AfterCall Privacy Policy

Effective Date: April 17, 2026

Last Updated: April 17, 2026

AfterCall LLC ("AfterCall," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the AfterCall mobile application and related services (the "Service").

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, password (encrypted), display name, optional profile information (certification level, agency name)
• Call Logs: Information you enter about calls, including category, acuity, interventions, vital signs, and clinical notes
• Journal Entries: Reflections, mood/stress/energy ratings, free-text content
• Wellness Data: Self-reported wellness metrics
• Community Content: Posts, comments, messages, and other content you share

1.2 Automatically Collected Information

• Device Information: Device type, operating system, app version, unique device identifiers
• Usage Data: Features used, time spent, interaction patterns
• Log Data: IP address, access times, error logs

1.3 Information from Third Parties

• Subscription Information: Payment status from Apple App Store or Google Play Store via RevenueCat (we do not receive or store credit card information)

2. How We Use Information

We use your information to:

• Provide, maintain, and improve the Service
• Process subscription payments and manage your account
• Generate AI-powered features (insights, narratives, reflections)
• Synchronize your data across devices
• Communicate with you about the Service
• Enforce our Terms of Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. AI Features and Third-Party Processing

When you use AI features, your input data may be processed by third-party AI services (currently Google's Gemini API). These services have their own privacy policies and data handling practices. We do not control how third-party AI services use data sent to them, though we configure these services to minimize data retention where possible.

You should not enter PHI or other sensitive identifying information into the Service, as it may be transmitted to third-party AI providers.

4. How We Share Information

We do NOT sell your personal information. We may share information in the following circumstances:

4.1 With Other Users

• Content you choose to share publicly or with communities is visible to other users
• Profile information you choose to make public

4.2 With Service Providers

• Cloud hosting (Supabase)
• AI processing (Google Gemini API)
• Payment processing (Apple, Google, RevenueCat)
• Analytics and crash reporting

These providers are bound by confidentiality obligations and may use your information only to provide services to AfterCall.

4.3 Legal Requirements

We may disclose information when required by law, court order, or legal process, or to protect the rights, property, or safety of AfterCall, our users, or others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest where supported
• Access controls and authentication
• Row-level security policies on user data

However, no method of transmission or storage is 100% secure. We cannot guarantee the absolute security of your information.

In addition to the above, AfterCall operates an automated content safeguard system to reduce the risk of PHI being submitted, stored, or transmitted through the Service. This system includes pattern-based text scanning, AI-assisted moderation (via Google's Gemini API), an administrative review queue for flagged content, and user-initiated reporting. Content flagged by these systems may be reviewed by AfterCall administrators solely for the purpose of enforcing these Terms and our PHI prohibition. Flagged content snippets may be retained in a secure internal log for a limited period to support moderation decisions and compliance. This processing is described in more detail in Section 6.1 of our Terms of Service.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. You may request deletion of your account at any time. Some information may be retained after deletion for legitimate operational purposes (backups, fraud prevention, legal compliance) for a limited period.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• Access to your information
• Correction of inaccurate information
• Deletion of your information
• Portability of your data
• Objection to certain processing
• Withdrawal of consent

To exercise these rights, contact us at jordan@aftercallapp.com.

7.1 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising these rights.

7.2 European Residents (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation, including the rights listed above and the right to lodge a complaint with a supervisory authority.

8. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the Service or by email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

AfterCall LLC

Email: jordan@aftercallapp.com

Website: aftercallapp.com

---

By using AfterCall, you acknowledge that you have read and understood this Privacy Policy.