Privacy Policy
Effective from 20.07.2026 · Version 1.0 · GDPR
This Privacy Policy is a draft prepared as a starting point. Before publication it must be checked and adapted by a qualified lawyer against how SilentCall actually processes data and against the current list of service providers used. This document is not legal advice.
1. About this policy
- This policy explains how we collect and use personal data when you visit silentcall.me, create an account, use the SilentCall service, and when you provide the phone numbers of trusted contacts. It also explains your rights and how to exercise them.
- We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and Polish data-protection law.
- Terms used here (Service, Account, Recording, Unique Link, Notified Number) have the meanings given in our Terms & Conditions.
2. The data we process and why
We process four main groups of data. The table summarises each; the paragraphs below add detail.
| Data | What it includes | Purpose | Legal basis (GDPR) | Retention |
|---|---|---|---|---|
| Website & cookies | IP address, device/browser data, usage and analytics identifiers, your cookie choices | Run and secure the site; measure and improve it (analytics) | Legitimate interest — Art. 6(1)(f) for essential/security; consent — Art. 6(1)(a) for analytics cookies | See the cookie table (§7) |
| Account | Name, email, password (hashed), your own phone number, plan, billing and payment records, support messages | Create and run your Account; provide the Service; billing; support | Contract — Art. 6(1)(b); legal obligation (accounting) — Art. 6(1)(c); legitimate interest for support/security — Art. 6(1)(f) | For the life of the Account, then up to the limitation period; invoices per accounting law |
| Call recordings & history | Audio recordings of incoming calls (up to 5 min), call metadata (time, caller number), the Unique Links generated | Provide the recording, storage and secure-sharing features you switch on | Contract — Art. 6(1)(b) (as to you). For third parties heard in a Recording, you are the controller — see §3 | Up to 30 days from capture, or until you delete the Recording, whichever is first |
| Trusted contacts | The phone numbers of up to 3 people you choose (Notified Numbers) | Send an SMS telling them a Recording is available, as you configured | Contract with you — Art. 6(1)(b). You confirm you may share these numbers; you are the controller of them — see §3 | Until you change or remove them, or the Account ends |
We do not listen to your Recordings. As set out in the Terms, the Provider does not check, listen to or verify the content of Recordings; they are processed automatically and are available only to you and to anyone you share a Unique Link with.
3. When you are the controller (recordings & trusted contacts)
- The audio Recordings you create, and the trusted-contact phone numbers you enter, contain personal data of other people. For that data you are the data controller and we act only as your processor — we store and transmit it on your instructions to provide the Service (Article 28 GDPR). Where required, this is governed by a separate data processing agreement.
- This means you are responsible for having a lawful basis to record and to notify those contacts, and for honouring their rights. Please see the recording warning in clause 7 of the Terms: SilentCall is for recording your own voice and surroundings when you feel unsafe, not for monitoring others.
- As controller of your Account data (§2), we remain responsible for keeping the platform that stores this content secure.
4. Who we share data with
We do not sell your data. We share it only with providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:
- Cloud hosting and infrastructure providers — to store the Account and Recordings securely;
- Telephony and SMS providers — to receive calls, provide numbers and send the SMS notifications;
- Payment providers — to take subscription payments (we do not store full card numbers);
- Analytics providers — to measure how the site is used, only if you accept analytics cookies (see §7);
- Professional advisers and public authorities — where the law requires.
International transfers. Some of our providers may process data outside the European Economic Area, including in countries such as the United States. Where that happens, the transfer is protected by appropriate safeguards — an adequacy decision or the European Commission's Standard Contractual Clauses. You can ask us for a copy of the safeguards at [email protected].
5. How long we keep data
- Recordings are kept for up to 30 days from capture and are then deleted automatically; you can delete a Recording sooner at any time from your Account.
- Account data is kept for as long as you have an Account and then for the period needed to handle claims (the limitation period) and to meet legal duties.
- Invoices and accounting records are kept for the period required by Polish accounting and tax law.
- Cookies are kept for the periods shown in §7.
6. Your rights
Under the GDPR you have the right to: access your data; have it corrected; have it erased; restrict or object to processing; data portability; and, where processing is based on consent, to withdraw consent at any time (without affecting earlier processing). To exercise any right, email [email protected].
You also have the right to lodge a complaint with a supervisory authority — in Poland, the President of the Personal Data Protection Office (Prezes UODO), uodo.gov.pl — or with the authority in your country of residence.
Where a Recording or trusted contact concerns you but was created by one of our Customers, that Customer is the controller (§3); we will pass your request to them and help where we can.
7. Cookies and analytics
- We use a small number of cookies. Essential cookies keep the site working and remember your cookie choice. Analytics cookies help us understand how the site is used, and load only after you accept them.
- We use consent-mode signals: before you choose, analytics and advertising storage are set to "denied", and they are enabled only if you accept. You can change your choice at any time through the cookie settings link on the site.
| Cookie | Type | Purpose | Retention |
|---|---|---|---|
| sc_consent | Essential | Stores your cookie choice | Up to 12 months |
| _ga, _ga_<id> | Analytics | Distinguish users and sessions for statistics — set only after consent | Up to 24 months |
8. Security
- We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and restricted access to Recordings.
- No service can be guaranteed completely secure; if a personal-data breach is likely to result in a high risk to you, we will notify you and the supervisory authority as required by the GDPR.
9. Children
SilentCall may be used by teenagers as part of a family. The Service is not directed at children under the age where they can validly consent to online services (16 in Poland) without the involvement of a parent or guardian. Where a younger person uses the Service, a parent or guardian should set it up and consent on their behalf.
10. Changes to this policy
- We may update this policy from time to time. We will publish the current version on the website and, where the change is significant, tell Account holders on a durable medium (for example, by email).
- This policy takes effect from 20.07.2026.
11. Contact
For any question about this policy or your personal data, contact AI WORD sp. z o.o. at [email protected], or by post at Żurawia 71, 15-540 Białystok, Poland.