Back to Home

VoxGuard Privacy Policy

Effective Date: March 13, 2026  |  Last Updated: April 2, 2026

Introduction

VoxGuard ("we," "us," "our") operates the VoxGuard mobile application (the "App") and the website at https://www.vox-guard.com (the "Website"). This Privacy Policy explains what information we collect, how we use it, and what choices you have.

VoxGuard is a call-screening application for Android. When an unknown caller reaches your phone number, the call is routed through our server-side system. The caller is prompted to say your key phrase and record a reason for calling. You then receive a push notification and can listen to the caller's recorded reason, read a text transcript, and decide whether to approve or decline the call — all within a 120-second decision window.

This Privacy Policy applies to information collected through the App and our backend services. By using VoxGuard, you agree to the collection and use of information as described in this policy.

Information We Collect

Information You Provide Directly

Information Why We Collect It
Phone number (US mobile number in E.164 format) Account creation, phone verification via SMS one-time passcode (OTP), call forwarding setup, and service-related SMS messages (see SMS Communications section below)
Key phrase (a word or phrase you choose; defaults to "pineapple") Call screening — callers must say this word to proceed
Call decisions (approve or decline) Core functionality — you decide whether to connect or reject screened calls
Contact phone numbers (from your device's contacts list, if permission granted) Identifying known callers so they can bypass screening and reach you directly

Information Collected Automatically

Information Why We Collect It
FCM device token (Firebase Cloud Messaging) Delivering push notifications about incoming screened calls
Device ID (a UUID generated at registration) Identifying your device for push notification delivery
Crash data (stack traces, device model, OS version, app state) Monitoring app stability through Firebase Crashlytics
Basic usage analytics (screen views, session duration, engagement metrics) Improving the app through Firebase Analytics (automatic collection only) and PostHog (app usage events and masked session replay). See the PostHog section below for details.
Device information (device model, Android version, app version) Stored on our server during device registration for push notification delivery, diagnostics, and support
Carrier information (carrier name, mobile network code) Collected during call forwarding setup to determine the correct forwarding commands for your carrier
Error reports (error type, message, stack trace, device model, OS version, app version) Sent to our server when the app encounters an error, to help us diagnose and fix issues
Diagnostic logs (log level, category, message) Sent to our server for troubleshooting app issues
App integrity attestation data Fraud prevention through Firebase App Check with the Google Play Integrity API

Firebase Analytics may automatically collect the device's advertising identifier (Google Advertising ID). We do not use this identifier for advertising purposes, and VoxGuard does not serve ads.

Information Received from VoxGuard's Server

When a call is screened through our system, the following information is delivered to your device:

Information Why We Collect It
Caller phone number Displayed so you can identify who called
Caller name (when available) Displayed for caller identification
Caller voice recording (WAV audio) You listen to the caller's stated reason for calling
Caller transcript (text) You read the caller's stated reason for calling
Call status and timestamps Showing call history and decision outcomes

Information We Do NOT Collect

We want to be clear about what VoxGuard does not collect:

  • Location data — We do not request or access your location.
  • Contact names or details — If you grant contacts permission, we read phone numbers only. We never read contact names, email addresses, photos, birthdays, or any other contact fields.
  • Device call logs — We do not access call history stored on your device.
  • SMS content — Our SMS-based OTP verification uses the SMS Retriever API, which only reads app-specific verification codes. We never access your text messages.
  • Photos, camera, or media files — We do not access your camera or media storage.
  • Browsing history — We do not track your web activity.
  • Email addresses — We do not collect email addresses.
  • Names or demographic information — We do not ask for your name, age, gender, or similar details.
  • Biometric data — We do not collect fingerprints, facial recognition data, or other biometric information.
  • Financial or payment information — Subscription billing is handled entirely by Google Play. We never see your credit card number, bank account, or other payment details.

How We Use Your Information

We use the information we collect to:

  1. Provide the call-screening service — Route calls, prompt callers for the key phrase, record their reason for calling, transcribe it, and deliver the result to you via push notification.
  2. Authenticate your account — Verify your phone number via SMS OTP and maintain your authenticated session.
  3. Send service-related SMS messages — Notify you of important account actions, such as call forwarding remediation instructions if you uninstall the App (see SMS Communications section below).
  4. Deliver push notifications — Alert you when a screened call is waiting for your decision.
  5. Enable contact bypass — If you grant contacts permission, we use your contact phone numbers to route calls from known contacts directly to your phone without screening.
  6. Process subscription status — Verify your VoxGuard Pro subscription through Google Play purchase tokens.
  7. Maintain app stability — Identify and fix crashes and performance issues using crash reports.
  8. Improve the app — Understand general usage patterns through Firebase Analytics (automatic collection) and PostHog (app usage events and masked session replay).
  9. Prevent fraud and abuse — Verify that requests to our server come from a legitimate instance of the VoxGuard app.

Third-Party Services

VoxGuard relies on the following third-party services to operate. Each service receives only the data necessary for its function.

Google Firebase (operated by Google LLC)

We use several Firebase services:

  1. Firebase Authentication — Handles phone number verification via SMS OTP. Google receives your phone number and the verification code to authenticate your identity. Firebase Privacy Information
  2. Firebase Cloud Messaging (FCM) — Delivers push notifications to your device when a screened call is waiting. Google receives your device's FCM token.
  3. Firebase Analytics — Automatically collects device information, app usage metrics, and session data. VoxGuard does not send any custom analytics events — only Firebase's default automatic collection is active. Firebase Analytics may automatically collect the device's advertising identifier. Google Analytics Privacy Information
  4. Firebase Crashlytics — Automatically collects crash reports including stack traces, device model, OS version, and app state at the time of a crash. This helps us identify and fix issues. Crashlytics Data Collection
  5. Firebase App Check (Play Integrity) — Verifies that API requests come from a genuine instance of the VoxGuard app running on an uncompromised device. This communicates with the Google Play Integrity API.

Google's use of information collected through Firebase is governed by Google's Privacy Policy.

PostHog Analytics (operated by PostHog Inc.)

We use PostHog, a product analytics platform, to understand how users interact with the VoxGuard app and improve the experience. PostHog receives:

  • App usage events — such as onboarding progress, call screening decisions, subscription events, voicemail interactions, and settings changes
  • Session replay data — screen recordings of app sessions with all text content masked for privacy
  • Device and app metadata — device model, OS version, app version

Events are identified by your VoxGuard tenant ID (an internal identifier). PostHog does not receive your phone number, key phrase, call recordings, transcripts, or contact list.

Data is sent to PostHog's US infrastructure at us.i.posthog.com. PostHog's handling of this data is governed by PostHog's Privacy Policy.

Google Play Billing

VoxGuard Pro subscriptions ($4.99/month with a 7-day free trial) are processed entirely through Google Play. Google handles all payment processing. VoxGuard receives only purchase tokens and subscription status information to verify that your subscription is active. We never receive or store your credit card number, billing address, or other payment details.

Google's handling of payment information is governed by Google Play's Terms of Service and Google's Privacy Policy.

Speech-to-Text Transcription

When a caller records their reason for calling, VoxGuard sends the audio recording to a third-party speech-to-text service for transcription. The service receives only the audio file — it does not receive your phone number, the caller's phone number, or any other personal information.

Telecommunications Provider (SMS Delivery)

We use a third-party telecommunications provider to deliver service-related SMS messages to your phone number. The provider receives your phone number and the SMS message content solely to complete message delivery. The provider does not receive any other personal information.

Telecommunications Provider (Call Routing)

Incoming calls to your VoxGuard screening number are routed through a third-party telephony provider. The provider transmits the caller's phone number, caller name (when available from the PSTN), and call signaling data to our backend server. The provider also generates call detail records (CDRs) that include call timing, duration, and routing outcomes.

VoxGuard Backend Server

Our backend server, hosted at api.vox-guard.com, powers the call-screening service. The server receives your phone number, FCM device token, key phrase, call decisions, and purchase tokens. All communication between the App and our server is encrypted using HTTPS, and all requests are authenticated with JWT (JSON Web Token) bearer tokens.

Data Storage and Security

On Your Device

VoxGuard stores a limited set of data locally using Android DataStore Preferences:

  • JWT authentication token
  • Phone number
  • Device ID
  • Key phrase
  • FCM device token
  • Onboarding state

This local data is protected by Android's file-based encryption. VoxGuard does not use a local database (no SQLite or Room).

In Transit

All communication between the App and our backend server uses HTTPS encryption. API requests are authenticated using JWT bearer tokens.

On Our Servers

Call recordings, transcripts, and call metadata are stored on VoxGuard servers.

Note: If you have questions about data retention for your specific account, contact us at support@vox-guard.com.

SMS Communications

VoxGuard may send you service-related SMS messages to the mobile phone number associated with your account. These messages are transactional and operational in nature — they are not marketing or promotional messages.

Types of SMS Messages

  • Uninstall remediation: If you uninstall the VoxGuard app while call forwarding is still active on your phone number, we will send you a one-time SMS with instructions on how to disable call forwarding so your phone service returns to normal.
  • Account verification: One-time passcode (OTP) messages during registration and login.

Consent and Opt-In

By creating a VoxGuard account and providing your mobile phone number, you consent to receive the service-related SMS messages described above. Message frequency is minimal — typically no more than 1–2 messages per account event. Message and data rates may apply.

Opt-Out

You can opt out of SMS messages at any time by replying STOP to any VoxGuard SMS. After opting out, you will receive a confirmation message and no further SMS messages will be sent. You may also contact us at support@vox-guard.com to opt out.

Help

For help with VoxGuard SMS messages, reply HELP to any message or contact support@vox-guard.com.

Mobile Information Privacy

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Your mobile phone number and any information collected in connection with SMS messaging is used solely to provide VoxGuard's call-screening service and related operational communications. We will never sell, rent, or share your mobile phone number with third parties for their marketing or promotional purposes.

Data Sharing

We do not sell your personal information. We do not share your information with advertisers. No mobile information will be shared with third parties/affiliates for marketing/promotional purposes.

We share data only with the following parties, and only as necessary to provide the service:

  1. Google — Through Firebase services (Authentication, Cloud Messaging, Analytics, Crashlytics, App Check) and Google Play Billing, as described in the Third-Party Services section above.
  2. Speech-to-text provider — Caller voice recordings are sent for transcription, as described in the Third-Party Services section above.
  3. PostHog — App usage events and masked session replay data for product analytics, as described in the Third-Party Services section above.
  4. Telecommunications providers — For call routing and delivery of service-related SMS messages, as described in the Third-Party Services section above.
  5. VoxGuard's own backend infrastructure — To power the call-screening service.

None of the third parties listed above receive your mobile information for marketing or promotional purposes. Data is shared with these parties solely to operate the VoxGuard service.

We may also disclose information if required by law, such as in response to a valid subpoena, court order, or government request.

Data Retention

Data Retention Period
Local app data (DataStore Preferences) Cleared when you log out of the App. Also removed if you uninstall the App or clear its data through Android settings.
Server-side call recordings and transcripts Automatically deleted after 30 days
Firebase Authentication records (phone number–to–UID mapping) Retained until you delete your account
Firebase Analytics data Retained for 14 months per Google's default retention policy
Firebase Crashlytics data Retained for 90 days per Google's default retention policy
PostHog analytics data Retained per PostHog's data retention policies
Google Play Billing records Managed by Google per their data retention policies
Error reports and diagnostic logs Retained for up to 90 days
Carrier and device information Retained while your account is active; deleted upon account deletion

Your Choices and Rights

Managing Your Data

  • Delete your account: You can request deletion of your VoxGuard account and all associated server-side data by contacting us at support@vox-guard.com. We will process your request within 30 days.
  • Clear local data: You can remove all locally stored data by uninstalling the App or clearing app data through your Android device settings.
  • Opt out of Firebase Analytics: You can opt out of Firebase Analytics data collection through your device's advertising settings. On Android, go to Settings > Google > Ads > Opt out of Ads Personalization.

California Privacy Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

  • Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you.
  • Right to Delete: You can request that we delete personal information we have collected from you.
  • Right to Opt-Out of Sale: We do not sell your personal information to third parties. Because we do not sell personal information, there is no need to opt out.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, contact us at support@vox-guard.com. We will verify your identity before processing your request by confirming the phone number associated with your account.

Children's Privacy

VoxGuard is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date at the top of this page. If we make material changes to how we handle your personal information, we will notify you through the App or by other means before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of VoxGuard after any changes indicates your acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

VoxGuard
Email: support@vox-guard.com
Website: https://www.vox-guard.com

This privacy policy is published at https://www.vox-guard.com/privacy-policy.