Privacy Notice
Last updated August 3, 2026
This notice is maintained by Iron Capital LLC, trading as CallGuard, to explain what personal data we handle and why. Iron Capital LLC is the data controller for that data.
Where your recordings live
Audio recordings and the transcripts, summaries and letters generated from them are stored in the app on your own device. We do not keep a library of your recordings or transcripts on our systems. Audio recorded with your phone's own microphone is sent to our AI processing provider only at the moment you ask for a transcript, summary or draft.
Neither our AI provider nor any other provider we use uses your audio, transcripts or drafts to train models. If you email a transcript to yourself, that email is sent by your own mail app.
Recording other people
A recording contains someone else's voice, and often their name and their phone number. That is their personal data as well as yours. You decide who to record and when, so for the content of your recordings you act as the controller and we act as your processor — you are responsible for recording lawfully in your jurisdiction, and for telling the other party when the law requires it. The app shows jurisdiction-specific guidance before you start, but that is general information, not legal advice.
Because your recordings sit on your device rather than in an account we can search, a request from another party about a recording generally has to be directed to you. If you contact us about one, we may need to ask you to supply the relevant material yourself.
What we collect
- Account details — your email address and login credentials, so you can sign in and your subscription can follow you between devices. Legal basis: performance of our contract with you.
- Subscription status — plan, status, renewal date and the identifiers our payment provider gives us, so we know what to unlock. Legal basis: contract.
- Support messages — what you send us when you ask for help. Legal basis: legitimate interests in supporting our customers.
- Technical and security data — IP address, device and browser information, and error logs. Legal basis: legitimate interests in keeping the service secure and working.
Your payment card details are handled by our payment provider, not by us. We never see or store card numbers.
Who we share it with
We use the following subprocessors, and only for the purposes listed:
- Lovable — hosting, application infrastructure and the database that stores account records.
- OpenAI — speech-to-text transcription and the generation of summaries, letters and emails, at the moment you request them.
- Paddle — our Merchant of Record — sale of access terms, billing, tax compliance, invoicing and refunds.
- Professional advisers such as legal and accounting, where necessary.
We do not sell your personal data, and we do not use it for advertising. If we add or replace a subprocessor, this list is updated.
Legal requests
We may disclose the data we hold where we are legally required to — a valid court order, subpoena, or similar lawful demand — and where necessary to investigate fraud or abuse of the service. We hold no library of your recordings or transcripts, so in most cases there is nothing of that kind for us to produce. Where the law allows it, we will tell you before responding to a request about your data.
How long we keep it
Account and subscription records are kept for as long as your account is active, and for a limited period afterwards where we need them for tax, accounting or legal reasons. After that they are deleted or anonymised. Support messages are kept only as long as needed to resolve and reference the issue. Anything held on your device is deleted when you delete it or uninstall the app.
Cookies
We use only essential cookies and equivalent local storage needed to keep you signed in and to remember your settings, such as your consent acknowledgement and jurisdiction. We do not use advertising cookies.
Your rights
Depending on where you live, you may have the right to access your data, correct it, have it deleted, restrict or object to how we use it, receive a portable copy, and withdraw consent where we rely on it. To exercise any of these, email privacy@call-guard.net. We will respond within one month. If you are in the UK or EEA and are unhappy with our response, you may complain to your local supervisory authority. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
Security
We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect the limited data we hold. Keeping your recordings on your device is itself a deliberate design choice: the most sensitive material never reaches our servers. No system is completely secure, and we cannot guarantee absolute security.
Contact
Privacy questions and requests: privacy@call-guard.net. General support: support@call-guard.net. Security issues can be reported to support@call-guard.net and we will acknowledge them.