Privacy Policy

1. Who controls your data

Oskot is the controller of the personal data described here. Contact us about anything in this policy at support@oskot.app.

2. What we collect

Account information

Your mobile number and country, your carrier, the forwarding number we assign you, the agent personality and voice you choose, and the call categories and specific numbers you tell us to screen.

Call information

For every call our agent answers: the caller's number and, where the network provides it, their name; the time, duration, and outcome; the category we classified it as; the audio recording; the transcript; and a short summary of what the call was about.

Your contacts

If you allow access to your contacts, your phone reads the phone numbers in your address book and turns each one into a scrambled fingerprint — a one-way hash, computed on your device with a secret key unique to your account. Only those fingerprints are sent to us.

We never receive your address book. No contact name ever leaves your phone, and neither does any contact's phone number: a fingerprint cannot be turned back into the number it came from or dialled.

We use them for one thing. When someone calls and you don't pick up, your carrier forwards that call to us — and it does so whether the caller is a stranger or someone you know. Comparing the caller against these fingerprints is how we can hang up instead of putting a friend through to the AI assistant.

The fingerprints refresh when your contacts change, are replaced entirely each time, and are deleted when you revoke contacts access, sign out, or delete your account. Declining contacts access is fine — everything else works exactly the same, and every call you miss reaches the assistant.

Device and app information

The platform, app version, and OS version of the device you sign in from, and a push token if you allow notifications, so we can tell you when your line is ready and when a call comes in.

Messages we send you

A log of the verification codes and service messages we send to your number — the channel, the recipient, and whether delivery succeeded.

Support and feedback

Ratings and comments you leave on a call or on the app, and anything you write to us by email.

Payments

Apple or Google processes your payment, depending on which app store you use; we never see your card details. We receive the transaction identifiers, product, and renewal dates we need to know that your subscription is active.

This website

We use PostHog, hosted in the European Union, to see how people move through this site: pages viewed, which buttons get used, and where signing up gets stuck. It sets cookies so your browser is recognised between visits. We keep your phone number and email address out of those records deliberately — if you create an account, it is linked to that activity so we can tell whether sign-up actually worked, but the number you type is never sent as part of it. We run no advertising scripts, and we do not sell this to anyone.

3. Why we use it, and our lawful basis

• To provide the service — answering, recording, transcribing, summarising, and classifying calls, and showing them to you; assigning and provisioning your line; verifying your number; managing your subscription. Basis: performance of our contract with you.
• To support you — answering your emails, investigating a call you flagged. Basis: performance of our contract, and our legitimate interest in running a service that works.
• To keep the service safe and honest — preventing abuse and fraud, securing accounts, keeping audit records of administrative actions. Basis: our legitimate interests.
• To improve how the agents handle calls — reviewing feedback and, where you report a problem, the call it concerns; working from aggregated or de-identified information the rest of the time. Basis: our legitimate interests.
• To meet legal obligations — tax, accounting, and responding to lawful requests. Basis: legal obligation.

We do not sell your personal data, and we do not use your calls to advertise to you or to anyone else.

4. Your callers

Screening means we process personal data about people who call you: their number, their voice in the recording, and whatever they say. We do this to deliver the service you asked for, and we rely on our legitimate interest — and yours — in screening unwanted calls. Callers get the recording notice built into the agent personality you selected, and you are responsible for using recordings lawfully where you live. A caller who wants their recording deleted can write to us at support@oskot.app, and so can you on their behalf.

5. Who we share it with

We share personal data only with the providers we need to run Oskot:

• Telephony and call-handling providers, which carry the forwarded calls, answer them, and produce the recordings and transcripts.
• Akedly, which verifies your phone number when you sign in.
• Messaging providers, which deliver our SMS and messaging-app codes and notices.
• Apple or Google, for subscriptions and push notifications.
• Hosting and infrastructure providers, which run our servers and databases.

Each is bound to use the data only on our instructions. We may also disclose data where the law requires it, to establish or defend legal claims, or as part of a merger or sale of the business — in which case we'll tell you.

6. Where your data goes

We are based in the United Kingdom and our providers operate in the UK, the European Economic Area, the United States, and Egypt. Where data leaves the UK or the EEA, we rely on adequacy decisions or on standard contractual clauses with the UK addendum, together with the safeguards those require.

7. How long we keep it

• Calls, recordings, transcripts, and summaries — while your account is open, so you can go back to them. Delete a call in the app and it goes.
• Account data — while your account is open.
• After you delete your account — we delete your calls, recordings, and transcripts. We keep the minimum needed for legal, tax, and anti-abuse reasons, which includes a record that the forwarding number was once assigned, and then that goes too.
• Verification and delivery logs — a short retention period for security and troubleshooting.

8. Security

Access to recordings and transcripts is restricted to the people who need it to run the service and support you, and administrative access is logged. Data is encrypted in transit. No system is perfect, so tell us at once if you think your account has been reached by someone else.

9. Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or port it elsewhere. You can object at any time to processing we base on legitimate interests. Email support@oskot.app and we'll respond within one month.

You can delete your account yourself at any time, in the app under Settings → Delete account.

If you think we've got it wrong, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live. We'd rather you told us first.

10. Children

Oskot is not for anyone under 18. We don't knowingly collect data from children; if we learn we have, we delete it.

11. Changes to this policy

We'll update this page when what we do changes, and change the date at the top. If a change materially affects you, we'll tell you in the app or by message before it takes effect.

12. Contact

Oskot — support@oskot.app. The rules for using the service itself are in the Terms of Service.