SpamCrusher ("we", "us", "our") is an independent mobile application operated by an individual developer. SpamCrusher is a call-blocking and spam-filtering application available on the Android platform via the Google Play Store.
For all privacy-related matters, we can be reached at: spamcrusher07072000@gmail.com
This Privacy Policy applies to:
This Policy does not apply to third-party services, websites, or applications that may be linked from within the App. Those services are governed by their own privacy policies.
By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, you must discontinue use of the App immediately.
| Term | Meaning |
|---|---|
| Personal Data | Any information that identifies or can reasonably identify a natural person. |
| Processing | Any operation performed on Personal Data, including collection, storage, use, transfer, or deletion. |
| Data Fiduciary / Controller | SpamCrusher — the entity that determines the purpose and means of processing Personal Data. |
| Data Principal / Data Subject | You — the individual whose Personal Data is being processed. |
| Device | The Android smartphone on which the App is installed. |
| Call Data | Metadata about an incoming call (phone number, timestamp, blocking decision). Does not include audio content of any call. |
| Filter Rules | Blocking rules created by you (e.g. number prefixes, suffixes, full numbers, countries, time rules, regex patterns). |
| Community Spam Database | A shared, anonymised dataset of phone numbers reported as spam by App users, stored in Firebase Realtime Database. |
When you sign in using Google Sign-In during onboarding, we receive the following information from Google:
We store your name, email, and Firebase UID in our Firestore database to maintain your user profile. Your profile photo is not stored by us — it is fetched directly from Google's servers when displayed in the App.
During onboarding, you are asked to provide your personal phone number. This number is:
When the App blocks an incoming call, the following metadata is recorded:
Important: We never record, access, intercept, or store the audio content of any call. The App only processes the phone number and metadata associated with an incoming call.
Blocking rules you create within the App — including number prefixes, suffixes, full numbers, country selections, time-based rules, and regex patterns — are stored exclusively on your device in a local database. These rules are never uploaded to our servers.
We collect the following technical information about your device and store it in your user profile in Firestore:
This information is used solely to provide support, debug issues, and understand compatibility across devices.
If you purchase a paid subscription (Plus or Premium), Google Play Billing processes your payment. We do not receive or store your payment card details, billing address, or any financial information. We only receive a confirmation of your subscription tier and its validity period from Google Play. This confirmation is stored in two places: encrypted local storage on your device, and your user profile in Firebase Firestore — solely to allow your subscription to be restored if you reinstall the App on a new device.
| Collection Method | Data Collected |
|---|---|
| Google Sign-In (during onboarding) | Name, email, profile photo URL, Firebase UID |
| User input (during onboarding) | Phone number |
| App functionality (call screening) | Caller phone numbers, timestamps, blocking decisions |
| User input (filter management) | Filter rules — stored locally only |
| Device system (automatic) | Device model, OS version, app version, locale |
| Google Play Billing (on subscription purchase) | Subscription tier and validity period only |
We process your Personal Data on the following legal grounds:
| Legal Basis | Purpose |
|---|---|
| Performance of a contract / Consent | Providing the core call-blocking service you have signed up for. |
| Consent | Processing your phone number and account information during onboarding. You provide explicit consent by completing onboarding. |
| Legitimate Interests | Contributing blocked caller numbers to the Community Spam Database to protect other users from spam calls. Our legitimate interest is weighed against minimal privacy impact — only the phone number and block count are stored, with no other identifying information about the caller. |
| Legitimate Interests | Collecting device and technical information for compatibility, support, and app improvement. |
| Legal Obligation | Retaining or disclosing data where required by applicable law. |
Where processing is based on consent, you have the right to withdraw consent at any time by deleting your account (see Section 15).
We use the information we collect strictly for the following purposes:
We do not use your Personal Data for advertising, profiling, or automated decision-making that produces legal or similarly significant effects on you.
SpamCrusher includes a community-powered spam protection feature. When the App blocks an incoming call that is identified as spam (excluding calls blocked by Do Not Disturb time rules or personal whitelist rules), the following data is submitted to the Community Spam Database hosted in Firebase Realtime Database:
Note on caller privacy: The phone numbers submitted to the Community Spam Database are numbers of individuals or entities that have been identified as spam callers by our blocking engine. These numbers are not associated with any App user's identity. The purpose of this database is exclusively to improve spam detection for all users. We do not use this database to build profiles, track individuals, or share data commercially.
This feature operates automatically whenever a qualifying call is blocked. It cannot be disabled separately. If you do not wish for blocked caller numbers to be submitted to the Community Spam Database, you should not use the App.
We want to be explicit about what we never collect:
| Data Type | Where Stored | Can You Delete It? |
|---|---|---|
| Filter rules (prefix, suffix, full number, country, whitelist, time rules, regex) | On your device only (Room/SQLite local database) | Yes — directly in the App |
| DND settings | On your device only | Yes — directly in the App |
| Blocked call log | On your device only | Yes — by uninstalling or clearing App data |
| Subscription tier and validity | On your device (encrypted) and in your Firebase Firestore profile (cloud) — for reinstall restoration | Automatically cleared locally if subscription lapses; removed from Firestore on account deletion |
| User profile (name, email, phone number, device info) | Firebase Firestore (Google Cloud) | Yes — by submitting a deletion request to us |
| Community Spam Database entries | Firebase Realtime Database (Google Cloud) | Entries are anonymised and not linked to your identity — individual deletion is not applicable |
Your filter rules and local blocked call history are automatically backed up to your personal Google Drive via Android Auto Backup, governed by Google's own Privacy Policy. Your subscription tier is not backed up and must be re-verified on a new device.
We do not sell, trade, rent, or otherwise transfer your Personal Data to third parties for commercial purposes.
We may share or disclose your data only in the following limited circumstances:
We use Google Firebase to store and process certain data on our behalf. Firebase acts as a data processor under our instructions. See Section 12 for details.
We may disclose your Personal Data if required to do so by law, regulation, judicial order, or lawful request by a government authority, provided we are legally permitted to notify you of such a request.
We may disclose information where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of SpamCrusher, our users, or the public.
In the event of a merger, acquisition, sale of assets, or any other business transfer involving SpamCrusher, your Personal Data may be transferred to the successor entity. We will notify you via a prominent in-app notice and update this Privacy Policy at least 30 days before any such transfer occurs. The successor entity will be required to honour the commitments made in this Policy or obtain fresh consent from you.
Except as described in this Section 11, we do not share your Personal Data with any other individual, company, or organisation.
The App integrates the following third-party services. Each has its own privacy policy governing their data handling practices:
| Service | Provider | Purpose | Data Shared |
|---|---|---|---|
| Firebase Authentication | Google LLC | User sign-in and identity management | Google account ID, email |
| Firebase Firestore | Google LLC | User profile storage | Name, email, phone number, device info |
| Firebase Realtime Database | Google LLC | Community Spam Database | Blocked caller numbers, block counts |
| Firebase App Check | Google LLC | Security — ensures only our App can access our Firebase resources | App integrity attestation token (no Personal Data) |
| Google Sign-In | Google LLC | Authentication | Google account profile |
| Google Play Billing | Google LLC | Subscription purchase and verification | Subscription status only (no payment details) |
| Android Auto Backup | Google LLC | Local data backup to user's Google Drive | Filter rules, UI preferences (stored in your own Google Drive) |
Google's Privacy Policy is available at https://policies.google.com/privacy. We encourage you to review it.
We do not integrate any advertising SDKs, analytics SDKs (e.g. Google Analytics, Firebase Analytics), or social media tracking SDKs.
| Data Type | Retention Period |
|---|---|
| User profile (Firestore) | Retained for as long as your account is active. Deleted within 30 days of a verified account deletion request. |
| Filter rules and local blocked call log | Retained on your device until you delete them in the App or uninstall the App. |
| Community Spam Database entries | Retained indefinitely in anonymised, aggregate form. Entries are not linked to any individual user account and cannot be individually deleted. |
| Subscription tier (encrypted local storage) | Retained until subscription lapses or you uninstall the App. |
When you delete your account or request data deletion, we will remove your Personal Data from our active systems within 30 days. Some data may be retained for up to 90 days in backup systems before permanent deletion, solely for system integrity purposes.
We implement the following technical and organisational measures to protect your Personal Data:
No method of electronic storage or transmission is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
Depending on your jurisdiction, you have the following rights regarding your Personal Data. To exercise any of these rights, contact us at spamcrusher07072000@gmail.com. We will respond within 30 days.
The App is intended for users aged 18 and above. We do not knowingly collect Personal Data from individuals under the age of 18. If you are a parent or guardian and believe that your child under 18 has provided us with Personal Data, please contact us immediately at spamcrusher07072000@gmail.com and we will take prompt steps to delete that information and terminate the associated account.
By using the App, you confirm that you are at least 18 years of age. If you are under 18, you must not use or access the App in any way.
SpamCrusher is operated from India. If you are located outside India, your Personal Data will be transferred to and processed in India and in the countries where Google's Firebase infrastructure operates (including the United States and European Union data centres).
For transfers of Personal Data from the European Economic Area (EEA), United Kingdom, or Switzerland to countries that may not provide an equivalent level of data protection, we rely on Google's Standard Contractual Clauses (SCCs) and adequacy decisions where applicable, as Google is our sole data processor for cloud storage.
By using the App, you consent to your Personal Data being transferred to and processed in these jurisdictions.
SpamCrusher operates as a Data Fiduciary under the DPDP Act 2023. We process your data on the basis of your free, specific, informed, and unambiguous consent provided during onboarding, and on the basis of legitimate uses as permitted under the Act. You may withdraw consent at any time by requesting account deletion. We will process your grievances within 30 days of receipt.
For users in the EU/EEA, SpamCrusher acts as the Data Controller. The legal bases for our processing activities are set out in Section 6. If you have concerns about our data processing that we have not resolved to your satisfaction, you have the right to lodge a complaint with the supervisory authority in your EU member state.
For users in the United Kingdom, the same GDPR-equivalent rights apply under the UK GDPR and the Data Protection Act 2018. You may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
SpamCrusher does not sell Personal Information as defined under the CCPA. We do not share Personal Information for cross-context behavioural advertising. The categories of Personal Information we collect are described in Section 4. We do not discriminate against users who exercise their privacy rights.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons.
When we make changes, we will:
A "material change" includes any change that:
For material changes, we will provide at least 30 days' notice before the change takes effect. Your continued use of the App after the effective date of a material change constitutes your acceptance of the updated Policy. If you do not accept the updated Policy, you must stop using the App and request deletion of your data.
We will maintain an archive of previous versions of this Policy, available upon request.
If you have any questions, concerns, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:
SpamCrusher — Privacy
Email: spamcrusher07072000@gmail.com
We will respond to all requests within 30 days. For urgent matters relating to a data breach or immediate risk to your rights, please mark your email as URGENT — PRIVACY.
© 2026 SpamCrusher. All rights reserved. | Version 1.1 | Last Updated 16 April 2026