ScamSlayer

Privacy Policy
Last updated: May 14, 2026

1. Information We Collect

a) User Phone Number

During initial setup, we ask you to provide your phone number. The number is used solely to associate call recordings with the correct user — when a call is forwarded via the carrier, the phone number is the only available identifier.

b) Call Recordings

When an AI persona communicates with a caller, the entire conversation is recorded and stored on our server. A recording includes:

• Audio recording of the call
• Automatically generated text transcript
• Caller's phone number (the scammer)
• Date, time, and duration of the call
• The AI persona used

c) Custom Personas

If you create a custom AI persona, we store the description you provided, the generated portrait, voice configuration, and backstory.

d) Technical Data

• Firebase Cloud Messaging token (for delivering push notifications)
• Call forwarding setting (enabled/disabled)

2. Information We Do NOT Collect

• We do not track your location
• We do not read your contacts, SMS, or call history
• We do not record calls you answer yourself — only rejected calls forwarded to AI
• We do not collect advertising IDs or analytics data

3. How We Use Your Information

• Phone number: only to associate recordings with your account and configure call forwarding
• Recordings: displayed in the app; shared only at your request
• FCM token: to deliver push notifications about completed recordings

We do not use your data for advertising purposes, we do not profile you, and we do not sell your data to third parties.

4. Third-Party Services

We use the following services to operate the application:

• Twilio — receiving and processing phone calls
• Anthropic (Claude AI) — generating AI persona responses
• ElevenLabs — voice synthesis (text-to-speech)
• Deepgram — speech recognition (speech-to-text)
• Google Firebase — push notifications
• Google Imagen — generating portraits for custom personas

These services only process data necessary for their function (e.g., Twilio processes call audio, Deepgram transcribes speech). We do not share your phone number or personal information with them.

5. Data Storage and Security

• Recordings and personal data are stored on a secured server
• Communication between the app and server is encrypted (HTTPS)
• API access is protected by an authentication key
• You can delete any recording at any time directly in the app

6. App Permissions

The application requires the following Android permissions:

• CALL_PHONE — to automatically configure call forwarding via carrier USSD codes. When the user enables the "Auto-forward to AI" toggle, the app sends a USSD request to the carrier to set up busy/rejected call forwarding to our service number. This is the core functionality of the app.
• READ_PHONE_NUMBERS — to automatically detect the user's phone number during initial setup, so they don't have to type it manually
• POST_NOTIFICATIONS — to display notifications when a call recording is completed
• INTERNET — to communicate with the backend server

7. Your Rights

You have the right to:

• Delete any recording in the app
• Delete custom personas you created
• Request deletion of all your data — contact us at the email below
• Stop using the app and disable call forwarding at any time

8. Call Recording and Legal Considerations

ScamSlayer only records calls that you have rejected and that were forwarded to AI. We do not record calls you answer personally. Recording takes place on the server side, not on your phone.

Recordings of scam calls serve consumer protection purposes. We recommend complying with local laws regarding call recording.

9. Children

The application is not intended for children under 13 years of age. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes through the application.

11. Contact

If you have questions about this privacy policy, contact us:

Email: marko@haulis.com