callmeleonThe short version
- We don't record your calls. Your voice is changed live, in memory, and not stored.
- We don't read your contacts, track your location or show ads.
- We don't sell your personal information or share it for targeted advertising.
- We keep only what we need to run calls, bill minutes, secure accounts and stop abuse.
- You can delete your account in the app at any time.
This Privacy Policy explains what personal information the Callmeleon app and website (the "Service") collect, how we use and share it, how long we keep it, and the choices and rights you have. Callmeleon is operated by Pulpy Media ("we", "us"). The Service is for adults 18 and over in the United States.
1. Information we collect
| What | Details | Why |
|---|---|---|
| Account | Your phone number and, if you add one, a display name | Sign-in, caller ID, support |
| Call records | Number dialled, start time, duration, voice and background used, the carrier that connected the call, call cost and minutes charged | Billing, call history, safety |
| Purchase records | From Google Play: order ID, product, purchase token and subscription status | Adding minutes, renewals, refunds |
| Credit ledger | Minutes added, used, expired or removed | Showing your balance accurately |
| Security data | IP address, device or browser information, sign-in code attempts | Account security, fraud and abuse prevention |
| Opt-out list | Phone numbers whose owners asked not to be called | Never connecting calls to them |
| Support messages | Whatever you send us by email | Answering you |
What we don't collect: call recordings, stored voice audio, your contacts, precise location, photos, or advertising identifiers. Voice previews ("Preview" in the app) are processed live and not stored. Card and bank details are handled by Google Play. We never see or store your card number.
The app asks for one permission, the microphone, and uses it only during a call or a voice preview.
2. How we use information
- To provide the Service: sign you in, verify your number, register it as your caller ID, place and connect calls, and change your voice in real time.
- To bill: charge minutes for answered calls, apply subscriptions and top-ups, and process refunds.
- To keep the Service safe: enforce call limits, honour opt-outs, prevent fraud and abuse, investigate reports and suspend accounts that break our rules.
- To support you and send service messages, such as sign-in codes.
- To meet legal obligations, such as tax and accounting, and to respond to valid legal process.
- To maintain and improve the Service using aggregated or de-identified usage data.
We don't use your information for advertising, and we don't make automated decisions that have legal or similarly significant effects on you.
3. Who we share it with
We share personal information only with service providers that process it on our behalf, under contracts that limit how they can use it:
- Phone carriers: Plivo and Twilio. They connect calls to the phone network, send sign-in codes by text and verify caller ID. They receive the phone numbers involved in a call, and the call audio while the call is in progress.
- Cloud hosting: Google Cloud and Microsoft Azure. They run our servers, database and the real-time media servers that carry call audio during a call.
- Google Play: processes purchases, subscriptions and refunds.
We may also disclose information when the law or valid legal process requires it (for example, a subpoena or court order), to protect people from harm, to investigate abuse, or as part of a merger, acquisition or sale of assets, subject to this policy. The person you call sees the caller ID described in our Terms.
We do not sell personal information, and we do not "share" it for cross-context behavioural advertising, as those terms are defined under California law.
4. Where your data is processed
Our servers and database are located in India (Google Cloud and Microsoft Azure data centres). Our phone carriers process call and messaging data in the United States and other countries where they operate. By using the Service, you understand that your information is transferred to and processed in India and the United States. We protect it as described in this policy wherever it is processed.
5. How long we keep it
| Data | How long |
|---|---|
| Account data (number, display name, balance) | Until you delete your account |
| Call and billing records | Up to 3 years after the call or purchase, or longer if the law requires (for example tax, fraud prevention or law-enforcement requests) |
| Sign-in codes and security logs (IP, device info) | About 90 days |
| Opt-out numbers | As long as needed to honour the opt-out |
| Call audio | Never stored |
When you delete your account, we delete your profile and balance, remove your verified caller ID from our carrier, and keep call and billing records only as long as needed for legal, tax and fraud-prevention purposes, de-identified where we can. See Delete your account.
6. Security
We protect your information with reasonable technical and organisational measures, including encrypted connections (HTTPS/TLS), hashed sign-in codes, access controls and rate limits. No system is perfectly secure, so we can't guarantee absolute security. If a breach affects your personal information, we'll notify you as the law requires.
7. Your choices
- Turn off showing your own number in Account → Caller ID.
- Delete your account any time in Account → Delete account.
- Anyone can stop Callmeleon calls to their number on the opt-out page.
8. Your US state privacy rights
Depending on where you live, including California (CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with consumer privacy laws, you may have the right to:
- Know and access the personal information we hold about you, and get a copy in a portable format.
- Delete personal information we collected from you, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information, targeted advertising and certain profiling. We don't do any of these.
- Not be discriminated against for using your rights.
- Appeal our decision on your request, where your state provides that right, by replying to our decision email.
How to make a request: email hi@callmeleon.space from or including the phone number on your account. To protect you, we verify the request by sending a one-time code to that number. You can also delete your account directly in the app.
Authorised agents: you can use an authorised agent. We may ask for your signed permission and verify your identity directly.
Timing: we confirm receipt within 10 business days and respond within 45 days. If we need more time (up to another 45 days), we'll tell you why.
California notice at collection: we collect identifiers (phone number, IP address, device information), commercial information (purchase and credit records), and internet or network activity (call metadata and security logs). Sources, purposes, recipients and retention periods are described above. In the past 12 months we have disclosed these categories to the service providers listed above for business purposes only, and we have not sold or shared them. We don't use sensitive personal information for purposes that would require a "limit the use" right.
9. Children
Callmeleon is for adults 18 and over and is not directed to children. We don't knowingly collect personal information from anyone under 18. If you believe a minor has created an account, email hi@callmeleon.space and we'll delete it.
10. Changes to this policy
We may update this policy. If we make material changes, we'll tell you in the app, by text message or by email before they take effect, and update the date at the top of this page.
11. Contact
Privacy questions and requests: hi@callmeleon.space. Callmeleon is operated by Pulpy Media. See also Contact & grievances.