Privacy Policy

What PCall holds, what it never holds, and what leaves your device.

Last updated: 25 September 2026

In short

PCall carries no advertising, no analytics SDK and no tracking of any kind. Nothing about you is sold, rented or shared with data brokers. Message content is end-to-end encrypted and unreadable to us, including by us.

What we store

  • Your display name, your calix1… address and your avatar, so the people you talk to can recognise you.
  • Push notification tokens from Apple and Google, so an incoming call can ring a phone that is asleep.
  • The addresses you have added as contacts, and the addresses you have blocked.
  • Encrypted message content, held only until it is delivered to the recipient's device.
  • Photos, video, voice messages and files you attach to a chat, encrypted so we cannot open them. Each is deleted from our server soon after every recipient's phone has downloaded it, and 30 days after upload at the latest. After that it exists only on the phones of the people in the chat.
  • Posts, comments and likes in the Social tab, in the clear, until you delete them.
  • Abuse reports you file, kept as moderation history.

What we never store

  • Your recovery phrase and your private keys. They are generated on your device and never leave it.
  • The readable content of your messages, or the audio and video of your calls.
  • A phone number, an email address or a password — the app never asks for one.
  • Your location, unless you choose to share it in a chat. The app never reads it in the background.
  • Your device's address book. Contacts are added by scanning a QR code, not by uploading your phone book.

What leaves your device, and where it goes

Messages go to the people you send them to, through our server, encrypted so that the server relays what it cannot read.

Push tokens go to Apple's and Google's notification services, which is what makes a locked phone ring. The push for an incoming call carries the routing fields the app needs to show the call — who is calling and which room to join — and never message content.

Nothing is sent to advertisers, analytics providers or data brokers, because the app does not include any.

How long we keep it

  • Messages: until delivered.
  • Media attachments: until every recipient has downloaded them, 30 days at most.
  • Social posts and comments: until you delete them, or until you delete your account.
  • Abuse reports: kept as moderation history after the account they concern is gone.

Deleting your account

Profile → Delete Account permanently removes your profile, your contacts, your group memberships and your Social posts from our server. Data held on your device is destroyed when you delete the app. Neither can be undone, and the recovery phrase will not bring a deleted account back.

Children

PCall is not directed at children under 13, and we do not knowingly collect information from them.

Changes

If this policy changes in a way that affects what we hold or where it goes, the change is posted here with a new date.

Contact

Questions about this policy, or a request about your data: pyrasys.one@gmail.com.