TRUECALLER PRIVACY POLICY

Updated on 4 October 2024

Contents of this policy

1. About this policy
2. Our role in processing your personal data
3. Personal data we collect about you
4. Our purposes and legal basis for processing of your personal data
5. Advertising
6. Sources from which we may collect data about you
7. Storage and retention of personal data
8. Recipients of your personal data
9. Transfers to countries outside of Europe
10. Children's privacy
11. Privacy settings
12. Your rights as a Truecaller user
13. Contact details
14. Security measures
15. How we use cookies
16. Changes to this privacy policy
17. Supplemental Privacy Statement for individuals who do not have an account with Truecaller

1. About this policy

This privacy policy applies if you reside in the European Union (EU), European Economic Area, UK or Switzerland (“Europe”). If you are a resident of California, USA, Nigeria, South Africa, or Brazil, please click the relevant region to read the policy applicable to you. If you are a resident of any other region, click here.

This policy describes how True Software Scandinavia AB (“Truecaller”, “we”, “our”, “us”) processes your personal data when you use our mobile applications, websites, web service API, tools, social media or other services and features provided by Truecaller from time to time (“Services”).

This privacy policy forms an integral part of the Terms of Service and explains how we handle any personal data that you provide to us or that we collect from you. It also covers the handling of personal data of non-users who have not entered into the Terms of Service (see section 17).

2. Our role in processing your personal data

Truecaller holds a publishing certificate (Sw: utgivningsbevis) for the Truecaller search database (truecaller.com) available on our website and mobile applications. The publishing certificate is granted under the Swedish Fundamental Law on Freedom of Expression (Sw: Yttrandefrihetsgrundlagen) and Alan Mamedi is the responsible publisher. This publishing certificate exempts certain data processing activities related to the database from the General Data Protection Regulation (GDPR) to the extent the processing of personal data does not infringe the constitutionally protected right of freedom of expression.

For the processing activities that are subject to the GDPR, Truecaller is the data controller of your personal data, except where explicitly stated otherwise in this policy. We process your personal data in accordance with what is stated herein.

3. Personal data we collect about you

What data we collect and process depends on the services and features you use. Below, we describe the categories of personal data we process for various services and features:

3.1 Personal data collected when you create a user account on Truecaller application or sign up via Truecaller website

• App user profile information: You register your name and phone number when you create an account on the Truecaller application. You can add other optional information to your account such as your photo, gender, email address, a short status message, date of birth and tag.

• Web user profile information: You can log into by using an existing Google or Microsoft account to access and use Truecaller web services.

• Subscription information: Truecaller offers certain features or services for which a fee will be payable (“Paid Services”). If You register for a Paid Service, Truecaller will collect information about your subscription status such as your order id, invoice id, product purchased, payment status and order status

3.2 Personal data collected through your use of Truecaller services

• Usage information: When you create an account and start using the Truecaller application, we will collect information about your device and how you use Truecaller. This includes information on usage patterns (such as features accessed, usage duration, and interaction with other users or external services), search activity and diagnostic data (such as crashes and bugs). This also includes device information such as device type, network, and performance details, and online identifiers, such as IP addresses. Click here for more details.

• Approximate location: General location of users that include country, region or state. We learn this from technical data (e.g. IP address, language setting of your device or phone number). We need this to meet geographic requirements such as displaying the relevant privacy policy, and delivering location specific Services.

• Message data: With your consent, we process SMS and MMS data on your device to block spam, categorize messages, and provide smart summaries and reminders. To do so, we log metadata like send/receive times and categorize messages using AI. We also process media files that you include in a message to deliver the message and enable forwarding of such media by the recipient. When you use Truecaller Messaging we process the contents of the messages to deliver them. The messages are briefly stored to ensure delivery and then removed from our servers. We do not monitor the content of your messages. Click here for more details.

• Call data: If you use our Services to make and receive calls, we collect certain information about your calls to provide call logs and help you track and manage your calls. Examples include your phone number, time and date of calls, duration of calls and volumes of calls. Depending on your privacy settings, we may also collect information about your availability, to indicate to other users whether you are active on the app or not.

• Service-specific personal data: To the extent that you sign up for and/or use a Paid Service, such as Call Assistant and Call Recording, we process additional information such as voice, call recordings, transcripts, and segments of calls, together with usage data from these services. We also collect family member phone numbers for certain subscription plans. We will always let you know beforehand within the app what data we will collect and why, leaving it up to you to decide what you share. Click here for more details.

Please note that when using the Call Recording service, we act as a data processor for the collection and storing of the audio recordings and transcriptions thereof. You are solely responsible for ensuring that the other parties on the call are promptly informed about the recordings, reasons for such recordings and where necessary receive consent for such recordings, in accordance with national laws.

Our Paid Services are subject to this privacy policy as well as the Specific Terms for Paid Services available here.

3.3 Additional data you can choose to provide us with

• Customer support and other communications: When you contact us for customer support or otherwise communicate with us, you can provide us with information related to your use of our Services, including copies of your messages, any other information you deem helpful, and how to contact you. In that case, we will use the information you have provided to respond to and resolve issues. If you use our call-related services, we may record and transcribe calls using AI and other automated means to enhance service delivery. We encourage you to limit the personal data included in all communications and ask that you never send or share sensitive data with us.

We can also contact you for verification purposes or with information pertaining to the Services or special offers, e.g. newsletter, emails, SMS and similar notifications about our products and services depending on your choices

4. Our purposes and legal basis for processing of your personal data

We have provided a comprehensive list below to give you a clear overview of the categories of personal data we process, the purposes of processing, the legal basis for these activities, and the retention periods.

a. To create and manage your Truecaller account

Including processing for the purposes of:

• Verifying your phone number by sending you a verification code via SMS or by performing an automated missed call (no need to pick up)

• Setting up Truecaller correctly on your device by checking the operating system and other features of your device

• Checking if you already have a Truecaller account or a phone number that is banned from Truecaller

• Saving your choices such as the Terms of Service you accepted or your privacy settings

• Deactivating your account at your request or in accordance with our Terms of Service;

• Enabling you to re-register your account after deactivation.

Categories of personal data: App user profile information, Usage information, Approximate location.

Legal basis: Necessary for the performance of our contract with you (Terms of Service, Specific Terms for Paid Services and/or any other applicable terms).

Retention period: For as long as you have a Truecaller account or, as long as a legal claim is present.

b. To provide our Services and/or Paid Services

Including processing for the purposes of:

• Providing caller ID, message ID, spam and fraud detection for calls and messages

• Sending and receiving messages via Truecaller messenger

• Making, receiving, joining or leaving voice and video calls

• Providing Call assistant, Call recording and other paid services applicable from time to time

• Taking precautions to ensure your messages are conveyed correctly

• Optimising the sending of media files and call quality

• Enabling you to upload a backup of your chat history to a third-party cloud-based service (e,g, Google Drive or iCloud)

• Analysing your call history to provide you with recommendations on who to call and favorite contacts

• Analysing log information to resolve crashes and user issues

• Collecting information for troubleshooting, diagnostics and debugging to fix issues related to the Services

Categories of personal data: All categories mentioned in section 3 depending on your use of our Services.

Legal basis: Necessary for the performance of our contract with you (Terms of Service, Specific Terms for Paid Services and/or any other applicable terms).

Retention period: For as long as you have a Truecaller account or, as long as a legal claim is present.

c. To promote safety, integrity and security of Truecaller Services

Including processing for the purposes of:

• Verifying accounts on an ongoing basis, and checking that user sign-ups are genuine.

• Investigating and addressing violations of our Terms of Service, including to prevent misuse and suspicious, fraudulent or illegal activities.

• Detecting, preventing and combating harmful or unlawful behavior which threatens the security of our users' information or the Service.

Categories of personal data: All categories mentioned in section 3 depending on your use of our Services

Legal basis: Necessary for the performance of our contract with you and to comply with legal obligations and safeguard ours and our users’ rights.

Retention period: For as long as we are obliged to save the data in accordance with applicable law or governmental decision or, as long as a legal claim is present.

d. To communicate with you

Including processing for the purposes of:

• Providing customer support, responding to your queries, investigate and resolve issues related to the Services

Categories of personal data: App user profile information, Web user profile information, Subscription information, Customer support and other communications.

Legal basis: Necessary for the performance of our contract with you.

Retention period: For as long as you have a Truecaller account or, as long as a legal claim is present.

e. To comply with laws and regulations

Including processing for the purposes of:

• Complying with requests from law enforcement authorities, courts or other competent authorities

• Implementing appropriate technical and organisational security measures under the applicable laws including but not limited to the GDPR

Categories of personal data: All categories mentioned in section 3.

Legal basis: Compliance with legal obligations

Retention period: For as long as we are obliged to save the data in accordance with applicable law or governmental decision or, as long as a legal claim is present.

f. To enforce policies and protect our rights

Including processing for the purposes of:

• Protecting and enforcing our rights, and the establishment, defense, and enforcement of legal claims and agreements, such as violations of our Terms of Service and policies.

Categories of personal data: All categories mentioned in section 3, and In the event of a dispute, we may also collect other types of personal data concerning you if we need them to exercise our rights.

Legal basis: Legitimate interest (seeking legal advice, protecting ourselves, our users or others in legal proceedings)

Retention period: For as long as we are obliged to save the data in accordance with applicable law or governmental decision or, as long as a legal claim is present.

g. To evaluate, update and develop new features, technologies, and improvements to our Services

Including processing for the purposes of:

• Showing surveys to to get your feedback and analyse your responses to gain insights

• Asking for reviews through email, text messages, phone or via other communication channels

• Collecting reports about another user (e.g. spam or other feedback)

• Making experiments to evaluate the impact of new features

Categories of personal data: All categories mentioned in section 3.

Legal basis: Legitimate interest (developing and improving products and features for our users)

Retention period: For as long as you have a Truecaller account .

h. To conduct business intelligence, analytics, business planning, reporting, and forecasting

Including processing for the purposes of:

• Analysing aggregated user data like the number of new sign ups in a country in order to plan new locations to launch our products and features in.

Categories of personal data: All categories mentioned in section 3.

Legal basis: Legitimate interest (researching and planning so that we can keep running our business successfully)

Retention period: For as long as you have a Truecaller account

i. To provide personalized information and offers and a personal experience of Truecaller application

Including processing for the purposes of:

• Tailoring the content and offers you see. For example, if you show interest in camping gear, we may show you more products related to camping.

• Analyzing usage data to understand how our services are used and to improve the functionality of our application.

• Sending promotional offers and marketing material that we believe may be of interest to you, based on your profile and activity on our application.

Categories of personal data: App user profile information, Usage information

Legal basis: Legitimate interest (enhancing user experience and marketing efficiency) and consent for cross-app tracking.

Retention period: For as long as you have a Truecaller account or, until you withdraw your consent, or as long as a legal claim is present.

j. To collect information through your device-based settings.

Including processing for the purposes of:

• Accessing your contacts “on device” when you want to use our Caller ID functionality and/or to see other Truecaller messaging users in your contacts

• Managing your ingoing and outgoing calls when you want to use our Caller ID functionality and/or calling features such as call log etc.

• Accessing your camera and / or photo gallery if you choose to share photos or media with your contracts using Truecaller

Categories of personal data: All categories mentioned in sections 3.1 and 3.2

Legal basis: Consent

Retention period: Until you withdraw your consent, or, for as long as you have a Truecaller account or, as long as a legal claim is present.

k. Training artificial intelligence

If you explicitly consent, we use segments of raw or partially processed audio and associated transcriptions to use as training data to automatically train our proprietary artificial intelligence (AI) technology, analytics and development purposes of our products. We will take efforts to anonymise such data before processing.

Categories of personal data: Service-specific personal data

Legal basis: Consent

Retention period: Until you withdraw your consent, or, for as long as you have a Truecaller account or a legal claim is present.

5. Advertising

As you use our Services, you may see ads. These ads help keep our Services available without charge. Depending on your preferences and consent choices, we may use resettable online/device identifiers and cookies for the sake of providing you with targeted advertisements. You can read more about how we use cookies and online identifiers here.

6. Sources from which we may collect data about you

In addition to the information that Truecaller collects directly from you, we can also collect personal data about you from someone else, i.e. third parties. For example;

• Authentication partners: If you register for or log into Truecaller Services using another account (such as your Facebook, Google or Microsoft account) that service will send your name, email address and profile picture to us. This information helps create your account with us. You can control the personal data you allow us to have access to through the privacy settings on the respective third party service. Please note that we will never store any passwords created for any third party services.

• Information other Truecaller users provide about you: We may receive information about you from other users. For example, when other users you know use our Services, they can provide your name, phone number, whether that phone number is business or leave a comment. In that case, we use this information for the purposes of optimizing our Services and preventing potential fraud or unwanted spam for the Truecaller community.

• Third party service providers: We work with third party service providers to help us operate, provide, improve, understand, customize, support, and market our Services. This applies to processing activities such as mapping IP addresses to determine approximate location data (e.g., country or region, city, state), processing payments, understanding how people use our Services, ensuring safety, security, and integrity and helping with customer service. These companies provide us with information about you in certain circumstances; for example, app stores provide us with reports to help us diagnose and fix service issues or data about your subscription status.

• Other third parties: We may supplement the profile information provided by you with demographic information and additional contact information that is publicly available or with information received from information providers which collect data for example from public registers, telecom operators or based on a publishing certificate in order to increase the safety and quality of the content on our platform.

7. Storage and retention or personal data

We primarily process your data within our servers in Europe. But we may transfer your personal data to a country outside of Europe if we need to share your data with our suppliers or business partners that are established in a country outside the EU/EEA (see Section 9 for details).

We will store your personal data only for as long as necessary to fulfill the purposes for which the data is being processed. So, the retention period depends on the purpose for which the data is being processed. Most of the time we retain it for (i) until you delete it, (ii) after a specific period of time or (iii) until your Truecaller account is deactivated and deleted.

We consider (i) the suitable storage period to fulfill our purposes, (ii) the period that our users expects us to retain their data, (iii) the time we need to keep the data to enforce our rules and keep our service secure, (iv) the legal or contractual obligation to retain or delete the data and (v) the period to keep our directory accurate and up to date as the criteria to determine retention periods.

After your Truecaller account is deleted, your data is either deleted or anonymized. We retain certain data for a longer period of time, but for very limited purposes, for example if it is necessary to establish, exercise or defend a legal claim, e.g. if there is an on-going dispute or a crime has been reported to the police. We perform regular disposals and erase personal data that is no longer necessary to process.

8. Recipients of your personal data

Any information that you include on your profile will be seen by other Truecaller users, consistent with your settings. In this respect, you can display the name associated with a certain number for incoming or outgoing calls or following a manual number search against the Truecaller database. You may also use certain functionalities such as “who viewed my profile”, "who searched for me" and “availability” of our Services in line with the privacy settings of the other Truecaller user.

It is also possible to search for a number following a manual name search via Truecaller name search. However, we deliver a result only if that number linked to the searched name relates to a Truecaller user who has not made his/her name private. Otherwise, you can send a contact request and then that person may choose whether or not to share the phone number with you at his/her own discretion.

If you use instant verification by Truecaller, you can effortlessly sign in to services and apps offered by other companies using your existing Truecaller account. When you use Instant verification by Truecaller, we share the profile information detailed in the verification flow with the third party. We will only do this with your permission and will never share your passwords or other confidential information with such third parties.

In addition to the sharing and disclosure of personal data that as part of the functionality of the Services, Truecaller may disclose personal data to

• our group companies, trusted vendors, service providers, and other partners who support our business and Services, such as providing technical infrastructure services, bug testing, analyzing how our Services are used, measuring the effectiveness of services as well as potential partners who may wish to work with us to provide other services that interact or are integrated with our Services;

• associated or affiliated organisations or related entities and to any third party who acquires our business, whether such acquisition is by way of merger, consolidation or purchase of all or a substantial portion of our assets in order to carry out our day-to-day operations and to maintain, improve and provide the Services and acquired companies' services to you;

• law enforcement and other authorities, or other parties to a dispute if and when we believe in good faith that it is necessary for us to do so, for example to comply with a legal obligation or to participate in a valid legal process.

Truecaller will always require these third parties to take appropriate organizational and technical measures to protect personal data and to observe applicable legislation. Truecaller´s third party data processor list is available at https://www.truecaller.com/third-party-data-processors.

9. Transfers to countries outside Europe

If your personal data is transferred to a country outside Europe, we will take the necessary measures in order to transfer the personal data legally by ensuring that your personal data is processed securely and with an adequate level of protection that is comparable with the protection offered within Europe.

To ensure that each data transfer outside Europe complies with applicable EU law, we use the following legal mechanisms:

• We use the Standard Contractual Clauses adopted by the European Commission as a legal mechanism for the international transfer of data to a third party located in a country outside of Europe. According to these clauses, the other party must protect your data and give you rights and protections at EU level.

• We transfer personal data to countries outside of Europe that have adequate laws to protect personal data, as decided by the European Commission.

We also identify and use additional safeguards as necessary for each data transfer by for example implementing technical safeguards, such as encryption and pseudonymisation or incorporating policies and processes for unlawful government requests that the other party might receive.

10. Children's privacy

Our Services are not directed at children under the relevant age of consent under the laws of their respective jurisdictions. In this respect, we do not intentionally or knowingly collect or process information from children or allow such persons to register for our Services.

If we become aware that we have collected personal data about a child under the applicable age limit, we will take reasonable steps to delete the personal data. If you believe that we might have information from or about a child under the relevant age of consent, please contact us at support.eu@truecaller.com.

11. Privacy settings

We want you to be in control of your privacy preferences, so we have developed a number of features in the Truecaller application and a dedicated Privacy Center to make this as easy as possible. Within the application, you can easily update your profile information and visibility to others or deactivate your account. You can also unlist your number from our search database here.

You can also revoke any profile access granted to a third party via Truecaller verification by going to the Managed Authorization section in the application. Please note that the third party may still have access to data you have shared previously through verification by Truecaller. If you wish to have your data deleted from a third party you've previously authorized, you will need to contact that third party directly. The use of your personal data by third parties and how to exercise your rights with them are described in each third party's privacy notice.

12. Your rights as a Truecaller user

This section describes your rights under the GDPR associated with our processing of your personal data. At your request or on our own initiative we will rectify, anonymize, erase or supplement data that is discovered to be incorrect, incomplete or misleading. If you have any questions about this or wish to exercise a right, please contact us via the contact details under section 13.

1. Right to receive access to your personal data: You may request a confirmation as to whether or not personal data is being processed by Truecaller and to obtain a copy of that information.

2. Right to be informed: You have the right to be informed of how we process your personal data. We achieve this through this privacy policy, by service-specific FAQs, and by answering your questions through various communication channels.

3. Right to rectification: You have the right to request that we rectify inaccurate information or complete information about you that you consider is inaccurate or incomplete. Truecaller provides you with the functionality to rectify your data through the settings of the application.

4. Right to erasure: You may request that your personal data is erased in certain situations. For example; you can request us to delete such personal data that we (i) no longer need for the purpose it was collected for, or (ii) that we process based on your consent and you revoke your consent. There are situations where we are unable to delete your data, for example, if (i) the data is still needed to process for the purpose for which the data was collected, (ii) our interest to process the data overrides your interest in having them deleted, or (iii) we have a legal obligation to keep them.

5. Right to object: You may object to the processing of your personal data which is based on our legitimate interest.

6. Right to restriction: You may request restrictions of the processing of your personal data, if you believe that your personal data is inaccurate, that our processing is unlawful or that we do not need the information for a specific purpose.

7. Right to data portability: You may request to receive personal data provided by you in machine readable format. This right will also allow you to use this data somewhere else, for example to transfer your personal data to another controller. Truecaller provides you with the functionality to access your data in machine readable format through the settings of the application.

8. Right to object to an automated decision that significantly affects you: You have the right to object to an automated decision made by Truecaller if the decision is based solely on any form of automated decision-making (decisions without human intervention), including profiling and has legal consequences or similarly significantly affects you. We use automated processing when providing our Services which in some cases might involve artificial intelligence (AI) or machine learning. That said, our AI and machine learning systems do not always involve the processing of personal data. Whenever they do, we adhere to all the core principles of the GDPR that have particular suitability and applicability to AI/machine learning contexts. Please note that we do not make any decision about our users based solely on automated processing.

9. Right to withdraw your consent: Where we process your personal data based on your consent, you have the right to revoke that consent at any time. When you revoke your consent we will stop processing your data for such purposes.

13. Contact details

To exercise your rights, and for questions or complaints related to this privacy policy or the processing of your personal data, we encourage You to contact our Data Protection Officer via dpo.eu@truecaller.com. You can also reach us by physical mail at the following address:

Data Protection Officer, True Software Scandinavia AB, Reg. No. 556784-0912, Mäster Samuelsgatan 56, 111 21 Stockholm, Sweden.

If you have complaints about Truecaller´s processing of your personal data, you may lodge a complaint with the Swedish Authority for Data Protection (Sw:Integritetsskyddsmyndigheten) through the following link, or with the data protection authority in your country of residence.

14. Security measures

Truecaller has taken appropriate technical and organizational security measures in order to protect your personal data against unlawful or accidental disclosure, use, access, destruction, alteration or harm to your personal data. For example, all user data is stored in a database protected by firewall and access control so only employees within the Truecaller who need access to your personal data to perform specific tasks have such access.

15. How we use cookies

We use cookies and similar tracking technologies in our multiple interfaces, such as our website and the Truecaller application. You can control cookies through your browser settings and learn more about the tracking technology that Truecaller uses in our Cookie Policy.

16. Changes to this privacy policy

We are constantly working to improve our Services. This may involve modifications of our handling of personal data (e.g. we may collect data for new purposes or collect additional data). The date of the most recent revision will appear on this page. It is important that you read this privacy notice every time you use any of our Services, as the processing of your personal data may differ from your previous use of the Service in question.

If that improvement requires a notice or consent in accordance with the applicable laws, you will be notified or given the opportunity to give your consent. If you do not agree with any changes, please do not continue to use our Services. Otherwise, your continued use of the Services will mean that the processing of your personal data is subject to the new privacy policy.

17. Supplemental Privacy Statement for individuals who do not have an account with Truecaller

This Supplemental Privacy Statement for individuals who do not have an account with Truecaller (a “Non-user” or “you”) supplements and should be read in conjunction with our Privacy Policy.

What information do we collect about you?

Some of our features allow us to process phone numbers of both Truecaller users and other individuals who aren’t currently Truecaller users (i.e. Non-users). We process these Non-user phone numbers in a way that is designed to prevent Non-users from being identified. In most of the cases, we don’t store Non-users’ phone numbers on our servers, we only process these numbers on the Truecaller users´device. In addition, we never track the Non-user phone numbers for any reason such as targeting with ads.

If you use Truecaller verification when signing up for a third-party service, we collect your number to perform an automated verification call or to send a one time password. If you use Truecaller verification, this policy applies in relevant parts even if you do not have a Truecaller account in the application.

How do we use a Non-user’s information?

When people sign up for Truecaller (a “Truecaller user”, “they”, “their”), they can choose to

• grant access to their contacts in their phonebook to use our Caller ID functionality. When they do so, we use this access to identify whether the caller’s number is stored in the Truecaller users´ phonebook, and if it is, we display the stored contact information on the caller ID. We also use this access to show Truecaller users which of their contacts are also using Truecaller messaging services to make it easier to chat with them. In both cases, the access is performed on the device meaning that we only read the contact information stored locally on Truecaller users´ phone but not upload them to our servers.

• report a phone number and /or an SMS as spam or provide feedback. When they do so, we process these reports to (i) identify and verify spam or malicious callers, (ii) display business or contextual information about unknown numbers such as someone you might know and (iii) provide our smart SMS features like spam filtering, fraud protection, and categorisation.

• use our services to make and receive calls or send and receive messages, we may collect call and message log information like your phone number as the calling-party number, receiving-party number, forwarding numbers, sender and recipient email address, time and date of calls and messages, duration of calls, routing information, and types and volumes of calls and messages;

• use our paid services, such as Call recording and Call assistant, under which we may process information about incoming calls, calling-party number and possible audio recording and transcriptions derived from the assistant or call recording. When using Call Recording, we act as a data processor for information about the audio recording and related transcription, and our user is the data controller.

Please note that we will not send you notification in such cases in line with Article 14 (5) (b) of the GDPR. Nevertheless, we shall take appropriate measures to protect your rights and freedoms and legitimate interests, including making this information publicly available.

What is our legal basis for this processing?

Where the processing of data does not fall under the scope of our publishing certificate, we rely on our legitimate interests and the legitimate interests of our users to process Non-users’ phone numbers in the limited cases mentioned above. More specifically, we rely on our legitimate interests in operating and providing the Truecaller service to our users and keeping Truecaller safe and secure by building and maintaining our community based fraud and spam directory, and the interests of our users in more efficiently connecting with their contacts who join the Truecaller community.

Retaining Non-user information

When we access Non-users’ phone numbers, we only store them in very limited circumstances mentioned above, and when we do so, we only retain the phone numbers for as long as it is necessary to provide the requested services by Truecaller users. We ensure that appropriate security measures are in place to protect your personal data from any unauthorized access, loss, or destruction.

In most of the cases, we don’t store Non-users’ phone numbers on our servers, we only process these numbers on the Truecaller users' device. In any case, we delete phone numbers reported as spam after two years starting from the creation of the spam report by a Truecaller user.

How Non-users exercise their data subject rights

Data subjects have all the rights specified under section 12 above. To exercise those rights, contact us via the contact details provided under section 13 above. Please note that, given that we do not collect and store any information about Non-users’ other than phone numbers, our ability to respond to your request and the information we can provide to you may be limited in practice.

Automated decision making and profiling

We use automated processing when providing our Services which in some cases might involve artificial intelligence (AI) or machine learning. Notwithstanding our statements about Truecaller users in section 12 above, as part of our automated processing activities, we create spam, likely business and likely fraud profiles to display information about callers and SMS senders and warnings about potential spam, fraud and business callers and SMS senders which might belong to a “Non-user”. We use automated systems that analyze the scam patterns in the calls and SMSs that Truecaller users receive or report to help us create these profiles and then detect abuse such as spam or fraud. We also create and train AI models from user reports to detect fraudulent and spam SMSs. This leads us to quicker and more consistent decisions and helps us to analyse very large volumes of data and make solid decisions.

When we do that, we ensure that appropriate security measures are in place to protect personal data from unauthorized access, loss, or destruction when using AI systems.

If you think that our spam classification is not correct, you can contact us at support.eu@truecaller.com or delete your phone number from our database via https://www.truecaller.com/unlisting.