Legal
CallVault — Privacy Policy
A personal Android call recorder published by NEXUS-SECTECH LTD.
Last updated: 16 September 2026
The short version. CallVault runs entirely on your phone. It has no server, no account system, no analytics and no advertising. The only place it ever sends data is a folder in your own Google Drive, only if you switch that on, and only files it created itself. Nobody at NEXUS-SECTECH LTD can see your recordings.
What the app collects
CallVault records your phone calls and stores them on the device. To label a recording so you can find it again, it also reads information about the call itself.
| Data | Why | Where it goes |
|---|---|---|
| Call audio | The purpose of the app. Stored as an Opus .ogg file. |
Device storage; your Drive if backup is on |
| Phone number, call direction, time and duration | Read from the system call log so recordings can be named and searched | Device storage; your Drive if backup is on |
| Contact name | Matched from your contacts so a recording shows a name rather than a number | Device storage; your Drive if backup is on |
| Phone state | To know when a call starts and ends | Not stored |
Every recording is saved with a .json sidecar file containing a SHA-256
hash of the audio, so you can prove a recording has not been altered. The sidecar holds
the same call details listed above.
What the app does not do
- No analytics, telemetry, crash reporting, advertising or tracking of any kind. No third-party SDKs for these purposes are present in the app.
- No user accounts, and no registration.
- No data is sold, shared, or disclosed to anyone.
- No server operated by NEXUS-SECTECH LTD receives your recordings or any other data. No such server exists.
Google Drive backup
Backup is optional and off until you choose a Google account in Settings.
When enabled, CallVault uploads your recordings and their sidecar files to a folder
named CallVault in the Google Drive of the account you chose. It requests one
OAuth scope:
https://www.googleapis.com/auth/drive.file
This is the narrowest Drive scope Google offers. It grants access only to files the app itself created. CallVault cannot see, read or modify any other file in your Drive, and it never requests broader access.
googleapis.com is the only internet destination the app contacts. Google's
handling of the files once they are in your Drive is governed by
Google's Privacy Policy.
CallVault's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke access at any time from your Google Account permissions page, or by signing out in the app's Settings. Revoking stops future uploads; files already in your Drive remain there, under your control, and you can delete them yourself.
Retention and deletion
Recordings stay on the device until you delete them or a retention period you have set removes them. Deleting a recording in the app removes the audio and its sidecar from the device. Copies already uploaded to your Drive are not deleted automatically — delete those in Drive if you want them gone.
Uninstalling the app removes its local storage, including all recordings held there.
Permissions the app requests
- Microphone — to capture call audio.
- Phone state — to detect when a call begins and ends.
- Call log — to determine the number and direction of the call just recorded.
- Contacts — to show a name instead of a number.
- Notifications — to show recording status, and to tell you when a call was not recorded.
- Network access — only to upload to your Drive when backup is enabled.
Your responsibility when recording calls
The law on recording telephone calls differs by country and, in some places, by state or province. In some jurisdictions every party to the call must be told, or must consent, before it may be recorded. In others recording is permitted but using or sharing the recording is restricted.
CallVault records what you tell it to record. Ensuring that doing so is lawful where you are, and that anyone entitled to be informed has been, is your responsibility as the operator of the device.
Children
CallVault is not directed at children and is not intended for use by anyone under 16.
Changes to this policy
If this policy changes, the revised version will be posted at this address with an updated date above.
Contact
Questions about this policy or about the app: hello@nexus-sec.tech
NEXUS-SECTECH LTD, United Kingdom.