Privacy Policy for Kall AI: Phone Assistant

1. Introduction & Ownership

This Privacy Policy governs the collection, processing, and protection of information by Kall AI: Phone Assistant (hereinafter referred to as the "App" or "Service"), developed and operated by Hastradar Consultancy (hereinafter referred to as "Hastradar", "we", "us", or "our").

By downloading, installing, or enabling call forwarding to Kall AI, you ("Subscriber" or "Business Owner") and those contacting your business through our telephone reception services consent to the processing of information in accordance with this Privacy Policy and the statutory mandates of the Digital Personal Data Protection Act (DPDPA 2023, India) and Google Play Developer Program Policies.

2. Information We Collect and Process

To provide high-reliability phone reception, Kall AI processes the following categories of data:

2.1 Business Owner Account & Configuration Data

• Account Credentials: Mobile phone number, verified email address, and authentication tokens via Google Play / Firebase Auth.
• Business Grounding Profile: Business name, industry vertical (e.g. Clinic, Retail, Real Estate, Consulting), operating hours, address, services/product catalog, pricing, doctor availability slots, and custom FAQ responses provided directly by you.
• Billing & Usage Metadata: Active minute balances, subscription status, and transaction IDs provided via Google Play In-App Billing. We do not receive or store your raw payment card or bank details.

2.2 Inbound Caller Audio & Conversation Data

• Real-time Audio Stream: Live incoming voice audio transmitted from your telecom carrier to our secure CPaaS (telecom gateway) solely during active telephone calls. Audio is streamed in real-time to Google Cloud Speech-to-Text for transcription and dialogue generation. Raw audio is not retained once transcription has completed.
• Call Transcripts & Structured Summaries: Text transcript of the conversation, caller phone number, call timestamp, duration, identified intent tags (e.g. "Appointment Request", "Grocery Order", "Urgent Callback"), and structured key-value pairs (e.g. requested time slots, item quantities).
• Compliance Audit Logs: Immutable records verifying that the mandatory statutory AI disclosure was spoken aloud at the beginning of each call (including timestamp, call ID, language code, and confirmation token).

3. Android Permissions & Technical Capabilities

Kall AI requests the following specific runtime permissions and Android system roles to deliver automated call screening:

• Call Screening Role (RoleManager.ROLE_CALL_SCREENING): Required to evaluate incoming phone calls on-device against your active auto-answer schedule or toggle state. When auto-answer is enabled, the app rejects the call locally without ringing your phone, enabling your carrier's standard conditional forwarding (*67 / *61) to route the caller seamlessly to your cloud assistant. Kall AI does not record or store non-screened calls.
• Phone Dialing (android.permission.CALL_PHONE): Used solely upon your explicit tap to dial carrier MMI diversion codes (such as *67*01141182702#) to configure 1-tap call forwarding with Airtel, Jio, Vi, or BSNL.
• Push Notifications (android.permission.POST_NOTIFICATIONS): Used to deliver high-priority alerts with call notes, orders, and appointment bookings directly to your phone's notification bar immediately upon call termination.

4. Compliance with Indian DPDPA 2023

Hastradar maintains strict compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) regarding the processing of digital personal data within India:

• Mandatory AI Voice Disclosure: In accordance with statutory guidelines, our AI receptionist opens 100% of calls with a clear verbal disclosure: "Hello, you have reached the AI assistant for [Business Name]..." in the caller's language. The assistant never impersonates a human owner.
• Purpose Limitation: Caller data is processed solely to fulfill customer requests (booking appointments, logging inquiries, capturing grocery orders) on behalf of the business owner.
• No Outbound Telemarketing: Kall AI is an inbound call reception gate. It does not perform cold calling, promotional blasting, or automated dialer campaigns.
• Data Retention & Automatic Purge: Call notes and transcripts are retained for thirty (30) days by default to allow review by the business owner, after which they are subject to automated purging. Owners may manually delete individual call records at any time directly within the app.

5. Third-Party Service Providers

We collaborate exclusively with enterprise-grade cloud and telephony infrastructure providers that adhere to ISO 27001, SOC 2, and rigorous security standards:

• Google Cloud Platform & Gemini Flash-Lite: Real-time streaming Speech-to-Text (STT), Text-to-Speech (TTS), and Large Language Model turn generation. Google does not use customer call transcripts to train foundation models.
• Indian Telecom CPaaS (Exotel): Encrypted telephony routing and SIP trunking under Department of Telecommunications (DoT) licensing in India.
• Firebase & Google Cloud Firestore: Encrypted data storage and FCM push notifications secured with per-user UID isolation rules.
• Google Play Billing: Secure payment processing for in-app subscriptions and minute top-up packs.

6. User Rights & Data Deletion

Both business owners and end callers have guaranteed rights regarding their data:

• Right to Review & Access: You can view all logged transcripts, summaries, and recordings directly in the app's "History" and "Today" tabs.
• Right to Erasure (Deletion): You can delete any individual call note or your entire account with all associated transcripts. Visit our dedicated Account & Data Deletion Page or initiate deletion within the app (Profile → Account → Delete Account & Data).
• Right to Withdraw Consent: You can deactivate call forwarding at any moment by dialing ##002# (or *402 on Jio) or toggling off auto-answering in the app.

7. Security Standards

All data transmission between the mobile device, our cloud backend, and telephony providers is encrypted using TLS 1.3 / HTTPS with strict certificate pinning. Stored transcripts in Firestore are protected with AES-256 encryption at rest and constrained by granular security rules enforcing authentication and business UID verification.

8. Grievance Officer & Contact Information

If you have questions, regulatory inquiries, or wish to exercise your rights under DPDPA 2023, please contact our designated Grievance & Compliance Officer:

• Company: Hastradar Consultancy (HCS Legal & Technology Advisory)
• Support Email: support@hastradar.com
• App Direct Inquiries: arunkumar.jha@hastradar.com
• Corporate Portal: https://hastradar.com/#contact
• Data Deletion Portal: https://www.hastradar.com/apps/kall-ai/delete-account.html