Privacy Policy

Last updated 17 September 2026. For businesses using convertCall, and for the people who call them.

Who this is about

convertCall is used by businesses. The business — your employer, or whoever gave you this phone — is the operator of the account this app signs into, and decides what the app says on their behalf. There are two different people in this policy:

• The person holding the phone. An employee or contractor of the operator.
• The caller. A member of the public who rang that phone and is sent a reply. They never installed anything and never agreed to anything — which is why this policy is stricter than the app's size suggests.

What the app does

When a call arrives on this phone, the app reads the incoming caller's number, asks the operator's server whether that caller should be replied to, and — if the answer is yes — sends them one SMS written by the operator. It does this whether or not the call was answered. Nobody presses send.

What this app automates

convertCall is a device automation app: it runs a small set of automations on the phone it is installed on, each one the person holding the phone can see and switch off. This is the complete list — there is nothing else the app does in the background.

• Reply to calls by SMS (on by default) — after a call ends, the caller gets the operator's message: one written for every caller, or separate ones for missed calls, answered calls, calls outside business hours, and — if the operator chooses — a different one for a caller who has heard from the business before. The operator chooses whether to reply to all incoming calls, missed calls only, or answered calls only. We do not read your messages: composing this reply needs only the caller's number, never anything already on the phone.
• Business hours (off by default) — an operator-wide setting for when the business is open. Outside those hours, a call either gets a different, "we're closed" message or no reply at all — the operator's choice.
• Reply to calls by WhatsApp (only if the operator adds it to a template) — not an automatic message: a reply's template can include a link to a WhatsApp number the operator has set for that phone, so a caller who would rather text can continue there. Tapping it only opens WhatsApp with a drafted message; the caller decides whether to send it, and convertCall is not a party to anything said afterward.
• WhatsApp button on sent replies (on by default, this phone only) — on the phone's own History screen, a reply that was actually sent gets a button that reopens WhatsApp, addressed to that same caller, with the same words already typed in. We do not read your messages: nothing is sent until Send is tapped inside WhatsApp itself, and the app does not hold any permission to read WhatsApp, or anything back from it.
• Call-back reminder (off by default, this phone only) — if a missed call has not been called back within a delay the person holding the phone chooses, this phone shows a notification with a Call button. This one runs entirely on the phone — see "Recent calls, for the call-back reminder" below.
• Daily summary (off by default, this phone only) — one notification a day, at a time chosen on the phone, stating how many calls this phone took and how many were replied to.

Business hours is set by the operator and shared by every phone on the account; the call-back reminder, the daily summary, and the WhatsApp button are each phone's own choice and affect only that phone.

What it does not automate. convertCall does not use Android's Accessibility service, has no bulk or broadcast messaging feature, no SMS scheduler for messages you write yourself, and no camera, image or video permission — the app cannot see or capture anything of the kind. We do not read your messages — not your SMS, not WhatsApp, not anything else on the phone — in either of the WhatsApp-related items above or anywhere. The only things convertCall itself ever sends are the single SMS reply described above, and — only if the person holding the phone taps Send inside WhatsApp — a message that person chose to send, in a screen convertCall does not see once it opens.

What is collected

The caller's phone number. Read from the incoming call as it arrives, and sent to the operator's server so it can decide whether a reply is due and record that one was sent. It is used for nothing else — not sold, not shared with advertisers, not used to build a profile. The only place it travels outside the operator's own server is the mobile network that carries the SMS, the same carrier that already handled the call.

The account username and password. Typed into the app once, when the phone is set up, and sent to the operator's server with each request so it knows which business the phone belongs to. Stored on the phone in Android's encrypted preference storage, and excluded from Android backup, so it is not copied off the device.

A random installation identifier. Generated the first time the app signs in, to tell one of the operator's phones from another. It is not an advertising ID and is not derived from any hardware identifier — it says nothing about the device or the person, and means nothing outside the operator's own system.

Recent calls, for the call-back reminder — only while it is switched on

This automation is off by default. If the person holding the phone switches it on, then after a missed call the app checks the phone's own call log — for that one number, since that missed call — to see whether it has since been called back. That check runs entirely on the phone. The result is never sent anywhere: not to the operator's server, not to us, not to anyone. It exists only to decide whether to show a reminder notification on this phone, and switching the automation off stops the check happening at all. This is the only circumstance in which the app reads anything from the call log beyond the number of the call currently arriving.

The daily summary notification

Also off by default. When switched on, it reads this phone's own history of calls it has already handled and shows a count in a notification once a day. Nothing new is collected to produce it and nothing leaves the phone.

What is deliberately not collected

We do not read your messages. The app holds no permission to read your SMS, WhatsApp, or any other messages, and no permission to read your contacts, camera, image, video, or location. It does hold Android's call-log permission, and uses it for exactly two things, both described above: reading the number of the call arriving now, and — only while the call-back reminder is switched on — checking whether one specific number has been called back since a missed call. Neither is ever uploaded.

• Your existing SMS messages — the app holds no permission to read or receive them.
• Anything inside WhatsApp — the app holds no permission that lets it read WhatsApp; it can only open a wa.me web link, the same as tapping one in any other app, which hands control to WhatsApp entirely.
• Your contacts — callers are matched against a blocked-number list, never an address book.
• Your call history, beyond the two uses above — never enumerated in full and never uploaded, under either use.
• Photos, videos or camera access — the app holds no camera, image or video permission.
• Location — no location permission is requested.
• Advertising identifiers — none are read. There is no advertising or analytics library in the app. The one third-party component is Razorpay's payment sheet, which runs only when you choose to pay an invoice — see "Payments" below.

Permissions, and why each is needed

• Read call log (READ_CALL_LOG) — Android delivers the incoming caller's number only to apps holding this permission. Without it the app knows a call arrived but not from whom. Also used, only while the call-back reminder is switched on, to check locally whether one number has been called back since a missed call. Your call history is never uploaded, and never read for any other purpose.
• Send SMS (SEND_SMS) — to send the reply without anyone pressing send, which is the entire product: convertCall does not send any SMS without the operator having set up and activated a template first, and never sends anything the operator did not write. We do not read your messages — this permission sends text, it does not read any, and the app holds no READ_SMS or RECEIVE_SMS permission that would let it.
• Read phone state (READ_PHONE_STATE) — to know the phone is ringing, and on a dual-SIM phone which SIM the call came in on, so the reply is sent from the same number.
• Notifications (POST_NOTIFICATIONS) — for the "watching for calls" notice that keeps the app running between calls, for the call-back reminder, and for the daily summary.
• Run at startup (RECEIVE_BOOT_COMPLETED) — to start answering again after the phone restarts.
• Internet (INTERNET) — to reach the operator's server.

Who the data is shared with

Nobody, beyond the operator's own server and the mobile carrier that delivers the SMS — and Razorpay, only when you pay an invoice from the phone. No third-party service receives the caller's number, the account, or anything else. When you pay, Razorpay receives the invoice amount, the account's name and email address to prefill its sheet, and whatever you enter into that sheet; it does not receive callers' numbers.

How long it is kept

The operator's server keeps a record of replies sent — who was replied to and when — which is what proves a message was sent to a member of the public; the operator is responsible for how long it is retained and for deleting it on request. The phone itself keeps a short local history of calls it has handled — used for the History screen and, if switched on, the daily summary — which is erased when the phone signs out. A call-back reminder check leaves nothing behind once it has run.

Your rights, and how to exercise them

Because the operator decides what is sent and holds the records, requests go to them.

• If you are a caller who received a message and want your number blocked or your record erased, contact the business that messaged you. They can block your number so you are not messaged again, and can delete their record of it.
• If you are the person holding the phone, signing out erases the local history from the device.

If you cannot reach the operator, contact us below and we will put you in touch with them or, where we are able to, act on the request ourselves.

Security

Traffic between the app and the operator's server is encrypted with HTTPS; release builds refuse plain, unencrypted connections outright. Account credentials are held in Android's encrypted preference storage and excluded from device backup.

Payments

An unpaid invoice can be paid from the app's Billing tab or from our website. Either way the payment is taken by Razorpay, a payment provider regulated in India, through its own payment sheet: the app opens the sheet, Razorpay collects your payment details and processes the payment, and our server verifies with Razorpay that the invoice was paid before recording it. Neither the app nor our server stores your card, UPI or bank details. Razorpay also collects device information it uses to prevent fraud; its handling of what it collects is governed by its privacy policy.

Children

This app is a business tool, is not directed at children, and is not designed for or marketed to them.

Changes

If this policy changes materially, the date at the top changes and the current version is published at the same URL.

Contact