WiFi Calling Privacy Policy · SCB Tech Solution

Introduction

SCB Tech Solution ("we", "our", or "us") operates the WiFi Calling - No Internet mobile application ("the App"). This Privacy Policy explains what the App collects, what it does not, and the choices you have.

By downloading or using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

In short: the App has two modes. In Local mode, which needs no internet, your calls, video, chat and files travel directly between devices on your local network and never reach our servers. In Global mode, which is optional and needs an account, the App uses our cloud services to find your friends, connect your calls and store your messages. The App also shows ads and reports crashes, which send limited technical information to third parties. The sections below explain exactly what is collected and who receives it.

Permissions We Request

The App asks only for permissions it needs. Each one is used for the purpose described.

Microphone: To capture your voice during a call. Audio is sent only to the person you are calling.
Camera: For video calls, to scan a QR code when connecting to another device or adding a friend, and to take a profile photo if you choose to. Not used otherwise.
Photos: Optional. Used only when you choose a profile picture or pick a file to send.
Location: Android and iOS will not tell an app the name of the Wi-Fi network it is on unless the app holds location permission. We use it only to show that network name and to join a hotspot you choose. We never read, store or send your position.
Nearby devices: Required by Android to connect to a Wi-Fi hotspot you scan from within the App.
Contacts: Optional. If you allow it, the App reads your phone book so you can place an ordinary phone call from the Contacts tab. Your contacts are read on your device only and are never uploaded to us or anyone else.
Notifications: To alert you to incoming calls, new messages and replies from our support team.

What Stays On Your Device

Local mode works without any internet connection. The following never reaches our servers:

Local calls, video and chat. These travel directly between your device and the person you are talking to, over your Wi-Fi network or hotspot. We operate no server for them and cannot see, record or store any of it.
File transfer. Files you send or receive over Wi-Fi go directly between the two devices over an encrypted connection, and only after the receiver accepts. Received files are saved on the receiving device.
Your local display name and device identity. Stored on your device and announced only to other devices on the same local network, so they can recognise who is calling.
Your profile picture. Stored on your device and served only to devices on your local network.
Call history and local chat transcripts. Stored only on your device.
Your phone contacts. Read on your device to show a list. Never uploaded.

Global Mode And Accounts

Global mode lets you call and message friends over the internet. It is optional, and Local mode never requires an account. To use Global mode you create an account with email and password, Google Sign-In or Sign in with Apple. Accounts are provided by Firebase Authentication, a Google service acting on our behalf.

When you use Global mode, we store the following in our Firebase database:

Account information: your email address, and your name if your sign-in provider supplies one.
Profile: your display name, your friend code, your device platform, the app version and the last time you were online. Your friends see your name and whether you are online.
Friends: the list of people you have added, friend invitations you have sent or received, and people you have blocked.
Messages: the text of messages you send to friends in Global chat. These are stored so they can be delivered and shown on your devices.
Call setup: the technical messages that connect a Global call, such as network addresses and connection details. The call audio and video themselves go directly between the two devices and are not stored. To connect, both devices share network addresses with each other and with Google's public STUN servers, so the other person's device and Google can see your IP address.
Reports: if you report a user, we store the report and the reason you give, so that we can review it.

You can only be reached by people you have given your friend code to. There is no public directory of users.

Push Notifications

So that calls and messages reach you when the App is closed, we store a push notification token for your device. Notifications are delivered through Firebase Cloud Messaging (Google) and the Apple Push Notification service. On iPhone, calls to a closed app are sent through a small server we run on Deno Deploy, which reads only what it needs to ring your device: the call, the caller's name as you saved it, and your device token. Notifications carry the caller's or sender's name and, for messages, a short preview of the text.

Support Tickets

If you contact us through Settings, Support, we store your messages, the subject and category you choose, your device model, operating system version and app version, and the time of each message. This lets us answer you and fix the problem. Tickets are linked to an anonymous identifier, or to your account if you are signed in, so that you can see our replies. We also store a push token on the ticket so that we can notify you when we reply.

Other Information We Collect

Advertising identifier and basic device information: To show and measure ads. Shared with our advertising partners, see Advertising below. Basic device information means things like device model, operating system version and country.
Crash reports and diagnostics: To find and fix faults. Sent to Firebase Crashlytics, a Google service acting on our behalf. Includes the error, the device model and the operating system version.
Usage events: To understand which features are used and whether calls succeed. Sent to Firebase Analytics, a Google service acting on our behalf. These events are counts, not content: for example that a call connected, never who you called or what was said.
Purchases: On iPhone and iPad you can pay to remove ads. Payment is handled entirely by Apple. We never see your payment details.

We do not sell your data, and we do not use it to build a profile of you.

Advertising

The App shows banner ads, and offers an optional ad that you may watch in exchange for a period without ads. Ads are supplied through Unity LevelPlay and its partners ironSource, Unity Ads and Chartboost.

To select and measure ads, these partners receive your device's advertising identifier and basic device information. They act as independent controllers of that information, under their own privacy policies:

Unity and ironSource: unity.com/legal/privacy-policy
Chartboost: chartboost.com/privacy

Ads require an internet connection. When you use the App on a network without internet access, which is its main purpose, no ad is requested and nothing is sent.

Service Providers

We use these providers to run the App. They process information on our behalf, or under their own policies where stated above:

Google Firebase (authentication, database, crash reporting, analytics and push notifications)
Google Sign-In and Sign in with Apple (only if you choose them)
Apple Push Notification service
Deno Deploy (hosts the server that rings closed iPhones)
Unity LevelPlay, ironSource, Unity Ads and Chartboost (advertising)

Some of these providers process data outside your country, including in the United States.

Your Choices And Controls

Tracking on iPhone and iPad: you are asked whether the App may track you. If you decline, ads are still shown but are less relevant. You can change this later in Settings, Privacy and Security, Tracking.
Advertising identifier on Android: you can reset or delete it in Settings, Privacy, Ads.
Temporarily removing ads: you may watch a rewarded ad to hide ads for four hours. This is recorded only on your device.
Active status: in Global mode you can turn off Active status in Settings, so that friends see you as offline. While it is off, friends cannot call you.
Blocking: you can remove, block or report any friend from their contact options. A blocked person cannot call you, message you or send you invitations, and is not told that you blocked them.
Optional permissions: contacts, location, photos and notifications are optional. Refusing them does not stop you from making calls, though some features will not be available.

Data Security

Call audio and video are encrypted in transit by WebRTC, the standard technology the App uses for calls. File transfers are encrypted in transit.

In Local mode, chat messages and the messages that set up a call are sent in plain form over your local network. They are therefore protected by your network's own encryption rather than by the App. We recommend using a trusted, password-protected Wi-Fi network, and we ask that you do not send sensitive information through local chat on a public or open network.

Everything the App sends to us or to our providers over the internet is encrypted in transit. Our database is protected by security rules, so that only the participants in a conversation can read it.

Children's Privacy

The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with information, please contact us and we will delete it.

Data Retention And Deletion

Anything held on your device stays under your control:

You can clear your call history at any time from the Settings tab.
Uninstalling the App permanently deletes all local data, including your display name, device identity, profile picture, call history, chat transcripts and the list of received files. Files you received are saved in your device's Downloads folder (Android) or the Files app (iPhone) and stay there until you delete them.

Account data:

Global chat messages, your friends list and your profile are kept for as long as your account exists.
You can delete your account at any time inside the App, in Settings, Account, Delete account. This permanently deletes your account, profile, friend code, friends list, blocked list, Global chat messages and push tokens.
Support tickets, user reports and call setup records are not removed automatically. To have them deleted, email us at the address below.

For crash reports and analytics events, Google's Firebase services keep the data under their standard retention periods: generally up to 90 days for crash data and up to 14 months for analytics events.

Your Rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to how it is used. To make a request, email us at the address below. We will respond within 30 days.

Changes To This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have any questions about this Privacy Policy, or want to make a request about your data, contact us at:

SCB Tech Solution
Email: [email protected]