Privacy Policy

Last updated: June 8, 2026

Welcome to Yosh Call ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect the following categories of information:

Account Information: Email address, display name, and profile photo you provide during registration.
Usage Data: Call history, session duration, features used, and in-app activity.
Device Information: Device model, operating system, and crash diagnostic data collected via Firebase Crashlytics.
Payment & Wallet Data: Coin balance, transaction history, and purchase records. We do not store full payment card details — payments are processed securely by Google Play Billing.
Communications: Video and audio streams during live calls are transmitted in real-time via Agora RTC. We do not record, store, or retain call content.
Technical Data: IP address, log data, crash reports, and app performance metrics.

2. How We Use Your Information

To create and manage your account
To facilitate live video and voice calls between users
To process coin purchases and virtual gift transactions
To send push notifications about calls and app updates via Firebase Cloud Messaging
To detect, investigate, and prevent fraud, abuse, and policy violations
To monitor app stability and fix crashes via Firebase Crashlytics
To improve, personalize, and expand our Service
To comply with legal obligations

3. Third-Party Services

We do not sell your personal information. We use the following third-party services that may process your data:

Agora RTC — Real-time audio/video infrastructure. Audio and video are encrypted in transit and not stored.
Supabase — Backend database and authentication. Your account data is stored on Supabase's secure servers.
Firebase (Google) — Crash reporting (Crashlytics) and push notifications (FCM).
Google Play Billing — Secure in-app purchase processing for coin packages.
Law Enforcement — We may disclose data when required by applicable law, court order, or government authority.

4. Camera & Microphone Access

The app requests access to your camera and microphone solely for the purpose of conducting live video and voice calls. We do not access these at any other time, and no recordings are made or stored. You can revoke permissions at any time via your device settings, though this will disable call functionality.

5. Data Retention

We retain your account data for as long as your account is active. Transaction records are retained for up to 7 years for financial compliance purposes. Crash logs are retained for 90 days. Upon account deletion, your personal data is permanently removed within 30 days, except where retention is required by law.

6. Account Deletion

You can delete your account at any time directly from within the app:

Go to Profile → Settings → Delete Account
Confirm deletion — your account and all associated data will be permanently removed within 30 days

Alternatively, you may request account deletion by emailing yoshcallapp@gmail.com with the subject "Delete My Account".

7. Children's Privacy

Yosh Call is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete it. If you believe a minor has registered, please contact us at yoshcallapp@gmail.com.

8. Data Security

We implement industry-standard security measures to protect your data, including:

TLS/HTTPS encryption for all data in transit
Row Level Security (RLS) on our database to prevent unauthorized access
Secure JWT-based authentication tokens
Regular security audits and monitoring

In the event of a data breach that affects your personal data, we will notify you as required by applicable law.

9. Your Rights (GDPR & CCPA)

Depending on your location, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restriction: Request that we limit how we process your data
Right to Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing of your data for certain purposes
California Residents (CCPA): You have the right to know what data is collected, to opt out of data selling (we do not sell data), and to non-discrimination for exercising your rights

To exercise any of these rights, contact us at yoshcallapp@gmail.com. We will respond within 30 days.

10. Cookies & Local Storage

Our mobile app does not use cookies. Our website may use essential cookies for basic functionality. We do not use tracking or advertising cookies. Local storage on your device is used only to maintain your session and app preferences.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including reliance on standard contractual clauses where required by law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via in-app notification or email at least 7 days before the changes take effect. The updated date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us:

Email: yoshcallapp@gmail.com
Website: yoshcall.vercel.app

We take privacy seriously and will respond to all inquiries within 5 business days.