Privacy policy

Last updated: 10 October 2026

This explains what I Can Call stores, who else touches it and how to get rid of it. If something here is unclear, write to hello@icancall.app and we'll explain it properly.

Who we are

I Can Call is operated by [YOUR BUSINESS NAME], [YOUR ADDRESS, CITY, COUNTRY]. For anything about your data, contact hello@icancall.app.

What we collect

You give us

• Account details: your email address, and a first name if you enter one. Passwords are handled by our sign-in provider and never stored by us in readable form. If you sign in with Google, we receive your email address and name, not your Google password.
• Onboarding answers: which conversations you find hard, what tends to happen under pressure, what you want to improve.
• What you say in practice calls: the transcript of your side and the character's side, kept so the app can tell you how the call went and track progress. You can switch this off in Settings, and then the transcript is deleted as soon as the feedback is written.
• Things you type: the real conversation you describe when you rehearse an upcoming call, and any invite code.

Created as you use it

• Practice records: when a call happened, how long it lasted, which skill it practiced, whether you reached the goal, and the feedback produced.
• Usage: minutes used against your plan, so limits can be applied fairly.
• App events: basic counts like "practice started" or "feedback viewed". These carry an account id and never free text.
• Technical data: ordinary server logs from our hosting, including IP address, kept briefly for security and debugging.

What we never collect

• We don't record or store audio of your calls.
• We don't read your contacts, photos, messages or location.
• Call to Unlock (Android) sees only whether one of the apps you chose has come to the front. It keeps no browsing history, no list of your other apps and sends nothing about them to us.
• We don't run advertising networks or third-party trackers in the app or on this site.

Why we hold it

• To run the thing you signed up for: your account, your practice, your feedback, your limits. (Performing our contract with you.)
• To keep it working and safe: debugging, preventing abuse of free minutes, protecting accounts. (Our legitimate interest.)
• To answer you when you write to us.

We do not sell personal information, and we don't use your practice conversations to train AI models.

Who processes it for us

We use a small number of services, each doing one job:

• Supabase — database and sign-in. Stores your account, profile, practice history and feedback.
• Vercel — runs our API and keeps short-lived request logs.
• ElevenLabs — produces the voices and converts speech during a call. It receives the audio and text of the conversation for the duration of the call; it does not receive your email, name or account details, and it is not permitted to use your conversations for its own purposes.
• Hostinger — hosts this website.
• Our email provider — delivers sign-up and password-reset codes.

These providers operate servers outside your country, including in the United States and the European Union. Where required, transfers rely on standard contractual clauses or equivalent safeguards.

How long we keep it

• Account, profile and progress: until you delete your account.
• Transcripts: until you delete them, delete your account, or immediately after feedback if you have transcript saving switched off.
• Usage records: kept while your account exists so plan limits work.
• Server logs: a short period, typically up to 30 days.
• Backups: deleted data disappears from backups as those backups expire, normally within 30 days.

Your choices

• Delete everything: Settings → Account → Delete account, in the app. It takes effect straight away. You can also ask through this page.
• Delete just your practice history: Settings → Privacy → Delete history.
• Stop storing transcripts: Settings → Privacy.
• Get a copy, correct something, or object: email us and we'll sort it out, normally within a month.
• If you're in the UK, EU or a country with similar rules, you can complain to your data protection authority.

Children

I Can Call isn't intended for anyone under 16. We don't knowingly keep accounts for children; if you believe a child has signed up, tell us and we'll remove it.

Security

Connections are encrypted. Your practice data sits behind row-level database security and is reachable only through our API, with your identity checked on every request. No system is perfect; if something does go wrong and it affects you, we'll tell you and the relevant authority where the law requires it.

This website

The site uses no analytics or advertising cookies. Fonts are loaded from Google Fonts, which means Google receives the request for the font file, including your IP address.

Changes

If this policy changes in a way that matters, we'll say so in the app before it takes effect. The date at the top always shows the current version.