Privacy Policy

1. What we never collect

Your contacts. Kansel does not even ask for the permission.
Your call history, call audio and messages. Calls are matched against the list on your phone; our servers are not contacted when a call arrives.
Your location, your own phone number, or advertising identifiers.
Numbers on your personal block list stay on your device.

We do not sell personal data and the app shows no ads.

2. What we do collect

An account. The app starts with an anonymous identifier. If you sign in with Google or Apple (needed to send a report or to switch on auto-block), we receive your email address and, if shared, your name. Apple's hidden email address is fine.
Your reports: the number, the category, the time and your account, plus an internal trust score that weighs your reports and detects abuse.
Numbers you look up in “Check a number”, to answer the query. We do not keep a history of them.
A push token, your app language, platform, app version, phone model and system version (never the name you gave your phone), to tell the app a new list is ready and to fix bugs.
Your protection settings: whether auto-block is on, whether notifications are allowed and whether setup is finished, so we only send you what concerns you.
On Android, one figure per day: how many calls Kansel blocked. Never which numbers or when.
Usage events (the app was opened, setup was completed, a report was sent, a number was checked), linked to your account identifier and never containing a phone number. They are stored on our servers and in Google Analytics for Firebase, with advertising features off.
Appeals and support emails: what you write to us. For the appeal form we store a one-way hash of your IP address to limit abuse, never the address itself.

We use this data to run the service, to keep the community list accurate and hard to abuse, to notify you, and to understand what works. Nothing else: no advertising profiles.

Four providers process data for us: Supabase (database and sign-in), Apple (Sign in with Apple, notifications on iPhone), Google (Google Sign-In, notifications, Analytics for Firebase) and Vercel (hosts this website and counts its page views, without cookies). They may store data outside your country. We may disclose data when the law requires it.

The list sent to phones contains numbers, a status and a category. It never says who reported a number, and we do not reveal that to anyone unless a court lawfully orders it.

4. How long, and how to delete it

Account data: while your account exists.
Usage events: up to 13 months (14 in Google Analytics). Appeals: up to 12 months. Support emails: up to 24 months.
Reports: kept for the list. When you delete your account they stay, with no link to you.

Delete your account in the app: Settings → Account → Delete account (الإعدادات ← الحساب ← حذف الحساب), or follow the delete account page. You are signed out, a person reviews the request, and the account is deleted within 7 days; signing in again before that lets you withdraw it. Backups are purged within 30 days.

5. If your number is on the list

A number can be listed without its owner ever using Kansel, because users reported calls from it. We store the number, a category, report counts and dates, and the resulting status. We do not store or look for the owner's name.

Think it is a mistake? Use the appeal page. Every appeal is reviewed by a person; if it is accepted, the number leaves the list within 24 hours.

6. Your rights and how to reach us

You can ask for a copy of your data, a correction or deletion, object to processing, withdraw consent for notifications in your phone's settings, or complain to your data protection authority. Email support@kansel.app from the address on your account; we answer within 30 days.

Kansel is not meant for children under 13. All traffic is encrypted, and access to the database is restricted. If this policy changes in a way that matters, we will tell you in the app first.