Privacy Policy | Call Me Back

Who we are

Call Me Back ("we", "us") is an iOS app for live voice calls, texts, voice notes and pictures with fictional AI characters. The app was previously called RizzCall. Tarik Fatih PINARCI operates Call Me Back and is the data controller for the processing described in this policy. For anything about privacy, write to support@rizzcall.app. A human reads it.

Your account

There is no sign up. When you first open the app, our server creates a random account ID and a random secret token. The token is saved on your device, and our server keeps only a one way hash of it, never the token itself. We do not ask for your email, phone number or real name to use the app.

To stop automated abuse, the server keeps a one way hash of the IP address that created an account or started a call, with a timestamp. That record holds no account ID.

What we collect and why

What you tell us in onboarding and settings

Your age range (18 to 20, 21 to 25, or 26 plus). If you choose "Under 18", onboarding stops and nothing is sent.
Who you want calls from (men, women, anyone, or a friend), which character story you picked, and your time zone, so daily limits and quiet hours follow your local day.
Your notification preferences and quiet hours.
The name the characters call you. If you never type one, the AI that writes a character's note after a call may pick up the name you said out loud during the call and save it to your profile.

Live calls

A call is a live voice conversation with an AI character. Your microphone audio streams from your phone through our server to OpenAI or ElevenLabs, depending on the call's voice provider. On the ElevenLabs route, ElevenLabs transcribes your speech, OpenAI generates the character's reply from text, and ElevenLabs speaks that reply. We do not record or store call audio on our servers. Our server passes the audio through and saves only counters, such as how many seconds the call lasted. For Clip Studio, the app records both sides of a call in temporary files on your device. It removes those files when you start another call or reopen the app. Finished clips you save stay on your device, up to ten at a time, until you delete your account or remove the app. Saved clips may also be included in your device backups.

While the call runs, the voice service returns a text transcript of both sides. A separate AI model reads the most recent lines during the call to set the character's mood and decide when they hang up. When the call ends, the app sends the transcript to our server, which stores it with the call, along with an assessment of how the call went, its outcome and its length.

Call transcripts are deleted automatically after 30 days. They are used to write the character's private note after the call, to extract what the character remembers, and to move your story on.

Texts, voice notes and photos you send

Text messages you send a character are stored with your conversation and sent to OpenAI to write the reply.
Voice notes you record are stored as audio files, and a copy is sent to OpenAI to be transcribed into text. The audio and its transcript are both kept.
Photos you send in a chat are stored as image files and shown to OpenAI's model so the character can react to them.

These stay in your conversation until you delete your account.

Your profile photo

On the You screen you can add a photo of yourself, taken with the camera or picked from your photo library. It is optional. It replaces the first letter of your name on the You screen and your player card, and it is the photo used for "a selfie together" (below).

Before it is saved, the photo is checked by an OpenAI vision model for a visible face, no nudity or sexual content, and no one who clearly looks like a child. A photo that fails the check is refused and not stored. A photo that passes is stored on our servers in Cloudflare R2.

Only you can see your profile photo. It is never shown on leaderboards or to other players. When you ask for a selfie together with a character, it is sent to OpenAI's image model as the reference picture of you. You can replace or remove it on the You screen at any time, and removing it deletes the file from our servers. It is also deleted when you delete your account.

"A selfie together"

If you ask for a selfie with a character, the app uses your profile photo, or you upload a new photo of yourself, and you confirm that you consent to its use. A new photo you upload here also becomes your profile photo. Before anything else happens, the photo is checked by an OpenAI vision model for one visible face, a real photograph, no nudity or sexual content, and no one who clearly looks like a child. A photo that fails the check is refused and not stored.

For each selfie, a working copy of the photo is stored briefly while an OpenAI image model makes the picture of you and the character together. That working copy is deleted as soon as the job finishes, and also if it finally fails. Your profile photo stays until you replace or remove it, or delete your account. The finished picture is kept in your conversation until you delete your account.

We do not use your photos to identify you and we do not create face templates or other biometric identifiers from them.

What the characters remember

The characters in your story remember what happens in it. After calls and after batches of texts, an AI model reads the material and saves short memory notes about you in that story: people you mention, plans, preferences, promises, running jokes, events and details. Each story keeps up to 60 such notes, and a plan with a date is deleted a few days after that date passes. Characters also write a private note after each call, a short summary of it, and weekly recaps of your story.

What you say is up to you. A call or a chat is an open conversation, and you may mention things that are sensitive (your health, beliefs, relationships, other people). We do not ask for this. If you say it, it is processed and may be remembered like anything else in the story. Please do not share information you would not want stored.

Story progress and usage limits

Where each story stands (relationship status, day, warmth), call history, which messages you have seen, moments you save, how many calls, selfies and pictures you have used, and internal counters such as a call streak.

Feedback

If you send feedback from Settings, we store its category, your message and the app version with your account.

Purchases

Purchases are made through Apple. RevenueCat manages subscription status for us, and your account ID is the ID RevenueCat uses for you. We store which plan you have, extra call packs you bought, and records of the billing events RevenueCat sends us. We never receive your payment card or Apple ID details.

Usage analytics

The app sends product events (for example: app opened, call started, call completed, onboarding step viewed, paywall viewed, purchase) to our server, which forwards them to PostHog in the EU. Only events on a fixed list are accepted, and only a fixed set of properties goes with them: numbers such as call length or onboarding step, a few fixed labels such as your plan or how a call ended, the character's ID and your app language. Message text, transcripts, photos and names are never sent. The events are linked to your account ID. PostHog keeps a person profile for you with one property only: how far you got in onboarding. Because events go through our server, PostHog does not receive your device's IP address.

Notifications

Notifications are scheduled on your device by the app. We do not collect a push notification token.

Operational logs

Our server writes error and diagnostic logs, which can contain your account ID, to Cloudflare's logging service. These logs are kept for a short period and then deleted automatically.

Crash and error reports

The app and our server send crash and error reports to Sentry so we can find and fix problems. A report holds a short fixed label for what went wrong, technical details such as an error code, the stack trace, the app version and device model, and your anonymous account ID, so we can tell whether one person or many hit the same problem. Reports never include your messages, transcripts, photos, voice, names, request bodies or screenshots, and session replay is off. Sentry keeps these reports for up to 90 days, then deletes them.

Who processes your data

Cloudflare: runs our server and stores our database and files (Workers, D1, R2 and Queues), including your profile photo, and our server logs. Cloudflare may store this data in data centres in the United States, the European Union or other countries.
OpenAI: live voice calls, the in call mood judge, text replies, memory extraction, call notes, summaries and recaps, voice note transcription, character voice notes, image generation (including selfies made from your profile photo) and photo screening, including the check on your profile photo. Requests carry a one way hash of your account ID so OpenAI can flag abuse. Under OpenAI's API terms, API data is not used to train their models by default. OpenAI may keep API data for up to 30 days to detect abuse, and then deletes it unless the law requires it to keep it longer.
ElevenLabs: live call transcription and generated character speech, including voice notes and voice previews. Live calls use ElevenLabs. ElevenLabs receives caller audio for transcription and character reply text for speech. ElevenLabs processes this data under its own API terms and privacy policy.
RevenueCat: subscription and purchase status.
PostHog (EU cloud): product analytics, as described above.
Sentry (EU region): crash and error diagnostics from the app and our server, as described above.
Apple: app distribution and payments.

We do not sell your personal information and we do not use it for advertising.

International transfers

OpenAI processes call audio, messages and photos in the United States. ElevenLabs, Cloudflare, Sentry, RevenueCat and Apple may process data outside your country. Where the law requires it, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU US Data Privacy Framework.

Legal bases (EU, EEA and UK)

We process your data to provide the app you asked for (performance of a contract), for product analytics, security and abuse prevention (legitimate interests), and with your consent where the law requires it, such as your profile photo and the photo you upload for a selfie. Crash and error reports rely on legitimate interests (keeping the app working). iOS asks you directly before the app can use your microphone, camera, photo library or send notifications, and you can withdraw those permissions in iOS Settings at any time.

How long we keep data

Call audio: not stored on our servers. Clip Studio keeps temporary recordings on your device until your next call or app launch. Up to ten saved clips remain on your device and may be included in device backups until account deletion or app removal.
Call transcripts: deleted automatically 30 days after the call. What the character remembers, their notes, summaries and recaps stay.
Messages, voice notes, photos you sent, generated pictures, memory notes, character notes, summaries and recaps: kept until you delete your account.
Your profile photo: kept until you replace or remove it on the You screen, or delete your account.
The working copy of a photo used for a selfie: deleted when the selfie job finishes or finally fails.
Crash and error reports: kept by Sentry for up to 90 days, then deleted.
Dated plans in a character's memory: deleted a few days after the date passes.
Hashed IP records used for rate limiting: kept without an account ID., so they cannot be linked back to you.
Purchase records held by Apple and RevenueCat: kept under their policies and as accounting law requires.

Deleting your data

In the app: Settings, then Memory and privacy, then Delete account. This erases, on our servers:

your account and profile;
your calls and their transcripts, stories, messages, memory notes, character notes, recaps, saved moments, feedback and usage records;
every file stored for you: your profile photo, voice notes, photos, generated pictures and any selfie upload still pending;
your analytics history in PostHog. We send the deletion request at once and retry it daily until PostHog accepts it.

The app then erases the account token on your device, so the account can never be opened again. After deletion we keep a minimal record that a deletion was requested and completed (the account ID and its status), billing event records that RevenueCat sent us, the hashed IP records described above, and crash and error reports already sent to Sentry until Sentry's retention period ends, none of which contain your conversations. Deleting your account does not cancel an Apple subscription: cancel it in your Apple ID settings.

There is currently no way to make one character forget you without deleting your account. You can also ask for deletion by writing to support@rizzcall.app. We answer emailed requests within 30 days.

Your rights

Depending on where you live (including the EU, EEA, UK and US states such as California), you may have the right to access, correct, delete, restrict or object to the processing of your data, to receive a copy of it, and to complain to your data protection authority. The app has no export button today, so to request a copy write to support@rizzcall.app. Because accounts have no email or password, we may ask you to send the request with your account ID from the device that holds the account. We will not treat you differently for using these rights.

Adults only

Call Me Back is for people aged 18 and older. The app asks your age in onboarding and stops if you say you are under 18; it does not verify your age. Characters are instructed to stop and end the call if you say you are under 18, and photos of anyone who clearly looks like a child are refused. We do not knowingly collect data from minors. If you believe a minor has used the app, write to us and we will delete the data.

The website

This website is hosted by Vercel and uses Vercel Web Analytics to count page views. If you join the waitlist, the email address you enter is sent to our waitlist service, which runs on Cloudflare, and is used to email you about the launch. You can ask us to remove your waitlist email at any time.

Changes

If this policy changes in a way that matters, we will say so in the app before the change takes effect, in plain language.

Contact

support@rizzcall.app