Excuse me Privacy Policy

1. What we collect and why

Sign-in account (Kakao / Google / Apple): the account ID, email (if the provider shares it), name (nickname) and profile picture URL the provider returns. Used to keep you signed in, verify you and tie purchases to you. If you do not sign in, no account is created.

Device info (after sign-in): a random device ID made by the app, OS type (iOS/Android), app version, language and time zone. On iOS we also receive the push (VoIP) token so a scheduled call can be delivered. Used to deliver calls and find errors.

Phone key (after sign-in): to stop the free trial from being repeated by reinstalling or re-registering, a SHA-256 hash of an app-scoped device value mixed with an app-specific string, and the number of trial calls used with it. The original value never leaves your phone.

Reservation and call records: when a call was scheduled, rang, was answered, declined or missed, the delay in seconds, the chosen voice and person number, where it was scheduled from (home, bubble, shortcut, test) and the result. On iOS the server must send the call by push, so the caller display name you chose is stored too. Calls that ring on an Android phone itself send no name or number. Used for trial counting and quality.

Usage records (after sign-in): event names and times such as screen views, scheduling, ringing, answering; the device ID; a session ID; numbers such as time to schedule. Used to improve usability and for statistics. Before you sign in, none of this is created or sent.

Purchases and wallet: products bought (Pro lifetime, points), store transaction ID, time, points balance and history, unlocked voices and slots. Used to grant, restore and refund purchases and to handle disputes. We never receive card details (handled by Apple and Google).

Abuse protection: to limit sign-in attempts to 30 per hour per IP, we keep a hash of the IP address only as an hourly counter and delete it within a day.

What we never collect

The number and name of the person you pick from contacts stay on this phone and are never sent to our servers (only the one contact you choose is read through the system picker; we do not request contacts permission). No location, photos, microphone recordings, advertising ID or real call content. The voice in the call is generated on your phone by text-to-speech.

2. Processors and overseas transfer

Cloudflare, Inc. (US / Asia data centers): servers, database (D1), files (R2) and the scheduling clock. Holds account, device, reservation, usage and purchase records. Cloudflare may keep access logs (time, URL, IP) for a limited period for operations. Retention follows section 3.

RevenueCat, Inc. (US): in-app purchase verification and restore. Receives our member ID, purchase info and device info such as app version and country. Retention: as required for purchase records by law.

Apple Inc. (US): iOS call-delivery push (APNs) receives the push token and reservation payload, and handles App Store payments and Sign in with Apple. Google LLC (US): Google Play payments and Google sign-in. Kakao Corp. (Korea): Kakao sign-in. These three process the sign-in or payment you chose under their own terms.

All records above are transferred abroad, at the time the app connects to the server (encrypted over HTTPS). If you do not want an overseas transfer, simply do not sign in (scheduling calls will then be unavailable); information already transferred can be deleted under section 4. No third-party provision for marketing.

3. Retention

Account, device, wallet and points history: until you delete the account. Reservation and call records: automatically deleted after 90 days. Usage records: automatically deleted after 2 years, and immediately when you delete your account. Purchase records (store transaction ID, product, time): kept 5 years under the e-commerce act, then deleted (they remain for this period even if you delete the account). Phone-key hash and trial count: deleted 2 years after last use (they remain after account deletion). Sign-in attempt counter: within a day.

4. Deleting your account and data

In the app: Settings → About → Delete data. After you confirm, your server account, social sign-in link, devices, reservation and call records, wallet and points, and usage records are deleted, and names, settings and contact links on this phone are wiped. For Apple sign-in the link on Apple’s side is revoked too. This cannot be undone.

If the server cannot be reached you may wipe only this phone first; delete the server records later after reconnecting or through the web request below.

What remains: purchase records for 5 years and the phone-key hash for 2 years (section 3). No other personal data remains.

If you cannot use the app (for example after uninstalling): follow the web deletion page (/excuseme/delete) and email contact@worldwidesomething.com with your sign-in method (Kakao / Google / Apple) and account email. We verify and delete within 7 days and confirm by email.

5. Your rights and children

Request access, correction, deletion or restriction through Delete data in the app or at contact@worldwidesomething.com. Under-14s may not sign up or use the app; accounts found to belong to under-14s are deleted promptly.

6. Security

All traffic is encrypted over HTTPS. Sign-in tokens are encrypted in the phone’s secure storage (Android Keystore / iOS Keychain) and excluded from app backups and device transfer. The server only lets a signed-in member reach their own records, and purchases are re-verified on the store’s servers. Analytics are not accepted before sign-in.

7. Changes & contact

Changes are announced here and in the app 7 days before taking effect (30 days if adverse). Contact: contact@worldwidesomething.com / Excuse me · WorldWideSomething. Effective: Oct 13, 2026 · v1.0.