Privacy Policy

1. Introduction

WhoJustCalled ("we", "us", or "our") is a community caller ID service operated by Bleugates, designed to help users in Ghana identify and report suspicious phone calls. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application and related services.

2. Information We Collect

2.1 Account Information

• Phone number (in Ghana +233 format) for account creation and verification
• Name and profile information from Google Sign-In or Apple Sign-In (if used)
• Email address (if provided through social sign-in)

2.2 Community Reports

• Phone numbers you report, along with the category you assign (safe, suspicious, or fraud)
• Comments or descriptions you provide about reported numbers
• Evidence files you upload to support reports (screenshots, call recordings where legally permitted)

2.3 Usage Data

• Call log information for caller ID lookups (processed locally on your device)
• App usage patterns and feature interactions
• Device type, operating system version, and app version

3. How We Use Your Information

• Caller identification: To match incoming phone numbers against our community database and display caller information
• Community protection: To aggregate reports and calculate trust scores and reputation scores for phone numbers
• Account management: To verify your identity via OTP, manage your profile, and track your contribution points and badge level
• Fraud prevention: To detect patterns of phone scams, mobile money fraud, and spam targeting Ghanaians
• Service improvement: To improve the accuracy of our caller identification system and overall user experience
• Notifications: To send you alerts about suspicious activity or updates to numbers you've interacted with

4. Community Trust System

WhoJustCalled uses a community-driven trust system. When you report a phone number, your report contributes to that number's overall reputation score (0–100). You earn points for contributing reports (+10 points) and evidence (+5 points), which determine your badge level (Contributor, Protector, or Guardian). Your badge level is visible to other users but your personal phone number and identity are never shared publicly.

5. Data Storage and Security

Your data is stored securely using Supabase (hosted on cloud infrastructure with encryption at rest and in transit). We implement row-level security policies to ensure users can only access data they are authorized to view. OTP codes are time-limited and automatically expire. We do not store your call recordings or full call logs on our servers — caller ID lookups are performed using only the phone number.

6. Data Sharing

We do not sell your personal data. We may share information in the following limited circumstances:

• Community database: Phone number reports and categories are shared with all app users to provide caller ID functionality. Your personal identity is not attached to these reports publicly.
• Service providers: We use Hubtel for SMS OTP delivery and Firebase for push notifications. These providers process limited data necessary for their services.
• Legal requirements: We may disclose data if required by Ghanaian law or valid legal process.

7. Your Rights

Under Ghana's Data Protection Act, 2012 (Act 843), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing
• Object to processing of your personal data

To exercise any of these rights, contact us at the address below.

8. Data Retention

We retain your account data for as long as your account is active. Community reports remain in the database to maintain the integrity of the caller ID system, but are anonymized if you delete your account. OTP verification records are automatically purged after expiry. You may request full deletion of your data at any time.

9. Children's Privacy

WhoJustCalled is not intended for use by children under 18. We do not knowingly collect personal information from minors. If we learn that a child under 18 has provided us with personal data, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via push notification. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at: