App privacy policy.

The app requests only the permissions it needs to place and receive business calls. Each one can be refused, and the consequence of refusing is stated below. You can change any of them later in your device settings.

Microphone — required

Used to capture your voice during a call. Audio is captured only while a call is connected. The app does not listen in the background, does not record ambient audio, and has no wake-word or always-on listening. Refusing this permission means the app cannot make or take calls.

Notifications — required for incoming calls

Used to wake the app so an incoming call can ring. On iOS this uses PushKit and CallKit so calls appear on your lock screen like any other call; on Android it uses Firebase Cloud Messaging. The notification payload carries only what is needed to present the call. Refusing means you will not receive calls while the app is closed.

Contacts — optional

If you allow it, the app matches an incoming number against your device contacts so you see a name instead of a number, and lets you dial from your contact list. This matching happens on your device. We do not upload, copy or store your device address book. Refusing means calls show numbers only.

Phone state and call handling — Android

Used to integrate with the system dialler so a Telroi call behaves like a normal call and does not collide with a GSM call already in progress. We do not read your call log, your SMS or your device identifiers for advertising.

Bluetooth and audio routing — optional

Used to route call audio to a headset or car system. No Bluetooth device data is collected or transmitted.

The app does not request location, camera, photos, calendar, health data or device advertising identifiers, and contains no advertising or analytics SDK that tracks you across other apps or websites.

Recording is off unless the organisation that issued your account switches it on for your workspace. It is a business setting, not something the app decides and not something we enable by default.

• Where recording is on, the audio of the call is captured and stored against the call record in your workspace.
• A transcript and an AI summary may be produced from that audio, if your organisation has enabled those features.
• Recordings are encrypted in transit and at rest.
• Retention is set by your organisation, subject to any minimum its own regulator imposes.
• Recordings are not used to train Telroi models.

Recording law differs by country. Some require notice to one party, others the consent of everyone on the call. The organisation operating the number is responsible for giving lawful notice and capturing consent where it is required. The app can play an announcement at the start of a call where that is configured.

If you were called by a business using Telroi and want a copy of a recording, its deletion, or an explanation of why it was made, contact that business — they hold and control it. You may also write to [email protected] and we will help them respond.

Account and identity

Your name, work email address, workspace, role and authentication tokens. Used to sign you in and apply your permissions.

Call and usage records

Numbers dialled and received, timestamps, duration, direction, outcome, and the route the call took. Used to connect calls, to bill usage, to detect fraud and to show your organisation its own call history.

Call content

Audio, transcripts and summaries, only where recording or AI handling is enabled for your workspace, as described above.

Device and diagnostic data

App version, operating system version, device model, push token, and crash and error reports. Used to keep the app working and to diagnose call quality problems. Crash reports are not linked to the content of your calls.

We do not sell personal data, we do not share it with data brokers, and we do not use it for advertising or cross-app tracking. The app performs no tracking as defined by Apple’s App Tracking Transparency framework, and therefore does not present a tracking prompt.

Where your organisation has enabled AI features, call audio or text may be sent to a speech or language model provider to produce a transcript, a summary or an automated response. Which provider is used is your organisation’s choice; it may also connect its own provider account, in which case that provider’s terms apply directly to it.

• Data is sent only for the feature your organisation has switched on, and only for as long as the request takes.
• Providers act as sub-processors under contract and may not use the data for their own purposes.
• Content from your calls is not used to train Telroi models.
• A current list of sub-processors is available from [email protected].

• The organisation that issued your account, which can see call records and any recordings made in its workspace.
• Carriers and telecoms partners, to route and terminate calls. They receive the numbers involved, not your account details or recordings.
• Cloud hosting, storage and push notification providers acting as sub-processors.
• Speech and language model providers, where AI features are enabled.
• Regulators, carriers, law enforcement or a court, where we are legally required to respond or where necessary to answer a complaint about a number.

Data may be processed outside the country where it was collected, including in the United States and the European Union. Where it is, we rely on appropriate safeguards including standard contractual clauses.

• Call records and recordings: for the period your organisation sets, and deleted on its instruction.
• Account data: for as long as your account is active, then removed within 30 days of deletion unless we must keep it longer.
• Diagnostic and crash data: up to 90 days.
• Billing and tax records: as required by applicable law, typically seven years.
• Compliance records for numbers used for sensitive traffic: for the life of the number and seven years after it is released.

You can request access to your personal data, correction, deletion, restriction, portability, or object to processing. Where your account was issued by an organisation, we will pass the request to it and support its response.

Deleting your account

You can request deletion of your Telroi account and its associated personal data from inside the app, under Settings, or by writing to [email protected] from your account email address. We confirm the request, delete the account and its personal data within 30 days, and tell you when it is done.

Some data survives account deletion where the law requires it: billing and tax records, and compliance records tied to a number used for sensitive traffic. Call recordings belonging to your organisation’s workspace are its data, not yours, and are deleted on its instruction rather than on yours.

Deleting the app from your device does not delete your account. Use the in-app option or write to us.

• Traffic between the app and Telroi is encrypted in transit using TLS; call media is encrypted using SRTP.
• Recordings and transcripts are encrypted at rest.
• Access by Telroi staff is limited to what a support request or legal obligation requires, and is logged.
• Authentication tokens are held in the platform keystore — Keychain on iOS, Keystore on Android — and are revoked when you sign out or an administrator removes your access.

The app is business software and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, write to [email protected] and we will remove it.

If we change how the app handles your data in a way that affects you, we will update this page and, where the change is material, notify you in the app before it takes effect. The date at the top shows when this policy was last revised.

Privacy enquiries, data-subject requests and general support: [email protected]. Postal enquiries may be sent to Telroi LLC, 6203 San Ignacio Avenue, Suite 110, San Jose, CA 95119, United States.