What does Realcaller send, and what stays on your phone?

Most checks happen on your phone. The caller’s number does leave it when a live lookup is needed, over HTTPS and without a device ID. This page lists everything that is sent, and everything that is not.

See what leaves the phone Read the draft policy

This page is in plain words. It is not the legal privacy policy, which is still a draft. Facts here were checked on October 8, 2026.

What stays on your phone?

Your contacts, your lists, your history and your counts. None of it is sent anywhere.

Your contacts: Read on the phone only if you allow it, so your contacts’ calls pass without a card. Never uploaded, stored or logged. Their names are looked up when shown and not kept.
Your blocklist and your allowed list: Matched on the phone. The server never sees them.
Your call history: The app keeps its own history of up to 500 screened calls, on the phone. It does not read your phone’s call log.
Your searches: The last 20 numbers you searched, on the phone. You can clear them.
Your weekly summary, widget and counts: Counts only, kept on the phone.
Backups: The app’s data is excluded from Android cloud backup and device transfer.

What leaves your phone, and when?

Five things can leave your phone. Each is listed here with what the server receives and what it keeps. Everything goes over HTTPS only.

What Realcaller sends and what the server keeps
When	What the server receives	What the server keeps
A call answered on the phone (contacts, your lists, memory or the offline list)	Nothing.	Nothing.
A call that needs a live lookup	The caller’s full number, not hashed, and the country of your SIM (or US if there is no SIM). No device ID.	Only if the number is unknown to the database or known only from user reports: the number, the country and the time, deleted after 30 days. For known numbers, no record.
A number you search by hand	The same as a live lookup. It is always sent, even if the phone already has an answer.	The same as a live lookup.
A report you send	The number, the category, your note (only for “Other”, up to 500 characters) and your random device ID.	All of it, plus the time and the device’s trust weight. No retention period is set yet. Your note is never shown to other users.
A tap on Spam or Not spam	The number, your random device ID, the time of the call, the verdict you saw and your tap.	All of it, for 180 days. A nightly job then deletes it.
The daily list update	Your region code (from your SIM, or US) and the time of your last update. No number and no device ID.	Nothing specific to your phone.

What is the device ID?

A random code your phone makes for itself the first time it needs one. There is no account, so the app holds no name or email for you.

When it is sent: Only with a report or a Spam or Not spam tap. Never with a live lookup or the daily update.
What the server links it to: The numbers you report and the cards you tap, plus a trust score, when it was first and last seen, and how many reports it has sent.
How to get a new one: There is no reset setting. Clearing the app’s data or reinstalling makes a new ID.

What does Realcaller never touch?

Four permissions are not requested at all, and the app has no advertising, analytics or crash-reporting code.

Call log and SMS: The app does not ask for either permission.
Location: No location permission. Your region comes from the country of your SIM, never from GPS.
Microphone: No microphone permission.
Ads, analytics and crash reporting: The app has no code from advertising, analytics or crash-reporting companies.

What do the server logs hold?

Since October 7, 2026 the server’s request log masks each number to its last four digits, like ***0142.

Before that fix went live that morning, the log held the full numbers that were looked up. Logs are kept in three rotating files of 10 MB each. The app runs on a server hosted with Vultr.

What about this website?

The waitlist form is handled by Formspree, a separate company.

It asks for your email and your country. We use them only for the waitlist. Please do not type anything else into it.

What is not settled yet?

A few things have no final answer, and we would rather say so than guess.

How long reports are kept. No period is set yet. (Spam and Not spam taps are deleted after 180 days.)
How to ask for your data to be deleted. There is no process yet.
Whether the server’s request log keeps phone IP addresses. We have not confirmed it, so we claim nothing either way.

Is there a legal privacy policy?

Read the draft privacy policy

Join the waitlist

Realcaller is in development and not on Google Play yet. Leave your email and country, and we will use them only for the waitlist.