Privacy Policy
Attested Call
Last updated: March 2026
1. Who We Are
Attested Call is operated by VDR Tech LLC, a company registered in Masdar City Free Zone, Abu Dhabi, United Arab Emirates.
Contact:
- Email: privacy@attestedcall.com
- Address: Masdar City Free Zone, Abu Dhabi, United Arab Emirates
This Privacy Policy explains how we collect, use, and protect your information when you use the Attested Call application and related services.
2. What We Collect
2.1 Information You Provide
| Data | Purpose |
|---|---|
| Name | Account identification, display to your contacts |
| Email address | Account verification, license delivery, service communications |
| Phone number | Account verification (SMS), caller identification |
| Billing address | Payment processing (when applicable) |
2.2 Information Collected Automatically
| Data | Purpose |
|---|---|
| Device identifiers | License binding, multi-device management |
| Device model and OS version | Compatibility, troubleshooting |
| App version | Service delivery, updates |
| IP address | Security, approximate location for service optimization |
| Usage data | Service improvement, analytics |
2.3 Call Verification Data
When you make or receive an attested call, we process:
- Caller and recipient identifiers (phone numbers or user IDs)
- Timestamp of the call
- Verification status (verified/unverified)
- Public cryptographic keys (for signature verification)
2.4 Referral Data
If you invite others to Attested Call, we track:
- Invitations sent (recipient email or phone, if provided)
- Referral relationships (who invited whom)
- Invitation status (pending, used, expired)
3. What We Do NOT Collect
We do not collect, store, or transmit:
- Biometric data — Face ID, fingerprint, or any biometric information. All biometric authentication happens entirely on your device within the Secure Enclave (iOS) or Trusted Execution Environment (Android). We receive only a "yes/no" confirmation that you authenticated successfully.
- Call content — We do not access, record, or store the content of your phone calls. Attested Call provides verification of identity, not communication services.
- Voice recordings or audio — No audio data is transmitted to our servers.
- Location data — We do not collect precise GPS location. IP-based approximate location may be inferred for security purposes only.
4. How We Use Your Information
| Purpose | Legal Basis |
|---|---|
| Provide and operate the service | Contract performance |
| Verify your identity and license | Contract performance |
| Send service-related communications | Contract performance |
| Send marketing communications (with consent) | Consent |
| Improve and develop the service | Legitimate interest |
| Ensure security and prevent fraud | Legitimate interest |
| Comply with legal obligations | Legal obligation |
5. Marketing Communications
With your consent, we may send you marketing communications about:
- Attested Call features and updates
- Other products and services from VDR Tech LLC
- Products and services from our partners
You can withdraw consent at any time by:
- Clicking "unsubscribe" in any marketing email
- Emailing privacy@attestedcall.com
- Adjusting settings in the app
Withdrawing marketing consent does not affect service-related communications (e.g., license notifications, security alerts).
6. Who We Share With
We do not sell your personal data. Ever.
We share data only with:
6.1 Service Providers
| Provider | Purpose | Location |
|---|---|---|
| Google Firebase | Authentication, database, push notifications | EU |
| Cloudflare | Security, CDN | Global (EU-compliant) |
| Resend | Email delivery | US (with SCCs) |
| Apple App Store | App distribution (iOS) | US (with SCCs) |
| Google Play Store | App distribution (Android) | US (with SCCs) |
| Huawei AppGallery | App distribution | Various |
6.2 Legal Requirements
We may disclose information if required by law, court order, or government request, or to protect the rights, property, or safety of VDR Tech LLC, our users, or others.
6.3 Business Transfers
If VDR Tech LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.
7. International Transfers
Your data may be transferred to and processed in countries outside your residence, including the European Union and United States.
For transfers outside the EU/EEA, we use:
- European Commission Standard Contractual Clauses (SCCs)
- Adequacy decisions where available
- Other lawful transfer mechanisms
For transfers from the UAE, we comply with UAE Personal Data Protection Law requirements.
8. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 2 years |
| Verification logs | 2 years |
| Referral data | Duration of account |
| Marketing preferences | Until withdrawn |
After account deletion, we retain anonymized data for analytics and may retain certain data as required by law.
9. Your Rights
Depending on your location, you may have the right to:
| Right | Description |
|---|---|
| Access | Request a copy of your personal data |
| Rectification | Correct inaccurate data |
| Erasure | Request deletion of your data |
| Portability | Receive your data in a portable format |
| Restriction | Limit how we process your data |
| Object | Object to certain processing (e.g., marketing) |
| Withdraw consent | Withdraw consent where processing is based on consent |
To exercise these rights, email privacy@attestedcall.com. We will respond within 30 days (or sooner where required by law).
10. Children's Privacy
Attested Call may be used by individuals of all ages, including minors, to verify calls within families.
For users under the age of digital consent in their jurisdiction (16 in most EU countries, 13 in the US, varies elsewhere):
- Parental or guardian consent is required
- Parents or guardians are responsible for the minor's use of the service
- We do not knowingly collect data from minors without appropriate consent
If you believe a minor is using our service without appropriate consent, contact privacy@attestedcall.com.
11. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS) and at rest
- Access controls and authentication
- Regular security assessments
- Incident response procedures
No system is perfectly secure. If you discover a security vulnerability, please report it to security@attestedcall.com.
12. Jurisdiction-Specific Provisions
12.1 European Union / United Kingdom (GDPR / UK GDPR)
- Data Controller: VDR Tech LLC
- Legal Bases: As described in Section 4
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
12.2 United Arab Emirates (PDPL)
- We comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021)
- Data is processed in accordance with UAE data protection requirements
- You may contact the UAE Data Office for complaints
12.3 Mexico (LFPDPPP)
- We comply with the Federal Law on Protection of Personal Data Held by Private Parties
- You may exercise ARCO rights (Access, Rectification, Cancellation, Opposition) via privacy@attestedcall.com
- You may file complaints with INAI
12.4 Malaysia (PDPA)
- We comply with the Personal Data Protection Act 2010
- Data is processed in accordance with Malaysian data protection principles
- You may lodge complaints with the Personal Data Protection Department
12.5 Singapore (PDPA)
- We comply with the Personal Data Protection Act 2012
- You may withdraw consent for collection, use, or disclosure of your data
- You may lodge complaints with the Personal Data Protection Commission
12.6 Australia (Privacy Act)
- We comply with the Australian Privacy Principles under the Privacy Act 1988
- You may lodge complaints with the Office of the Australian Information Commissioner (OAIC)
- We will notify you and the OAIC of eligible data breaches as required by law
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by:
- Email to your registered address
- In-app notification
- Posting the updated policy on our website
14. Contact Us
For questions about this Privacy Policy:
Email: privacy@attestedcall.com
Mail:
VDR Tech LLC
Masdar City Free Zone
Abu Dhabi, United Arab Emirates
© 2026 VDR Tech LLC. All rights reserved.