Privacy Policy

Information we handle

App operation

• Anonymous app identifier. Firebase creates an anonymous user ID so chat and unread state work without asking for your name, email address, or phone number.
• AI chat. If you use character chat, the text you submit and recent chat context are sent through Google Firebase to OpenAI to generate the reply. A temporary session record and generated reply are stored in Firestore.
• Scheduled calls. To deliver a requested fake incoming call, we process an Apple push token, the selected fake caller or number, and the requested timing.
• Suggestions and support. If you submit a caller suggestion or contact support, we receive the text you choose to send and any contact details included in your message.
• Purchases. Apple processes payments. We receive entitlement and transaction status through StoreKit as needed to unlock and restore purchases in the app. We do not receive your payment-card details or send purchase events to a separate analytics provider.

Technical information

Firebase and our service providers may process ordinary diagnostic, security, and request-log information when the app connects to their services. Vercel processes standard request logs when you visit this website. We do not use a separate product-analytics service in the app.

Information that stays on your device

If you choose Contacts access, Incoming Call uses it only on your device to find, add, or remove caller entries used for the fake-call display. Your address book is not uploaded. Custom caller photos and audio, and microphone or speech activity used during calls, stay on your device.

How we use information

We use the information described above to:

• provide chat, scheduled calls, purchases, and support;
• maintain entitlements and app state;
• protect, troubleshoot, and operate the service; and
• respond to requests and improve the app.

We do not sell personal information. The app contains no third-party advertising, and we do not use this information to track you across other companies' apps or websites.

Service providers

We share information only as needed with providers that help run the app: Apple (StoreKit, PushKit, and notifications), Google Firebase and Google Cloud (authentication, database, functions, and hosting), OpenAI (AI chat generation), Slack (caller suggestions), and Vercel (this website). These providers process information under their own terms and privacy commitments. We may also disclose information when required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate safeguards.

Retention and deletion

New Firestore chat session and generated-reply records are marked to expire 24 hours after creation. The app also attempts to delete them sooner when you leave a completed chat. Firestore normally processes an expired record within a further 24 hours. Deleting a chat record does not control a provider's separate security logs; OpenAI may retain API abuse-monitoring logs containing prompts and responses for up to 30 days unless a shorter approved setting applies.

Caller suggestions and support correspondence are kept while needed to review or respond. Anonymous identifiers, call-delivery records, and operational logs are kept only while reasonably needed for the purposes above, legal obligations, and security, then deleted or de-identified. Removing the app does not by itself notify us to delete server-side records.

To request deletion or access, email team@onlywidget.com. Because the app does not ask for an account email, we may ask for the anonymous app identifier needed to locate the relevant records.

Your choices and rights

You can decline optional Contacts, Microphone, Speech Recognition, or Notification permissions, and can change them in iOS Settings. Depending on where you live, you may also have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. Email us to make a request or ask a privacy question. You may also complain to your local data protection authority.

International processing and security

We and our providers may process information in the United States and other countries. We use reasonable administrative and technical measures intended to protect information, but no online service can guarantee absolute security.

Children

Incoming Call is a general-audience entertainment app and is not directed to children under 13. We do not ask for a name, email, phone number, or date of birth to use the app. If you are a parent or guardian and believe a child submitted personal information, contact us so we can review and delete it where appropriate.

Changes to this policy

We may update this policy when the app or our practices change. The effective date above will show the latest revision. Material changes will be communicated where required.

Contact

Nibble Audio Inc.
team@onlywidget.com