Privacy | Guardianly - Your AI Call Assistant

Privacy Policy for the Guardianly App

Last Updated: September 28, 2025

What is this policy?

Guardianly, Inc. ("Guardianly," "we," "our," or "us") values your privacy and we have prepared this Privacy Policy ("Policy") to help you understand how we collect, use, and disclose information that we obtain about and from users of our mobile application, products, services, and corresponding websites (collectively, our "App"), and how we use and disclose that information.

By accepting our Terms of Service and this Policy and/or using our App, you agree that your personal information will be handled as described in this Policy. Your use of our App is subject to this Policy and our Terms of Service.

Service Availability: Guardianly is currently available only in the United States.

Who are we?

We are Guardianly, Inc. We are the controller in relation to the personal information processed in accordance with this Policy.

Our contact details:

Email: support@guardianly.ai
Address: 131 Continental Drive, Suite 305, Newark, DE 19713

What does the Guardianly App do?

The Guardianly App enables users to:

Receive a new US phone number for making and receiving calls and SMS messages
Make and receive calls using their new Guardianly phone number and their own phone number
Optionally forward calls from their existing phone numbers for scam protection and productivity enhancement
Block potentially unwanted calls (e.g. scams and spams)
Detect and warn about potential scam calls using real-time analysis by AI
Analyze uploaded images and text content for potential scams through our ScamScan feature
Automatically receive and store voicemails from missed or rejected calls
Generate AI-powered call summaries, notes, and action items from conversations
Track and manage action items and tasks derived from calls
Organize call-related productivity information and follow-ups
Provide localized experiences, e.g. live call translation, in multiple languages

The App is offered by Guardianly on a purely opt-in basis and users can disable features, cancel subscriptions, delete their accounts or uninstall the App at any time.

Whose personal information do we process?

We may process personal information relating to you if:

You use our App - You have downloaded and are actively using Guardianly
You call or are called by our users - When you call one of our users or receive a call from one of our users, we may process your phone number to provide caller identification and scam detection services to our users
Your information is provided by third parties - Including data providers, public records, or other lawful sources with appropriate consent or legal basis
You are someone we want to reach for marketing - We may have obtained your information directly or from other sources for marketing purposes

What personal information do we process?

We may obtain information about you in a variety of ways. The personal information relating to you that we process may include:

Contact Information: During registration, we collect and verify your phone number through SMS or caller ID verification. Name (first and last) and email address are optional and can be added later in Settings if you choose to provide them. This information is stored on our secure servers to manage your account and provide personalized services.

Device Contact Lists: When you grant permission, we access and upload your device's contact list to our servers using intelligent sync algorithms that minimize data transfer. This enables us to display caller names during calls, identify known contacts, and provide the "Scan Unknown Numbers Only" feature. Contact phone numbers are encrypted before transmission and stored securely on our backend systems to protect privacy while enabling contact matching. We implement smart sync logic to minimize unnecessary data transfers and optimize performance.

Call Information: We collect call metadata including phone numbers from incoming and outgoing calls, call duration and timestamps, call connection information, call types (inbound/outbound/missed), call status, call routing data, and other technical metadata necessary to provide VoIP calling and scam detection services. All call content (transcripts, summaries, follow-ups, etc) is stored locally on your device for privacy. Call feedback data (thumbs up/down ratings for call quality and scam detection accuracy) is collected to improve our services. Only call metadata is stored on our servers for service functionality and call history management.

Audio Data: We process audio data in real-time during calls through secure connections for scam detection analysis and to generate AI-powered call summaries, notes, and action items. This real-time analysis is performed using third-party AI services (OpenAI and Google) that receive and process audio content for conversation analysis, scam detection, and content generation. We store voicemail recordings when callers leave messages for you, which can be played back or deleted through the App. Voicemails are stored on Twilio's secure infrastructure. All call content including transcripts, summaries, and action items are stored locally on your device only.

Identifiers and Technical Information: We collect and store unique user identifiers to manage your account and associate data with your profile. We also collect device identifiers including device tokens for push notifications, VoIP push tokens for call delivery, Apple App Store transaction identifiers for subscription management, and other device-level identifiers necessary for app functionality. Additional technical information includes operating system details, app version, device model, network connection information, app configuration settings, and language preferences. This technical data is stored securely with appropriate encryption and access controls.

Subscription and Purchase Data: We track your subscription status, subscription tier (monthly/yearly), purchase history, payment transaction details (processed through Apple App Store), subscription renewal dates, trial eligibility, and transaction linking data for your account. This information is stored on our servers to manage your account access and billing, with integration to Apple's subscription services for real-time status updates.

Usage Data and App Interactions: We collect information about how you use the App, including app launches, feature usage, settings preferences, navigation patterns, connection patterns, notification interaction rates, SMS message threading and metadata (but not SMS content), and other interaction data. We also collect performance metrics including app crash reports and network performance statistics. This helps us improve the App and understand user behavior patterns.

Account Preferences and Settings: We store your app settings, notification preferences, call blocking preferences, feature configurations, language preferences, scam detection sensitivity settings, contact sync preferences, and other user-controlled settings on our servers to maintain consistency across devices and app updates. These settings are synchronized between your device and our backend services.

SMS and Messaging Data: We collect and process SMS message metadata including conversation threading, message timestamps, sender/recipient phone numbers, and message status for organizing conversations and providing notification features. However, we implement privacy-by-design principles by storing actual SMS message content only on your local device, not on our servers. This ensures your private conversations remain private while still enabling organizational features.

Location and Regional Data: We collect country and regional information for providing localized experiences and ensuring service availability (currently limited to the United States). We do not collect precise location data or GPS coordinates.

AI and Machine Learning Data: We process conversation content through third-party AI services (Google and OpenAI's models) for generating call summaries, extracting action items, performing sentiment analysis, and detecting potential scams. This processing includes sending audio transcripts and call metadata to these services, which have their own privacy policies governing data handling.

ScamScan Data: When you use our ScamScan feature, we collect and process images and text content that you voluntarily upload for scam analysis. Uploaded images are stored on our servers (Google Cloud Storage) with unique identifiers and processed through AI services to analyze content for potential scams, fraudulent patterns, and suspicious elements. Text content entered for analysis is also processed through our AI systems. ScamScan conversations, messages, and analysis results are stored on our backend servers (Google Cloud Platform) to provide consistent access across devices and app updates. You can delete individual ScamScan conversations through the app, which will also remove them from our servers.

How We Use Your Information

We use the collected information for the following purposes:

Primary Service Delivery

Provide VoIP calling functionality through both your original phone number or assigned new number
Send and receive SMS messages through your assigned US phone number
Generate AI-powered call summaries, notes, and action items
Provide localized app experiences in multiple languages
Detect and warn about potential scam calls in real-time using AI
Analyze uploaded images and text through ScamScan feature for potential scams and fraud detection
Store and manage voicemails from missed or rejected calls on secure cloud infrastructure
Provide task tracking and productivity management features
Enable call management and blocking features

Service Improvement and Analytics

Analyze usage patterns to improve features and user experience
Enhance scam detection algorithms and accuracy using machine learning models
Improve ScamScan analysis accuracy and detection capabilities through machine learning
Improve call quality and connection reliability through network performance monitoring
Develop new features and capabilities based on user interaction data
Conduct research and statistical analysis on call patterns and scam trends
Analyze ScamScan usage patterns to improve fraud detection capabilities
Monitor app performance and stability through crash reporting and performance metrics
Optimize database queries and WebSocket connection patterns
Improve AI model performance for call analysis and content generation

Security and Safety

Protect against fraudulent activities and security threats
Maintain service security and prevent abuse
Comply with legal obligations and law enforcement requests

Communication and Support

Provide customer service and technical support through email channels
Send important service announcements and updates via email using SendGrid services
Respond to user inquiries and feedback
Send marketing communications (with consent where required)
Deliver push notifications for calls and alerts through Apple Push Notification service
Send push notifications through Apple PushKit for incoming calls
Provide SMS badge count notifications and conversation threading
Send scam detection alerts and security warnings

Data Storage and Processing

Backend Storage: Most of the data we collect is transmitted to and stored on our secure cloud servers to provide consistent service across devices and enable core app functionality. This includes encrypted contact phone numbers, call history and metadata, voicemail recordings, ScamScan conversations and uploaded images, account information, subscription data, and user preferences. We implement automatic data cleanup policies to remove outdated information.

Local Processing: Some data processing occurs locally on your device for performance and privacy reasons, including real-time call audio processing, all call content storage (transcripts, summaries, follow-ups, action items), SMS message content storage (content never stored on servers), temporary contact matching, and call feedback storage. Local data is stored securely on your device with appropriate encryption and access controls.

Third-Party Processing: We utilize several third-party services for data processing:

Google Cloud Platform for secure cloud infrastructure and data storage
Google AI Services for call transcript analysis, summary generation, scam detection, and ScamScan image/text analysis
OpenAI services for call transcript analysis, summary generation, scam detection, and ScamScan image/text analysis
Twilio services for VoIP calling, SMS routing, and telecommunications infrastructure
Apple services for push notifications, subscription management, and payment processing
SendGrid for email communications and support messaging

Data Synchronization: Your data is synchronized between the app and our backend services using secure, authenticated connections to ensure consistent functionality and access to your information across app updates and device changes.

Data Sharing and Third-Party Services

Service Providers: We share your information with specific third-party service providers who perform functions on our behalf:

Google Cloud Platform - Provides secure cloud infrastructure for data storage and processing. Hosts our backend services and databases. See Google's Privacy Policy for their data handling practices.
Google AI - Processes call transcripts and audio data for AI-powered analysis, scam detection, and call summary generation. Also processes ScamScan uploaded images and text content for fraud analysis. Receives conversation content, call metadata, images, and text submissions. See Google's Privacy Policy for their data handling practices.
OpenAI L.P. - Processes call transcripts and audio data for AI-powered analysis, scam detection, and call summary generation. Receives conversation content and call metadata. See OpenAI's Privacy Policy for their data handling practices.
Twilio Inc. - Provides VoIP calling infrastructure, SMS routing, and telecommunications services. Receives call routing data, phone numbers, and audio streams. See Twilio's Privacy Policy for their data handling practices.
Apple Inc. - Processes call transcripts and audio data for AI-powered analysis, scam detection, and call summary generation. Also processes ScamScan uploaded images and text content for fraud analysis. Receives conversation content, call metadata, images, and text submissions. See OpenAI's Privacy Policy for their data handling practices.
SendGrid (Twilio Inc.) - Handles email communications for customer support and service announcements. Receives email addresses and communication content. See Twilio's Privacy Policy for their data handling practices.

Business Transfers: If we are acquired, merged, or transfer substantially all of our assets, we may transfer your information to the acquiring entity.

Legal Requirements: We may disclose your information to comply with legal obligations, court orders, or law enforcement requests, or to protect our rights and safety.

No Sale of Personal Information: We do NOT sell, trade, or otherwise transfer your personal information to third parties for their marketing purposes.

Data Security

We implement industry-standard security measures to protect your information:

Encryption: API communications and sensitive data transmissions use HTTPS and other secure protocols
Contact Data: Phone numbers from contact lists are encrypted before transmission and storage to protect privacy while enabling contact matching
Authentication: Authentication tokens are stored securely on your device with appropriate protections
Voicemail Security: Voicemail recordings are stored with encryption and access controls on Twilio's secure infrastructure
Database Security: Secure databases with encrypted storage, access controls, and connection security
Access Controls: Limited access to personal data on a need-to-know basis with role-based permissions
API Security: Authenticated endpoints with rate limiting and input validation
Regular Security Audits: We regularly review and update our security practices
Secure Infrastructure: We use secure cloud infrastructure with appropriate safeguards
Data Isolation: User data is properly isolated and associated with unique user identifiers
Session Management: Secure session handling with validation and automatic cleanup

Data Retention

We retain your personal information only while your account is active. When you delete your account, we immediately delete all your personal data from our systems:

Contact information and call logs: Retained while your account is active, deleted immediately upon account deletion
Hashed contact data: Retained while your account is active, deleted immediately upon account deletion
Voicemail recordings: Kept until you delete them individually or close your account
Call content (transcripts, summaries, action items): Stored locally on your device only and cleared when app is deleted
ScamScan data (conversations, analysis results): Retained on our servers while your account is active, deleted when you delete individual conversations through the app or upon account deletion
ScamScan uploaded images: Stored on Google Cloud Storage and deleted when you delete individual conversations through the app. Account deletion removes image metadata but may require additional cleanup of stored image files
Account information: Deleted immediately upon account deletion
Usage data and analytics: Anonymized data may be retained for service improvement
Subscription data: Minimal records retained only as required for tax and financial compliance
SMS message metadata: Retained while account is active, deleted upon account deletion (message content is only stored locally)
AI processing data: Data sent to third-party AI services is subject to their respective retention policies
Crash reports and performance data: Anonymized data may be retained for debugging

When you delete your account through the app's Settings, we immediately initiate deletion of all your personal data across our systems.

Your Rights and Choices

You have the following rights regarding your personal information:

Device Permissions: You can revoke contact access, microphone access, camera access, photo library access, and notification permissions through your device settings. The app includes graceful permission handling that disables features when permissions are denied while maintaining core functionality. Camera and photo library permissions are required only for ScamScan image upload functionality.

Data Rights: You can delete your account and all associated data directly through the app's Settings, which will immediately initiate deletion across all our systems. You can also request access to or correction of your personal data by contacting us at support@guardianly.ai.

Voicemail Control: You can play delete individual voicemails at any time through the app with immediate effect.

SMS Privacy Control: SMS message content is stored only on your local device and never transmitted to our servers, giving you complete control over your private conversations.

Contact Sync Control: You can control contact synchronization frequency and disable contact-based features through app settings. Contact data uploaded to our servers is encrypted to protect privacy while enabling caller identification.

AI Processing Opt-Out: While AI analysis is integral to our scam detection features, you can control the extent of AI processing through app settings and feature toggles. ScamScan is entirely opt-in - you choose what content to upload for analysis.

ScamScan Privacy Control: ScamScan conversations, analysis results, and uploaded images are stored on our secure servers to provide consistent access across devices. You have complete control over your ScamScan data and can delete individual conversations at any time through the app, which will also remove them from our servers.

Subscription Management: You can manage your subscription, including cancellation, through the Apple App Store or by contacting our support team.

Push Notifications

We send push notifications through Apple's Push Notification service for:

VoIP Push Notifications: Delivered through Apple PushKit for incoming calls when the app is backgrounded or closed
Regular Push Notifications: For missed call notifications, voicemail alerts, and scam warnings
SMS Notifications: Badge count updates and message threading notifications
Security Alerts: Real-time scam detection warnings and suspicious activity alerts
Service Updates: Important announcements about app functionality and service changes
Subscription Notifications: Alerts about subscription status, renewals, and payment issues

Push notification content may include caller information, call details, and scam detection results. VoIP push notifications contain minimal data required for call routing and are handled according to Apple's privacy standards.

You can disable push notifications through your device settings or manage specific notification types through the app's settings. Disabling VoIP push notifications will prevent you from receiving calls when the app is not actively running.

Automated Decision-Making and Scam Detection

While our App does not rely on solely automated decision-making that would have legal effects on you, we do use automated systems for:

Scam Call Detection: Analyzing call patterns, audio content, and conversation transcripts using AI models from Google and OpenAI to identify potential scams in real-time
ScamScan Analysis: Automatically analyzing uploaded images and text content using AI models from Google and OpenAI to detect potential scams, fraudulent patterns, and suspicious elements
Call Categorization: Automatically categorizing calls as spam, fraud, or legitimate based on machine learning algorithms and user feedback
Content Generation: Using AI to automatically generate call summaries, notes, and action items from conversation transcripts
Contact Matching: Automatically matching incoming calls with your contacts using hashed phone number comparison
SMS Organization: Automatically threading SMS messages and organizing conversations

These automated systems operate in real-time during calls and may influence the information presented to you about incoming calls. The AI analysis includes sending call transcripts, audio data, uploaded images, and text content to third-party AI services (Google and OpenAI) for processing.

Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by:

Posting the updated policy in the App
Sending an email notification (if you've provided an email address)
Displaying a prominent notice in the App

Your continued use of the App after changes constitutes acceptance of the updated policy.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@guardianly.ai
Address: 131 Continental Drive, Suite 305, Newark, DE 19713

For technical support: support@guardianly.ai
For privacy inquiries: support@guardianly.ai

Effective Date

This Privacy Policy is effective as of September 28, 2025 and applies to all information collected by Guardianly.

International Data Transfers

Guardianly is based in the United States, and our primary data processing occurs within the United States. However, some of our third-party service providers may process your data in other countries:

Google AI services may process data in the United States and other countries where Google operates
OpenAI services may process data in the United States and other countries where OpenAI operates
Twilio services may process data across multiple countries for telecommunications routing
Google Cloud Platform services may involve data processing across Google's global infrastructure

When we transfer your personal information outside of your country, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Third-Party Privacy Policies

Our app integrates with several third-party services that have their own privacy policies:

OpenAI Privacy Policy: https://openai.com/privacy/
Twilio Privacy Policy: https://www.twilio.com/en-us/privacy
Apple Privacy Policy: https://www.apple.com/privacy/
Google Privacy Policy: https://policies.google.com/privacy
SendGrid Privacy Policy: https://www.twilio.com/en-us/privacy

We encourage you to review these policies to understand how these services handle your information.