AfterCall Privacy Policy

Effective Date: May 27, 2026

Last Updated: August 7, 2026

What changed in this version (1.1.1): Added disclosures for voice transcription (on-device only — your audio never leaves your device), the new voice call logging telemetry table (counts only — no transcript content stored), persisted reactions on shared calls and communities, and the post-author Reactions detail screen. Also clarified that an optional profile photo is among the account information you may provide (Section 1.1). See Sections 1.4 and 4.1 for the new sections.

Clarifying updates (August 7, 2026): Added disclosures for the 1.2.1 app update. Most important: every account with a username has a public profile page on the web at aftercallapp.com/u/<username> that anyone can view without signing in, and because the address is based on your username rather than a secret code, it can be reached even if you never share the link — Section 4.1.1 sets out exactly what it does and does not show. We have removed your agency/employer from that page. Also added: public communities and how membership appears on that page (4.1.2); the optional profile photo and bio step during signup and how your phone number is stored (1.1); more detail on what optional product analytics records, including notification status, installed widget types and subscription tier (1.2); a corrected widget disclosure (1.4); and information collected through our website, including ambassador program applications from people without an account (1.5).

Clarifying updates (July 15, 2026): Added disclosure of optional product-analytics collection — on by default, and you can turn it off anytime in Profile → Privacy & Legal — which records account-linked usage events only and never the content of your journals, calls, messages, or any PHI (Sections 1.2 and 7.3). Also clarified that your wellness score is computed on your device and is informational only, that reminder notifications and home-screen widget / Live Activity data stay on your device (Section 1.4), and that some AI insights are generated from de-identified aggregate statistics (Section 3).

AfterCall LLC ("AfterCall," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the AfterCall mobile application and related services (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password (encrypted), display name, username, optional profile information (certification level, agency name, and a short optional bio), an optional phone number, and an optional profile photo you choose from your device. During signup you may be offered an optional final step to add a profile photo and bio; this step is entirely skippable and you can add or change both later in Profile. If you set a profile photo, it may be visible to other users when you participate in communities or share content. Your phone number is stored in a separate, owner-only record and is never shown to other users, included in your public profile page, or sent to AI providers.
• Call Logs: Information you enter about calls, including category, acuity, interventions, vital signs, and clinical notes
• Journal Entries: Reflections, mood/stress/energy ratings, free-text content
• Wellness Data: Self-reported wellness metrics
• Community Content: Posts, comments, reactions, messages, and other content you share
• Voice Transcripts (transient): When you use voice dictation or voice call logging, your speech is transcribed to text on your device. The resulting text is held in memory only for the active session; it is not written to your device's persistent storage and is not transmitted to AfterCall's servers. Only the structured fields you choose to save (e.g., parsed call type, vitals, interventions) are persisted as part of your call log.
• CAD Paste Text (transient): When you paste CAD dispatch text into the call flow, the raw text is held in memory only for parsing and is then discarded. Only the structured fields extracted by the parser are persisted.
• Reactions: When you react to a shared call on the public feed or to a post in a community, your reaction is stored with your user id so it persists across devices and so the post's author can see who reacted.

1.2 Automatically Collected Information

• Device Information: Device type, operating system, app version, unique device identifiers
• Usage Data (Product Analytics): Passive product-analytics events — screen views, time spent on screens (aggregated on your device into a daily total per screen rather than sent per-transition), and coarse feature events (for example, that a call or journal entry was saved) — linked to your account identifier and sent to our backend (Supabase) in batches, to help us understand how the app is used and improve it. We never include the content of your journals, call logs, or messages, or any PHI, in analytics — only that an action occurred. Once per day we also record a single “app opened” event which includes your app version, platform, and app language, whether you currently have notifications enabled, and which AfterCall home-screen widgets you have installed (the widget types only — never their contents). Your subscription tier (free or Pro) is attached to analytics events so we can tell which features each group uses. Product analytics are on by default; you can turn them off at any time in Profile → Privacy & Legal (see Section 7.3).
• Log Data: IP address, access times, error logs
• Voice Feature Telemetry: For voice call logging, lightweight counts only — whether you completed the flow, how many fields the parser missed, the duration of your review session, the length of the (already-scrubbed) transcript in characters, and the number of PHI redactions applied. No transcript content is recorded.

1.3 Information from Third Parties

• Subscription Information: Payment status from Apple App Store or Google Play Store via RevenueCat (we do not receive or store credit card information)

1.4 Information Processed On-Device Only (Not Collected by AfterCall)

• Voice audio: When you use any voice feature, your raw audio is transcribed to text by your device's built-in speech recognizer (Apple's SFSpeechRecognizer on iOS) with the on-device-only flag enabled. AfterCall does not record, upload, store, or transmit your raw voice audio at any point. If your device cannot perform on-device recognition, the recognition request fails rather than falling back to a network service.
• CAD paste text (raw): Pasted CAD dispatch text is held in app memory only while the parser runs; we never persist or transmit the raw text. The scrubbed (PHI-redacted) version is the only thing sent to the AI parser, and only the parsed structured fields are saved.
• Wellness score: Your wellness score is calculated entirely on your device from your own check-in history and call metadata. The score is provided for informational purposes only, is not medical advice, and is not itself sent to or stored by AfterCall.
• Reminder notifications: Shift reminders, post-shift check-ins, and daily wellness-score reminders are scheduled locally on your device. Scheduling them does not send any additional information to AfterCall.
• Home-screen widgets and Live Activity: Home-screen widgets and the on-shift Live Activity display your own app data on your device's home or lock screen through a private on-device app group container. The data shown in your widgets stays on your device and is not collected or shared. One exception, for clarity: if product analytics are on, the once-daily “app opened” event records which types of AfterCall widget you have installed (for example, “wellness” or “shift status”) so we know which widgets are worth continuing to build. The information displayed inside them is never collected.

1.5 Information Collected Through Our Website

You do not need an AfterCall account to use our website, and simply visiting aftercallapp.com does not create one. Two parts of the site do collect information:

• Ambassador program applications. If you apply to the AfterCall ambassador program, we collect the information you enter in the form — your name, email address, and optionally your phone number, general location, profession and years of experience, your primary social platform and approximate audience size, a description of the content you make, why you want to partner with us, and how you heard about us. We use it to evaluate your application, to email you the program rules and (if accepted) your ambassador code, and to administer the program. We store it whether or not you have an AfterCall account. To have an application deleted, email support@aftercallapp.com.
• Public profile pages. Viewing a public profile page at aftercallapp.com/u/<username> does not require an account, and we do not create one for you by viewing it.

The website itself does not use advertising trackers or third-party analytics cookies.

2. How We Use Information

We use your information to:

• Provide, maintain, and improve the Service
• Process subscription payments and manage your account
• Generate AI-powered features (insights, narratives, reflections)
• Synchronize your data across devices
• Communicate with you about the Service
• Enforce our Terms of Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. AI Features and Third-Party Processing

When you use AI features, your input data may be processed by third-party AI services (currently Google's Gemini API). These services have their own privacy policies and data handling practices. We do not control how third-party AI services use data sent to them, though we configure these services to minimize data retention where possible.

Some AI features — such as the daily insight shown in the app and on home-screen widgets — are generated from de-identified, aggregate statistics about your own activity (for example, counts and trends) rather than the content of your entries. As with all AI features, only the minimum data needed is sent to the third-party AI service.

For voice call logging and CAD dispatch parsing, your input passes through an on-device pattern-based PHI scrubber before any text is sent to the AI parser. The scrubber redacts names, addresses, phone numbers, MRN-shaped strings, specific dates and times, and other identifiers; only the scrubbed text reaches the AI. This is a defense-in-depth measure and is not a substitute for your own responsibility to avoid entering identifying information. Raw voice audio is never sent to AI — only the on-device-transcribed text after scrubbing.

You should not enter PHI or other sensitive identifying information into the Service, as scrubbed text may still be transmitted to third-party AI providers and our scrubber cannot guarantee 100% detection.

4. How We Share Information

We do NOT sell your personal information. We may share information in the following circumstances:

4.1 With Other Users

• Content you choose to share publicly or with communities is visible to other users
• Profile information you choose to make public
• Reactions you make on shared calls and community posts are visible in aggregate to other viewers (counts by type). The author of a post can additionally see the specific list of users who reacted and which reaction each user selected, via a per-post Reactions detail screen visible only to the author.

4.1.1 Your Public Profile Page (on the web)

Every account with a username has a public profile page on our website at aftercallapp.com/u/<your-username>. The Share button on your profile screen copies this link so you can send it to people who do not have AfterCall.

Please read the following carefully:

• The page is public and does not require an account or sign-in to view. Anyone with the link can open it in a browser.
• The address is based on your username, not a secret code. This means someone who knows or guesses your username can view the page even if you have never shared the link yourself.
• What the page shows: your display name, username, profile photo, certification level, the month and year you joined, and the names of any public communities you have joined.
• What the page never shows: your email address, phone number, bio, agency or employer, journal entries, call logs, wellness data, statistics, followers, private communities, or anything PHI-related.
• Search engines may index this page, and pages that have been viewed may remain in third-party caches for a period after any change.

If you do not want a public profile page, you can request removal of your username by contacting support@aftercallapp.com, or delete your account at any time (Section 7).

4.1.2 Public Communities

AfterCall offers public communities that any signed-in user can discover and join without an invite code, alongside private communities that still require a code or an approved request. If you join a public community, your membership in it is shown on your public profile page described above, and your posts within it are visible to every member. Public communities do not include the peer-support messaging feature. You can leave any community at any time from the community's page.

4.2 With Service Providers

• Cloud hosting (Supabase)
• AI processing (Google Gemini API)
• Payment processing (Apple, Google, RevenueCat)
• Analytics and crash reporting

These providers are bound by confidentiality obligations and may use your information only to provide services to AfterCall.

4.3 Legal Requirements

We may disclose information when required by law, court order, or legal process, or to protect the rights, property, or safety of AfterCall, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest where supported
• Access controls and authentication
• Row-level security policies on user data

However, no method of transmission or storage is 100% secure. We cannot guarantee the absolute security of your information.

In addition to the above, AfterCall operates an automated content safeguard system to reduce the risk of PHI being submitted, stored, or transmitted through the Service. This system includes pattern-based text scanning, AI-assisted moderation (via Google's Gemini API), an administrative review queue for flagged content, and user-initiated reporting. Content flagged by these systems may be reviewed by AfterCall administrators solely for the purpose of enforcing these Terms and our PHI prohibition. Flagged content snippets may be retained in a secure internal log for a limited period to support moderation decisions and compliance. This processing is described in more detail in Section 6.1 of our Terms of Service.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time. Some information may be retained after deletion for legitimate operational purposes (backups, fraud prevention, legal compliance) for a limited period.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your information
• Correction of inaccurate information
• Deletion of your information
• Portability of your data
• Objection to certain processing
• Withdrawal of consent

To exercise these rights, contact us at jordan@aftercallapp.com.

7.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising these rights.

7.2 European Residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation, including the rights listed above and the right to lodge a complaint with a supervisory authority.

7.3 Analytics Opt-Out

You can turn off product-analytics collection at any time in Profile → Privacy & Legal. When analytics are off, the app stops sending screen-view, dwell-time, and feature-event data. This choice does not affect information required to operate the Service, such as sign-in, data sync, and subscription status.

8. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Service or by email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

AfterCall LLC

Email: jordan@aftercallapp.com

Website: aftercallapp.com

---

By using AfterCall, you acknowledge that you have read and understood this Privacy Policy.