Ayden Privacy Policy
This policy explains what information the Ayden app for Android (“Ayden”, “the app”, “we”, “us”) uses, why, where it goes, and what choices you have. Ayden shows insights about phone numbers that call you or that you look up, and can work as your phone app (dialer).
The short version: Ayden has no accounts and does not ask for your name, email or phone number. Your contacts and call history stay on your phone and are never uploaded. When Ayden looks up a phone number, it sends that number to our servers to get insights about it. To protect the service from abuse, the app checks with Google Play that it is a genuine copy, and our server sets a daily limit on lookups. We use Google Firebase to see how the app is used and to fix crashes. Purchases are handled by Google Play. We do not sell your data and we do not show ads.
1. Who we are
Ayden is published by Gilraen Limited, Cyprus (“we”). We are the controller of the information described in this policy. You can reach us at [email protected].
2. Information that stays on your device
Ayden asks for several Android permissions so it can work as a phone app and show who is calling. The information it reads through them is processed only on your device and is not sent to us or anyone else:
| Information | Permission | Why Ayden uses it |
|---|---|---|
| Contacts | Read contacts | To show names and photos of people you know, and to tell known numbers from unknown ones. |
| Call history | Read and write call log | To show your recent calls, let you delete entries, and build a weekly summary of your calls inside the app. |
| Phone state and calls | Phone, answer calls, manage calls | To show incoming calls, let you answer, decline and place calls, and work as your default phone app if you choose. |
| Notifications | Post notifications, full-screen intent | To show the incoming call screen and call notifications. |
The app also keeps on your device the insights it has already received, your settings, and your progress through the in-app tutorial. If you turn on spoken insights, the text is read aloud by your phone’s built-in text-to-speech engine.
3. Information sent to our servers
Phone number lookups
When someone calls you, or when you open or look up a phone number in the app, Ayden sends to our server:
- the phone number being looked up;
- your app language;
- the session identifier described below (older versions of the app send instead a random identifier created on first launch).
Our server forwards the phone number and the language to our lookup service, together with technical request data (time, signature) that protects the service from abuse, and returns the insights to the app. The session identifier stays on our server and is used only to apply the daily limit. Your own phone number, your contacts and your call history are not sent.
App check and daily limits
To make sure lookups come from the genuine Ayden app and not from automated scripts, the app uses the Google Play Integrity API on first launch and after updates:
- the app asks Google Play for a signed statement about itself and your device. Google Play prepares it on your device; what Google collects for this is described in how the Play Integrity API handles data;
- our server sends this statement to Google and receives back only yes/no answers: whether the app was installed from Google Play and is unmodified, whether the device passes Android integrity checks, and how many such checks were recently requested from the device. We do not receive your Google account, device hardware identifiers or other device details, and we do not store the statement;
- if the check passes, our server issues a random session identifier that the app keeps and sends with each lookup and AI request. It is not linked to your name, phone number, Google account or device hardware IDs. If Google is temporarily unavailable, the server issues a temporary identifier with a lower limit instead.
The server uses the session identifier to count how many different numbers were looked up and how many AI insights were requested per day, and refuses further requests once the daily limit is reached. Clearing the app’s data deletes the identifier from your device; the app then repeats the check.
AI-generated insights
To phrase an insight in your language, Ayden sends to our AI service the phone number being looked up, your app language and numeric scores computed for that number, together with the session identifier used for the daily limit (it is not passed to OpenAI). Our AI service runs on servers provided by DigitalOcean and generates the text using the OpenAI API. OpenAI processes this data on our behalf to produce the response and, under its API terms, does not use it to train its models. See the OpenAI Privacy Policy.
Network information
As with any internet service, our servers and hosting providers receive your IP address when the app connects. We use it only to deliver the response and protect the service — for example, to limit how many app checks can come from one network; for this the address is kept in temporary counters for no longer than 2 days. Our server does not write IP addresses or session identifiers to its logs, and records looked-up numbers there only in an irreversible hashed form.
4. Analytics, crash reports and configuration
Ayden uses the following Google Firebase services:
- Firebase Analytics — records how the app is used (for example, which screens are opened, which buttons are tapped, whether the tutorial was finished, your subscription plan and app language), together with device model, Android version, approximate region and an app-instance identifier. Phone numbers, contact names and call history are not included.
- Firebase Crashlytics — when the app crashes or hits an error, sends a technical report (stack trace, device model, Android version, app version).
- Firebase Performance Monitoring — measures app start time and network speed.
- Firebase Remote Config — lets us change app settings and run experiments without an update.
Google processes this data under its own terms: Firebase privacy and security and the Google Privacy Policy.
5. Purchases
Subscriptions and one-time purchases are processed by Google Play. We do not receive or store your payment card details. The app receives from Google Play only what it needs to unlock what you bought (purchase status and a purchase token). See the Google Privacy Policy.
6. Other Google Play features
Ayden uses Google Play’s in-app update and in-app review features. If you tap “Translate” on an insight, the insight text opens in Google Translate in your browser; this happens only when you tap it.
Contacting support
If you write to support from the app, your email app opens a message that already contains the app version, your device model, Android version and your subscription level. You see this text before sending and can edit it. We receive your email address and whatever you write, and use them only to answer you.
7. Why we process information (legal bases)
- To provide the app (lookups, AI insights, purchases) — performance of our contract with you.
- Analytics, crash reports, performance, abuse protection (app check and daily limits) — our legitimate interest in keeping the app reliable and improving it.
- Permissions on your device — you choose whether to grant them, and you can revoke them at any time in Android settings.
8. Sharing
We do not sell or rent your information and do not use it for advertising. We share it only with service providers that work for us — Google (Firebase, Google Play, Play Integrity API), DigitalOcean (server hosting) and OpenAI (AI text generation) — and only for the purposes described above, or when required by law.
These providers may process data in countries other than yours, including the United States and the European Union. Where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
9. How long we keep information
- Data on your device stays until you delete it in the app, clear the app’s data, or uninstall the app.
- Lookup requests and server logs are kept for no longer than 14 days, then deleted.
- The list of numbers looked up with a session identifier on a given day, and the count of AI requests, are kept for 2 days so the daily limit can be applied, then deleted. Lookup results are cached on our server for up to 1 hour.
- Daily service statistics (for example, the number of lookups and of active app installations) are kept for 40 days. They contain only counts — no phone numbers, IP addresses or identifiers that could be read back.
- If a session identifier is blocked for abuse, the block is kept for as long as it is needed to protect the service.
- Firebase Analytics data is kept for up to 14 months; Crashlytics reports for up to 90 days.
10. Your choices and rights
- You can revoke any permission in Android settings. Some features will stop working without it.
- You can delete all data stored by the app by clearing its data or uninstalling it.
- Depending on where you live (for example, the EU/EEA, the UK or California), you may have the right to access, correct, delete or object to processing of your personal data, and to complain to your data protection authority. Because Ayden has no accounts and server data is not linked to your name or phone number, we usually cannot tell which records relate to you; such records are deleted automatically within 14 days. To make a request, email [email protected]. We will reply within 30 days.
11. Security
All connections between the app and our servers use encryption (HTTPS). Access to our servers is limited to people who need it to run the service. No method of storage or transmission is completely secure, but we work to protect your information.
12. Children
Ayden is not directed to children under 13 (or under 16 in the EU/EEA), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
13. Changes to this policy
If we change this policy, we will publish the new version on this page and update the effective date. If the changes are significant, we will also let you know in the app.
14. Contact
Questions about this policy or your data: [email protected].