This policy explains what personal data Evricall collects, why, who receives it, how long we keep it, and the rights you have. It covers the Evricall app, the website evricall.com and the calling service.
1. Who we are
Evricall is made and run by GESANA AB, Sweden. We decide how your data is used, so we are the “controller” under the EU General Data Protection Regulation (GDPR). Company details are on the imprint.
Privacy questions and requests: [email protected]. Everything else: [email protected].
2. The short version
- We collect what we need to connect your calls, bill them, keep the service safe and make calls sound better.
- We never record your calls. Your contacts stay on your phone.
- No ads, no tracking across apps or websites, and we don’t sell or rent your data.
- You can delete your account at any time.
3. What we collect
Your account
- Your name and phone number. Your phone number is also the caller ID the person you call sees, where the route allows it.
- Your email address, if you sign up or sign in with email.
- A sign-in code for each of your devices. We store only a one-way hash of it.
Credit and payments
- Your balance, and every top-up, gift and call charge.
- For card payments: the confirmation our payment processor sends us (name, email, amount). The processor handles your card; we never see card numbers.
- For App Store and Google Play purchases: Apple’s or Google’s transaction record.
Your calls
- The number you called, when, how long, what it cost, which carrier carried it, and how it ended.
- The audio of your call is not recorded or stored. It passes through our servers to the carrier only while the call is live.
Call quality
- How long each step of connecting took; sound quality (delay, jitter, lost audio); the audio format; Wi-Fi or mobile data; your phone’s operating system version; and how often the call reconnected. Our servers record the same kind of measurements from their side.
- Call logs: a technical log of each call, such as “connected”, “network changed” and the quality readings. Phone numbers in it are hidden (only the last two digits show). It never contains what was said.
Feedback you give us
- Your rating after a call and any note you write.
- “Report a problem”: what went wrong, your note, and that call’s technical log.
- Emails you send to support.
Technical data
- Your IP address and the time of each request, in our server logs, to keep the service secure and stop abuse.
What stays on your phone
- If you allow it, the app reads your contacts to show names and suggest numbers. Your contacts are never sent to us.
- The microphone is used only during a call.
4. The website
evricall.com sets no cookies and uses no analytics, advertising or tracking scripts. Like any website, our hosting provider handles your IP address and browser details to deliver pages and block attacks. The site stores a copy of some pages on your device so they load faster next time; it never stores payment pages or personal links.
5. Why we use your data, and our legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Create your account, connect and bill your calls, keep your balance, answer support | Contract (art. 6(1)(b)) |
| Measure and improve call quality: quality data, call logs, ratings, problem reports | Legitimate interest (art. 6(1)(f)): a calling service that works |
| Prevent fraud and abuse and keep the service secure (IP addresses, limits, unusual activity) | Legitimate interest (art. 6(1)(f)) |
| Send service emails: sign-in codes, receipts, account notices | Contract (art. 6(1)(b)) |
| Keep payment and accounting records | Legal obligation (art. 6(1)(c)): Swedish bookkeeping law |
We don’t send marketing emails, and we don’t use your data to make automated decisions that have legal or similarly significant effects on you.
6. Who receives your data
We share data only with the providers we need to run Evricall, and only what each one needs:
- Telephone carriers that connect your call: the number you called, your caller ID and the call’s timing, to put the call through.
- The person you call: sees your phone number as the caller ID, where the route allows it.
- Hosting providers that run our servers, store our database and deliver evricall.com.
- Monitoring and error-reporting services: technical logs, error reports and one summary line per call, with phone numbers and IP addresses removed.
- An email delivery service: your email address and the service emails we send you, and the address you enter when you gift credit by email.
- A card payment processor: handles card payments under its own privacy policy.
- Apple and Google: deliver the app and process store purchases, under their own privacy policies.
- Authorities, only when the law requires it, or to protect people from fraud or harm.
We don’t sell or rent your data, and we don’t share it for advertising.
7. Transfers outside the EU
Some of these providers process data outside the EU and EEA, for example in Canada and the USA. Canada is recognised by the EU as giving adequate protection. For other countries we rely on safeguards approved by the EU, such as the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Ask us for details.
8. How long we keep it
| Data | Kept |
|---|---|
| Account details (name, phone, email) | Until you delete your account |
| Call and payment records | As long as Swedish bookkeeping law requires (up to 7 years). After you delete your account they are no longer linked to your name, number or email |
| Call logs | 30 days, then deleted automatically |
| Ratings, notes and problem reports | Until you delete your account. Notes and logs are then erased; star ratings stay without anything that identifies you |
| Server logs (IP addresses) | Usually gone within a few weeks |
| Monitoring logs and error reports | About 14 days (monitoring) and 30 days (error reports) |
| Backups | 14 days |
9. Your rights
You can ask us to:
- give you a copy of your data (access);
- correct data that is wrong;
- delete your data;
- send your data to you or another service in a machine-readable format (portability);
- restrict how we use it; and
- stop using it where we rely on legitimate interest (objection), for example call logs. We will stop unless we have a compelling reason, such as investigating fraud.
Email [email protected] from the address on your account, or with the phone number on it. We answer within one month. To delete your account, use the app (Account → Delete account) or the delete account page.
You can also complain to the Swedish data protection authority, IMY (Integritetsskyddsmyndigheten, imy.se), or the authority where you live. We’d like the chance to fix it first.
10. Security
Everything between the app and our servers is encrypted (HTTPS, and encrypted audio during calls). The part of a call carried over the ordinary phone network is not end-to-end encrypted. Sign-in codes are stored only as one-way hashes, and only GESANA AB can access our servers and database. No system is completely secure; if a breach puts your data at risk, we tell you and the authorities as the law requires.
11. Children
Evricall is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has given us their data, contact us and we will delete it.
12. Changes to this policy
If we change this policy, we update the date at the top and, for changes that matter to you, tell you in the app or by email before they apply.