🔒 Privacy Policy

WhoCalling Privacy Policy

مين متصل — Caller Identification & Spam Protection

Last updated: June 24, 2026

Table of Contents

🏠
Section 1

Overview

WhoCalling ("مين متصل") is a caller identification and spam protection application developed by Moghazy. This Privacy Policy explains how we collect, use, share, and protect information when you use our app.

Our core purpose is to help you identify unknown callers, protect yourself from spam and fraud calls, and contribute to a shared community caller-ID database — all with your informed consent and full control over your data.

By installing or using WhoCalling, you agree to the practices described in this policy. If you do not agree, please do not use the app.

📊
Section 2

Data We Collect

Data Type What Exactly Required?
Contact List Contact names & phone numbers only Optional
Search queries Phone numbers you search (stored locally only) In-app only
Spam reports Number, category, optional comment you submit If you report
Country selection Country you choose on setup (used for regional results) Yes
Device & usage App version, language preference (anonymous) Yes

✅ What we never collect

We do not collect: call recordings, SMS messages, photos, email addresses, passwords, payment information, precise location, or any biometric data.

👥
Section 3 — Google Play Required Disclosure

Contact List Data — Full Disclosure

⚠️ Important — Read Before Enabling Contact Upload

Uploading your Contact List is completely optional. It is disabled by default. Before any upload takes place, the app displays a dedicated full-screen disclosure and requires your explicit tap of "I understand — upload my contacts." You can decline at any time.

📋 Contact List — Detailed Disclosure

What we read from your Contact List:
Only contact display names and phone numbers. We access no other fields — no email addresses, photos, physical addresses, birthdays, notes, or relationships.

Where this data is uploaded:
Your contact names and phone numbers are uploaded to and stored on our secure server hosted at dfwjjunhonphthhflihk.supabase.co (Supabase cloud database).

How your Contact List data is used:
Uploaded contact names and phone numbers are stored in our caller-ID directory. When any WhoCalling user searches a phone number, matching names from uploaded contact lists may be returned as the caller's identity. This is the core mechanism behind the app's caller identification feature.

Who can see data from your Contact List:
Other WhoCalling users may see names and phone numbers sourced from uploaded contact lists when they perform a phone-number search within the app. Your contacts' names effectively become part of a shared, community-sourced caller-ID database.

How phone numbers are processed:
Phone numbers are normalised (non-digit characters removed, except a leading "+") before upload. No raw contact data is returned to the searching user — only the matched display name is returned.

Your Controls Over Contact List Upload

  • Opt in / Opt out: Contact upload is off by default. You must actively consent via the in-app disclosure screen before any upload occurs.
  • Auto-sync toggle: In Settings → "Auto-sync contacts" you can turn automatic periodic sync on or off at any time.
  • Ghost Mode: Settings → Privacy Center → "Ghost Mode" stops all contact sync and removes your number from directory uploads.
  • Revoke OS permission: Android Settings → Apps → WhoCalling → Permissions → Contacts — revoking this permission immediately prevents any contact access.
  • Remove your number: Settings → Privacy Center → "Remove my number" lets you request deletion of any of your numbers from the public directory.
  • Clear local data: Settings → "Clear local data" removes all cached searches and preferences from your device.

ℹ️ Consent is separate from the Privacy Policy

Accepting this Privacy Policy alone does not grant permission to upload your Contact List. A separate, full-screen in-app disclosure must be shown and accepted before any contact upload takes place.

⚙️
Section 4

How We Use Your Data

  • Caller identification: Contact names and numbers from uploaded Contact Lists are used to identify callers when users search phone numbers.
  • Spam & fraud protection: User-submitted reports are aggregated to produce trust scores and spam warnings for phone numbers.
  • Regional results: Your selected country is used to prioritise relevant local spam lists and number formats.
  • App improvement: Anonymous usage data (app version, language) helps us fix bugs and improve the experience.
  • We do not use your data for: advertising, profiling, tracking, or sale to third parties.
🤝
Section 5

Data Sharing & Disclosure

We do not sell your personal data. Data is shared only in these circumstances:

  • With other app users (Contact List data): As disclosed in Section 3, names and phone numbers from your Contact List (if you consent to upload) may appear in search results shown to other WhoCalling users.
  • Supabase (infrastructure): Our database and API are powered by Supabase. Your uploaded data is stored on Supabase servers. Supabase acts as a data processor and does not use your data for its own purposes.
  • Legal requirements: We may disclose data if required by law, court order, or to protect against fraud or security threats.

No data is shared with advertising networks, social media platforms, or data brokers.

🛡️
Section 6

Your Rights & Controls

You have the following rights over your data:

  • Right to withdraw consent: Turn off contact sync at any time in Settings without affecting other app functions.
  • Right to deletion: Use "Remove my number" in the Privacy Center to request removal from the public directory. Contact us at moghastar2010@gmail.com to request full data deletion.
  • Right to access: You can view what data you have contributed via the Privacy Center in the app.
  • Right to opt out of visibility: Enable Ghost Mode in the Privacy Center to stop contributing to the directory and hide from searches.
  • Right to clear local data: Use "Clear local data" in Settings to remove all locally cached searches and preferences.

✅ How to exercise your rights

Open the app → Settings → Privacy Center. Or contact us directly at moghastar2010@gmail.com. We respond within 30 days.

🗄️
Section 7

Data Retention

  • Contact List data (uploaded): Retained on our servers until you submit a deletion request via the Privacy Center or contact us directly.
  • Spam reports: Retained indefinitely to maintain the community spam database accuracy. Individual identifiers are not retained with reports.
  • Local search history: Stored only on your device. Cleared by you via "Clear local data" or when you uninstall the app.
  • Country & preferences: Stored locally on your device, cleared on uninstall or via "Clear local data."
🔒
Section 8

Security

We take reasonable technical and organisational measures to protect your data:

  • All data is transmitted over HTTPS / TLS.
  • Our server (Supabase) uses industry-standard encryption at rest and in transit.
  • Only anonymised, anon-key access is used — no user authentication tokens are stored on device.
  • Batch uploads are processed server-side with duplicate detection to minimise redundant data.

No system is 100% secure. If you discover a security issue, please report it to moghastar2010@gmail.com.

🧒
Section 9

Children's Privacy

WhoCalling is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us at moghastar2010@gmail.com and we will promptly delete it.

📝
Section 10

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the app. Continued use of WhoCalling after changes take effect constitutes your acceptance of the revised policy.

We encourage you to review this policy periodically.

✉️
Section 11

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:

  • Email: moghastar2010@gmail.com
  • App: WhoCalling / مين متصل
  • Response time: We aim to respond within 30 days.