Privacy Policy
Last updated: September 11, 2026
Welcome to Yosh Call ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this carefully. If you disagree with its terms, please discontinue use of the Service.
1. Information We Collect
We collect the following categories of information:
- Account Information: Email address, display name, and profile photo you provide during registration.
- Usage Data: Call history, session duration, features used, and in-app activity.
- Device Information: Device model, operating system, and crash diagnostic data collected via Firebase Crashlytics.
- Payment & Wallet Data: Coin balance, transaction history, and purchase records. We do not store full payment card details — payments are processed securely by Google Play Billing and/or our third-party payment gateway partner(s).
- Communications: Video and audio streams during live calls are transmitted in real-time via Agora RTC. We do not record, store, or retain call content.
- Technical Data: IP address, log data, crash reports, and app performance metrics.
2. How We Use Your Information
- To create and manage your account
- To facilitate live video and voice calls between users
- To process coin purchases and virtual gift transactions
- To send push notifications about calls and app updates via Firebase Cloud Messaging
- To detect, investigate, and prevent fraud, abuse, and policy violations
- To monitor app stability and fix crashes via Firebase Crashlytics
- To improve, personalize, and expand our Service
- To comply with legal obligations
3. Third-Party Services
We do not sell your personal information. We use the following third-party services that may process your data:
- Agora RTC — Real-time audio/video infrastructure. Audio and video are encrypted in transit and not stored.
- Supabase — Backend database and authentication. Your account data is stored on Supabase's secure servers.
- Firebase (Google) — Crash reporting (Crashlytics) and push notifications (FCM).
- Google Play Billing — Secure in-app purchase processing for coin packages.
- Third-Party Payment Gateway(s) — For coin purchases made outside Google Play, payments are processed by our payment gateway partner(s). We do not store your full card, UPI, or bank account details; these are handled directly by the gateway in a PCI-DSS compliant manner.
- Law Enforcement — We may disclose data when required by applicable law, court order, or government authority. See our Law Enforcement Guidelines.
4. Camera & Microphone Access
The app requests access to your camera and microphone solely for the purpose of conducting live video and voice calls. We do not access these at any other time, and no recordings are made or stored. You can revoke permissions at any time via your device settings, though this will disable call functionality.
5. Data Retention
We retain your account data for as long as your account is active. Transaction records are retained for up to 7 years for financial compliance purposes. Crash logs are retained for 90 days. Upon account deletion, your personal data is permanently removed within 30 days, except where retention is required by law.
6. Account Deletion
You can delete your account at any time directly from within the app:
- Go to Profile → Settings → Delete Account
- Confirm deletion — your account and all associated data will be permanently removed within 30 days
Alternatively, you may request account deletion by emailing yoshcallapp@gmail.com with the subject "Delete My Account".
7. Children's Privacy
Yosh Call is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete it. If you believe a minor has registered, please contact us at yoshcallapp@gmail.com.
8. Data Security
We implement industry-standard security measures to protect your data, including:
- TLS/HTTPS encryption for all data in transit
- Row Level Security (RLS) on our database to prevent unauthorized access
- Secure JWT-based authentication tokens
- Regular security audits and monitoring
In the event of a data breach that affects your personal data, we will notify you as required by applicable law.
9. Your Rights (GDPR & CCPA)
Depending on your location, you have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Request that we limit how we process your data
- Right to Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing of your data for certain purposes
- California Residents (CCPA): You have the right to know what data is collected, to opt out of data selling (we do not sell data), and to non-discrimination for exercising your rights
To exercise any of these rights, contact us at yoshcallapp@gmail.com. We will respond within 30 days.
10. Cookies & Local Storage
Our mobile app does not use cookies. Our website may use essential cookies for basic functionality. We do not use tracking or advertising cookies. Local storage on your device is used only to maintain your session and app preferences.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including reliance on standard contractual clauses where required by law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email at least 7 days before the changes take effect. The updated date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:
We take privacy seriously and will respond to all inquiries within 5 business days.