Privacy Policy & Account Data Deletion — WhoCaller (com.whocallerapp.com)

Zero Contact Harvesting Commitment: WhoCaller (com.whocallerapp.com), developed, owned, and operated by WallStreet Bull Capital Business Consultancy (wallstreetbullcapital.com), is built on a zero contact harvesting architecture. WhoCaller is a proprietary trading name and digital software product of WallStreet Bull Capital Business Consultancy. We never sell personal data, never share your contact address book with advertising brokers or data aggregators, and safeguard local configurations and security tokens using hardware-backed Android KeyStore AES-256-GCM encryption.

🗑️ How to Request Account & Data Deletion

In full compliance with Google Play Account Deletion Policies, GDPR Article 17 (Right to Erasure), and India's DPDP Act 2023, users of WhoCaller (Package: com.whocallerapp.com) have the absolute right to delete their account and all associated personal data at any time. We provide two accessible methods:

Method 1: Instant In-App Data Deletion (Recommended)

If you have the WhoCaller app installed on your Android device:

Open the WhoCaller app on your mobile device.
Tap the Settings (⚙️) icon in the top right corner.
Scroll to the Account & Privacy section.
Tap "Reset All Profile Data & Cache" or "Leave Family Shield & Purge Records".
Confirm your selection. All local cached identifiers, call history metadata, family tracking tokens, and remote synchronized profile records are immediately and permanently erased (0 seconds retention).

Method 2: Web & Email Deletion Request (Without Reinstalling App)

If you have already uninstalled WhoCaller or prefer submitting a manual request online:

Send an email to our dedicated Data Protection Officer at privacy@whocallerapp.com.
Set the subject line to: "Account & Data Deletion Request - [Your Registered Phone Number]".
Provide your registered phone number (including international country code, e.g., +91 XXXXX XXXXX) and your account name.
Our Data Protection Officer will process the request and permanently delete all your account records, profile details, and cloud logs within 48 to 72 business hours, sending you an official confirmation email upon completion.

⚡ Method 3: Instant Self-Service Web Unlisting & Erasure Engine

Complying with GDPR (Article 17) and India's DPDP Act 2023: Immediately unlist your phone number, purge public listings, and delete all associated reviews from our master database.

Phone Number (with Country Code)

Reason for Unlisting (Optional)

Exact Breakdown of Data Deleted vs. Kept & Retention Periods

When you initiate an account and data deletion request for WhoCaller, here is the exact classification of data types handled:

Data Category	Specific Data Items	Action on Deletion	Retention Period / Timeline
User Profile Info	Name, Phone Number, Profile Picture, Bio, Verified Badges	Permanently Deleted	Immediate (In-App) / Max 72 hrs (Email)
Contacts & Caller ID	On-device address book cache, caller lookup history	Permanently Deleted	Immediate (Purged from local sandbox & servers)
Family Shield Telemetry	Child GPS coordinates, geofence logs, pairing tokens	Permanently Deleted	Immediate upon leaving family or account reset
Local CRM & Cache	Local contact notes, CRM leads, cached caller lookups	Permanently Deleted	Immediate (Stored strictly locally, erased with cache)
Push & Device IDs	FCM Push Token, Hardware Installation UUID	Permanently Deleted	Immediate (Unlinked and invalidated)
Telemetry & Diagnostics	Anonymized crash stacktraces, latency metrics	Permanently Deleted	Auto-purged after 90 days maximum
Financial Invoices	Payment reference IDs, Razorpay tax invoices, GST transaction records	Statutory Retention	Retained for 7 years solely to comply with statutory accounting & tax laws (Indian Income Tax Act / GST regulations). All personal profile linkages are completely stripped/anonymized.

1. Google Play Data Safety Declaration

In accordance with Google Play Developer Policies, the table below outlines all data types processed by WhoCaller (com.whocallerapp.com):

Data Category	Specific Data Types	Purpose & Functionality	Collection Type
Location	Approximate & Precise GPS Coordinates	Family Shield parental protection, child safety zones & real-time SOS alerts.	Optional (User Choice)
Personal Info	Name, Phone Number, Profile Bio	Account authentication, verified caller ID display & spam reporting.	Optional (User Choice)
Messages	SMS / MMS Messages	Default SMS handler, dual-SIM thread management, OTP categorization & spam SMS shield.	Optional (User Choice)
Photos & Media	Profile Pictures & Avatars	Custom caller profile pictures, contact photos & badge personalization.	Optional (User Choice)
Contacts	Phonebook Contacts & Names	On-device T9 search, post-call caller identification & spam reputation lookup. (Zero Harvesting)	Optional (User Choice)
App Info & Performance	Crash Logs, Latency Diagnostics	Crash troubleshooting, telemetry & performance optimization.	Optional (User Choice)
Device or Other IDs	FCM Push Token, Hardware ID	Firebase push notifications, session security & Family Shield device pairing.	Optional (User Choice)

2. Specific Feature Disclosures & Privacy Protections

A. Zero Call Recording Policy & On-Device Security (Target SDK 36 Compliant)

WhoCaller is strictly compliant with Google Play Target SDK 36 guidelines:

No Call Audio Recording: WhoCaller does not capture, record, store, or transmit telephone audio or VoIP call streams.
Hardware AES-256 Encryption: Local app configurations, user profile tokens, and CRM preferences are encrypted at rest using AES-256-GCM keys managed by the Android KeyStore hardware security module.
Zero Cloud Exfiltration: Your personal contact address book and phonebook metadata remain on your physical device and are never sold or shared with data aggregators.

B. Accessibility Service API & System Overlay Disclosures

WhoCaller utilizes Android Accessibility Service API and SYSTEM_ALERT_WINDOW (Display Over Other Apps) strictly for the following defined features:

To render real-time Caller ID floating heads over incoming calls and suppress floating action docks during keyboard input to prevent UI obstruction.
To enable VoIP call identification and assist audio routing for WhatsApp incoming calls.
Zero Data Exfiltration: Accessibility services are never used to log keystrokes, read chat messages, access screen contents of unrelated apps, or harvest user data.

C. Family Shield Child GPS & Parental Protection

The Family Shield module allows parents to monitor child safety with clear consent controls:

Location telemetry is end-to-end encrypted between linked family devices using cryptographic group pairing tokens.
Parental controls and location tracking can be paused or disconnected anytime via the security PIN.
Leaving a family group instantly purges all linked location history and parental telemetry records.

D. Special & Toll-Free Helpline Handling

WhoCaller maintains a verified database of national emergency numbers (112, 100, 101, 108), cybercrime helplines (1930), railway assistance (139), and toll-free services (1800*, 1600*). These numbers are classified as RiskLevel.TRUSTED by default and are processed with zero tracking or telemetry overhead.

3. Security, Encryption & Data Transport

All data transmitted between WhoCaller mobile applications and backend services is encrypted in transit using Transport Layer Security (TLS 1.3 / HTTPS) with strict certificate pinning. Local sensitive data is secured using AES-256-GCM encryption powered by the Android KeyStore.

4. Third-Party Integrations & Sub-Processors

We partner exclusively with certified, compliant infrastructure providers:

Google Firebase (Google LLC): For crash diagnostics, latency monitoring, and Firebase Cloud Messaging (FCM) push alerts.
Razorpay Software Private Limited: PCI-DSS Level 1 certified payment gateway for processing in-app credits and subscription transactions under Reserve Bank of India (RBI) guidelines. Zero credit card or banking PIN details are processed or stored on WhoCaller servers.

5. Data Retention Guidelines

Personal profile data is retained only for as long as your account remains active. Telemetry and crash diagnostics are automatically purged after 90 days. When you delete your account or initiate data deletion, all associated records are permanently erased without backup retention.

6. Grievance Redressal & Contact Officer

If you have any questions regarding this Privacy Policy, your personal data, or compliance with GDPR / DPDP Act 2023, please contact our statutory grievance officer:

Data Protection & Grievance Officer
WallStreet Bull Capital Business Consultancy (Trading Name: WhoCaller)
Cyber Security & Privacy Division
Registered Office: Chennai - 600007, Tamil Nadu, India
GSTIN: 33AYCPD4800B2ZD
Email: privacy@whocallerapp.com
Grievance Escalation: grievance@whocallerapp.com
Corporate Inquiries: info@wallstreetbullcapital.com
Phone: +91 97102 40259 / +91 89396 58282
Websites: https://whocallerapp.com • https://wallstreetbullcapital.com

Privacy Policy & User Data Deletion