Effective 17 August 2026 · Version 1.0
The short version
Call Avert does not collect, transmit, sell, or share any of your information. The app has no internet access whatsoever — it is built without the Android permission that would make a network connection possible. Your blocked numbers, call history, and settings stay in encrypted storage on your phone and nowhere else.
This policy explains what Call Avert ("the app") does with information on your device. It
applies to the Android application Call Avert Spam Call Blocker
(com.callavert.app).
There is no account to create, no sign-in, no analytics, no advertising SDK, no crash reporting service, and no telemetry of any kind. We do not know who our users are, how many numbers you have blocked, or that you use the app at all.
This is not a policy promise we are asking you to take on faith — it is enforced by Android
itself. An app can only open a network connection if it declares the
INTERNET permission in its manifest. Call Avert does not declare
it. The operating system will refuse any attempt to contact a server, ours or anyone
else's. You can verify this yourself: on the Play Store listing, open
App info → Permissions, and on your phone under
Settings → Apps → Call Avert → Permissions.
Everything the app remembers is written to private storage inside the app's own sandbox, which other apps cannot read. This includes:
The database is encrypted at rest with SQLCipher (AES-256), and the key is held in the Android Keystore, which is backed by dedicated security hardware on most modern phones. Your settings are stored in encrypted preferences using the same Keystore-protected scheme.
The app also sets allowBackup="false", which means Android will not copy your
blocked list or call history into a cloud backup on your behalf.
Android requires an app to declare every capability it uses. Here is the complete list for Call Avert and the exact reason for each. Every one is used only on your device.
| Permission | Why the app needs it |
|---|---|
Caller ID & spam(the screening role) |
The core function. Android hands the app each incoming call so it can decide whether to block it. This is a role you grant explicitly, and you can revoke it at any time. |
READ_CONTACTS |
Optional. Powers the "Allow contacts" and "Allow favourites" toggles, and shows a caller's name in your blocked history instead of a bare number. Contacts are read on the device at the moment a call arrives and are never copied out of it. Deny this and the rest of the app still works. |
READ_CALL_LOG |
Powers the Recent Calls screen, so you can tap a number that just bothered you and block it without retyping it. The call log is read directly on your phone and is never uploaded, indexed, or shared. |
ANSWER_PHONE_CALLS |
Used only by the optional "Answer & hang up" block mode, which picks up a blocked call and immediately disconnects it so the caller cannot reach your voicemail. The app never listens to, records, or transmits any audio. It has no microphone permission. |
POST_NOTIFICATIONS |
Shows you that a call was blocked, if you turn those notifications on. |
USE_BIOMETRIC |
Lets you lock the app behind your fingerprint, face, or device PIN. The app never receives your biometric data — Android only tells it whether the check passed. |
RECEIVE_BOOT_COMPLETED |
Restores scheduled maintenance (such as trimming old history) after you restart your phone, so blocking keeps working. |
HIDE_OVERLAY_WINDOWS |
A security measure. It stops another app from drawing an invisible layer over Call Avert's screens to trick you into tapping something you did not intend. |
Call Avert has no microphone permission, no location permission, no camera permission, and no ability to read or send messages.
The app can export your blocked list to a CSV file, and create an encrypted backup, using Android's system file picker. You choose where those files go. Once a file leaves the app's private storage it is under your control and this policy no longer governs it — if you save it to a cloud drive, that provider's terms apply. Encrypted backups are protected with AES-256-GCM using a password you set; we cannot recover it for you if it is lost.
Because nothing is stored off your device, there is no server-side account to delete and no request to send us. Clearing the app's storage (Settings → Apps → Call Avert → Storage → Clear data) or uninstalling the app removes everything permanently.
Call Avert is a general-purpose utility and is not directed at children. Since it collects no information from anyone, it collects none from children.
If a future version of the app ever adds a feature that involves sending data off your device — for example an optional spam-number lookup — this policy will be updated before that version ships, the change will be described plainly here, and any such feature will be off by default and require you to turn it on. The effective date and version number at the top of this page will change whenever the policy does.
Questions about this policy, about privacy in the app, or anything else: contact@callavert.com