Privacy Policy

Callyx ("the App", "we", "us", "our"), operated by Tranquil Mind Technology JSC, respects your privacy. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have. By using the App, you agree to this Policy.

Callyx is an Android app that identifies incoming callers, blocks or silences spam and unwanted calls, and keeps a local log of message notifications so you can read messages that were later deleted or recalled by the sender. You do not need to create an account to use it. Callyx has no user accounts, no login, and no Callyx server: your contacts, your block and spam lists, and the message notifications the App logs are processed and stored only on your device and are never uploaded to us.

1. Information we collect

1.1 Information processed on your device only (never sent to us)

The following data powers the core features of Callyx. It stays in the App's private storage on your phone. We have no server that receives it, and no third party listed in Section 3 receives it.

We do not read your call log or your SMS inbox. Callyx does not request the READ_CALL_LOG, READ_PHONE_STATE, READ_SMS, CAMERA, RECORD_AUDIO, or location permissions, and it has no file, photo, or microphone access.

Callyx also holds a small number of permissions that collect nothing at all: Phone (CALL_PHONE) to place a call when you tap the call button, Notifications (POST_NOTIFICATIONS) and Run at startup (RECEIVE_BOOT_COMPLETED) to show and re-schedule the optional daily reminder you turn on, and Ignore battery optimisation (REQUEST_IGNORE_BATTERY_OPTIMIZATIONS) so Android does not stop the call-screening and notification services in the background. Reminders are generated on your device; their content is never sent to us.

1.2 Information collected automatically and shared with third parties

When you use the App with an internet connection, the advertising and analytics services listed in Section 3 collect the following:

• Device and advertising identifiers — the Google Advertising ID (Android permission com.google.android.gms.permission.AD_ID), app-instance IDs, and similar identifiers used for ad delivery, ad measurement, attribution, and analytics.
• Device and technical information — device model, operating-system version, language, region, screen and network characteristics, and app version.
• Approximate location derived from your IP address — country/region level. The App does not request or use GPS or precise location.
• App activity — which screens you open, which features you use, ad impressions and clicks, session start/stop and similar in-app events. This never includes the content of your contacts, your block list, or the message notifications described in Section 1.1.
• Crash logs and diagnostics — stack traces, device state at the time of a crash, and performance data, used to fix bugs.
• Installed-app signals — to label and filter your unseen-message list, the App checks whether a small, fixed set of messaging apps (WhatsApp, Messenger, Instagram, Telegram) and a dialer are present on the device. Separately, the advertising and attribution SDKs in Section 3 may collect signals about apps installed on your device for ad targeting, measurement, and fraud prevention. This is declared as Installed apps in our Google Play Data safety form.
• Install attribution data — which campaign or referrer led to the install.

1.3 Information you give us directly

Only if you choose to contact us by email. We then hold your email address and whatever you write, for as long as needed to answer you.

2. How we use information

• Provide and operate the App — identify callers, block or silence calls you marked, and keep your local unseen-message log.
• Show advertising and measure it — Callyx is free and supported by ads (app-open, banner, interstitial, and native ads). See Section 3 for your controls.
• Analytics and improvement — understand which features are used so we can improve them.
• Stability and security — detect crashes, diagnose bugs, and prevent fraud and abuse of the ad system.
• Remote configuration — deliver feature flags and configuration to the App (Firebase Remote Config).
• Legal compliance — comply with applicable law and respond to lawful requests.

3. Third-party services

The App includes the following third-party SDKs. Each acts as an independent controller of the data it collects and processes it under its own privacy policy.

Ad consent (EEA/UK/Switzerland). On first launch in a region that requires it, the App shows a Google UMP consent form where you choose whether personalized ads and related processing are allowed. You can reopen and change that choice at any time from the App's Settings screen ("Privacy options" / consent).

Resetting or limiting your advertising ID. On Android you can reset your advertising ID or delete it entirely in Settings → Google → Ads (path may vary by device). Deleting the advertising ID stops apps from receiving it and limits ad personalization.

4. How we share information

• We do not sell your personal information for money. We do not sell or share the contacts, block lists, or message notifications described in Section 1.1 with anyone — that data never leaves your device.
• We share the automatically-collected data in Section 1.2 with the providers in Section 3, solely for advertising, attribution, analytics, and crash reporting.
• U.S. state privacy laws. Where personalized advertising is enabled, sharing device/advertising identifiers with ad partners for cross-context behavioural advertising may be treated as a "sale" or "sharing" under laws such as the CCPA/CPRA. You can opt out via the App's consent controls and by resetting or deleting your advertising ID (Section 3), or by contacting us at the address in Section 13.
• We may disclose information if required by law, legal process, or a lawful government request, or to protect our rights, users, or the security of the service.
• If we are involved in a merger, acquisition, or asset sale, information may be transferred, subject to this Policy.

5. Legal bases (EEA/UK — GDPR)

• Consent — personalized advertising, ad measurement, and analytics where consent is required (collected through the UMP consent form).
• Legitimate interests — operating and securing the App, non-personalized advertising where permitted, crash diagnostics, and product improvement.
• Legal obligation — retaining or disclosing data where the law requires it.

You may withdraw consent at any time via the App's privacy/consent option; withdrawal does not affect processing carried out before withdrawal.

6. Data retention

• On-device data (contacts access, block/spam lists, unseen-message log) is kept on your device until you delete it in the App or uninstall Callyx. The unseen-message log keeps only the most recent 500 entries and drops older ones automatically.
• Advertising, attribution, and analytics data is retained by the providers in Section 3 for the periods stated in their own policies.
• Crash and diagnostic data is retained for a limited period needed to diagnose and fix issues.
• Support emails are kept as long as needed to resolve your request and to keep a record of it.

7. Your rights

EEA/UK (GDPR). You have the right to access, correct, delete, port, object to, and restrict processing of your personal data, to withdraw consent, and to lodge a complaint with your national data protection authority.

California (CCPA/CPRA). You have the right to know what personal information is collected and disclosed, to delete it, to correct it, to opt out of "sale"/"sharing" and targeted advertising, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights.

Other regions. Comparable rights apply under Brazil's LGPD, Canada's PIPEDA, and similar laws.

How to exercise them. Email us at contact@tranquilmind.co. Because Callyx has no accounts, we cannot identify you from a name — please include your advertising ID, your device model, and your app version so we can pass the request to the relevant partner. Most data held about you sits with the third parties in Section 3; you may also exercise your rights directly with them using the links above. Data stored on your device can be erased by you at any time by clearing it in the App or uninstalling Callyx.

8. Children's privacy

Callyx is a general-audience utility intended for users aged 13 and over (or the higher age of digital consent in your country — 16 in parts of the EEA). It is not directed to children. We do not knowingly collect personal information from children under 13, and the App has no social, chat, dating, or user-to-user communication features. If you believe a child has provided information to us, contact contact@tranquilmind.co and we will delete it.

9. International data transfers

The third-party providers in Section 3 operate globally, so data collected through the App may be processed in countries other than yours, including the United States. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses adopted by those providers.

10. Data security

Data transmitted by the App uses HTTPS/TLS encryption. On-device data is held in the App's private, sandboxed storage, which other apps cannot read. We apply reasonable technical and organisational measures, but no method of transmission or storage is 100% secure.

11. Third-party content

Callyx displays advertisements and may link to external sites and app stores. We do not control and are not responsible for third-party content or practices; please review their own policies.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted on this page with a new "Last updated" date. Continued use of the App after an update means you accept the revised Policy.

13. Contact us

Tranquil Mind Technology JSC No. 3, Alley 98, Vu Trong Phung Street, Thanh Xuan Ward, Hanoi City, Vietnam Email: contact@tranquilmind.co

© 2026 Tranquil Mind Technology JSC (@Tranquil Mind Technology JSC). All rights reserved.