Privacy Policy

Last updated: 21 October 2026

1. Who we are

KiloCall is a prepaid international calling app for iPhone, developed and operated by Md. Nasar Uddin Redoy, an individual developer based in Bangladesh and the seller of KiloCall on the App Store (“KiloCall”, “we”, “us”). We are responsible for (the “controller” of) the personal data described here. Questions or requests: developer.nasar416@gmail.com.

2. What we collect and why

Account

• Sign in with Apple — the identifier Apple gives KiloCall for you, the email address Apple shares with us (often a private relay address that hides your real one) and your name if you choose to share it. We also keep a token from Apple so that, when you delete your account, we can tell Apple to remove KiloCall’s access.
• Phone number — if you sign in with a one-time SMS code (where the app offers it) or verify your mobile number so your calls can show it as caller ID. We use it to identify your account, as caller ID, and to work out your country for prices and abuse protection.
• Name and email — optional, only if you add them to your profile; used to personalise the app and to answer support requests.
• App language, your invite code, and who invited you (if anyone) — to show the app in your language and to pay invite rewards.
• Sign-in sessions — a device label and expiry for each signed-in iPhone, so you stay signed in and can be signed out.

Calls, recordings and voicemail

• Call history — the other party’s number, time, duration, price and outcome (for example “busy”) of calls you make and receive. We use it to bill calls, show your Recents and handle disputes. It is deleted automatically after the period you choose in Settings → Data & Privacy: 30 days, 6 months or 1 year (the default). You can delete single calls or your whole history at any time.
• Call audio is not recorded unless you subscribe to Call Recording and turn it on. Otherwise it travels in real time through our telephone carrier and is not stored by KiloCall.
• Call recordings — only while you have Call Recording on: the audio of your answered calls (both sides), the other person’s number, the direction and the length. Every recorded call starts with an announcement, heard only by you, that the call is being recorded; it is not part of the recording. Recordings are kept in our storage and on your iPhone until you delete them, also after your subscription ends; deleting one in the app deletes our copy too, and deleting your account deletes them all. Our carrier’s copy is deleted as soon as we have stored ours.
• Voicemail — if you have a KiloCall number: the audio messages callers leave for you and the caller’s number. Voicemail is deleted automatically after 30 days, or earlier when you delete it; our carrier’s copy is deleted as soon as we have stored ours.
• Caller ID choices — which number your calls show (your mobile, your KiloCall number, another number you verified with a code, or hidden), and the other numbers you verified.
• KiloCall number settings — Do Not Disturb hours, your time-zone offset and whether unanswered calls forward to your mobile.

Payments and credit

• Purchases — App Store transaction IDs, product, amount, dates, renewal, expiry and refund status, to add credit and manage subscriptions. Payment is handled entirely by Apple: we never see your card or bank details.
• Credit history — every top-up, call charge, bonus, refund and correction, so your balance is always accurate.

Feedback

• Feedback you send — only if you choose to send it (Help & Support → Send Feedback, or when the app asks after a week of use): your message, the topic you pick, a reply email if you give one, and the app version, iOS version, iPhone model and app language, kept with your account. We use it only to improve KiloCall and to answer you. Sending feedback is never needed to use the app.

Device and technical data

• Install ID — a random identifier the app creates and keeps on your iPhone (not a hardware or advertising ID). It links credit you buy before signing in to your account. When an account is created, a one-way hash of it is stored so that invite rewards are paid only for a phone’s first KiloCall account.
• Push notification tokens — to tell you about missed calls, voicemail, saved recordings, low credit, service notices and, if you opt in, offers. A VoIP push token is registered with our telephone carrier so incoming calls ring your iPhone.
• IP address — used for a short time to block abuse (for example, too many codes requested); these counters are deleted within 2 days. Our hosting provider also keeps short-lived request logs for security and reliability.
• Country — when you first sign in with Apple, the country your IP address belongs to is saved with your account (the country only, never a more precise location). It sets the country whose call prices Home shows, and lets us send service notices and, if you opt in to offers, offers to people in a given country.

What stays on your iPhone

• Contacts. The app reads your iPhone contacts so you can see names and call people. Your address book is never uploaded. A contact you create in KiloCall, with its photo, is saved to your iPhone’s Contacts only.
• Microphone. Used only during calls. The camera is never turned on: KiloCall makes voice calls only.

What we don’t collect

• No advertising identifiers, no third-party analytics or advertising tools, and no precise location: the only location we keep is the country described above.
• No call-quality measurements: the “Share Call-Quality Data” setting sends nothing today. If that changes, this policy will say what is sent before it starts.

3. Legal bases (where GDPR or similar laws apply)

• Contract — to provide the service you signed up for: account, calls, numbers, recordings, voicemail, credit and purchases.
• Legitimate interests — to prevent fraud and abuse (rate limits, one invite reward per phone, blocking spoofing and suspicious accounts) and keep the service secure, and to improve KiloCall from the feedback you choose to send, balanced against your rights.
• Consent — offers, and sharing purchase usage with Apple when you ask Apple for a refund. You can withdraw consent at any time in Settings.
• Legal obligation — where we must keep or disclose information by law.

4. Who we share data with

We use a small number of service providers (“processors”) who handle data only on our instructions:

• Telnyx — our telephone carrier. Connects your calls, sends verification codes, provides KiloCall numbers, rings your iPhone for incoming calls and records voicemail and, if you use Call Recording, your calls; we copy those recordings to our own storage and then delete Telnyx’s copy. Like any carrier, Telnyx keeps its own call detail records (numbers, times and durations) for billing, fraud prevention and legal obligations, under Telnyx’s privacy policy.
• Cloudflare — hosts the KiloCall service, its database and file storage (recordings, voicemail and data exports).
• Apple — Sign in with Apple, App Store payments, subscriptions and refunds, and push notifications. If you turn on “Share Usage With Apple”, then when you ask Apple for a refund we tell Apple whether the purchase was delivered and how much of it you used — nothing else. Apple’s own privacy policy applies to your Apple account.

When you call someone, the networks that connect the call (and the person you call) see your caller ID unless you choose “hidden”. We disclose information to authorities only when the law requires it. We never sell your personal data or share it for advertising.

Our providers may process data outside your country, including in the United States. Where data-protection law requires it, these transfers rely on the safeguards in each provider’s data-processing terms, such as the European Commission’s Standard Contractual Clauses.

5. How long we keep data

Call history

30 days, 6 months or 1 year — your choice (default 1 year).

Call recordings

Until you delete them or your account.

Voicemail

30 days, or until you delete it.

Notifications in the app

90 days.

Data exports

7 days after you request one.

Abuse counters (IP, phone)

Up to 2 days.

Deleted accounts

Only one-way hashes (SHA-256) of the phone number and Apple identifier, kept so the welcome bonus and invite rewards are paid once per person.

Install ID hashes

Kept without any link to an account, also after it is deleted, so invite rewards are paid once per phone.

Everything else

While your account exists. When you delete your account it is erased from our database and storage straight away; backups our hosting provider keeps for recovery expire within 30 days.

6. Your choices and rights

• Download your data — Settings → Data & Privacy → Download My Data gives you a file with your profile, calls, credit history, purchases, numbers, caller IDs, notifications, the feedback you sent and the list of your recordings.
• Correct — edit your name, email and language in the app.
• Delete — delete single calls, voicemails or recordings, or your whole account (Settings → Edit Profile → Delete Account, or Settings → Data & Privacy). Deleting your account also releases your KiloCall numbers and removes any remaining credit; App Store subscriptions must be cancelled in your Apple Account settings.
• Choose — turn offers, sharing usage with Apple and showing calls in iPhone Recents on or off, and choose how long call history is kept.
• Depending on where you live, you may also have the right to access, correct, delete or move your data, to object to or restrict processing, to withdraw consent, and to complain to your data-protection authority. Contact developer.nasar416@gmail.com; we answer within one month.

7. Security

Connections to KiloCall use TLS, call audio is encrypted between the app and our carrier (SRTP), and our providers encrypt stored data. Admin access to KiloCall systems is limited to authorised people, protected by strong passwords and two-step verification, and every admin action is logged.

8. Children

KiloCall is not directed at children under 13 (or the higher minimum age where you live). We don’t knowingly collect their data; if you believe a child has created an account, contact developer.nasar416@gmail.com and we will delete it.

9. Changes

We update this policy when the app changes what it collects, keeps or shares, and change the date above. If a change is significant we will tell you in the app before it takes effect.

10. Contact

developer.nasar416@gmail.com · Md. Nasar Uddin Redoy, Bangladesh