up to a year after they are resolved; and, only if the account was banned, the hashed form of its number described under Safety.

Children

PyoorCall is not meant for children under 13, and we do not knowingly allow them to create an account.

Changes and contact

We will post any change to this policy here and update the date above. Questions about privacy: contact support.