Privacy Policy

Last updated: 2026-10-08 / Established by XTV LLC

XTV LLC ("we" or "the Company") provides the outgoing-call blocking application "NoDial" ("the Service") with a design philosophy of minimal data collection and the highest priority on user privacy. This Privacy Policy ("this Policy") describes how user information is handled in connection with the Service.

Article 1 — Information We Do Not Collect

The Service does not collect any of the following:

• Email addresses
• Passwords
• Name, age, gender, or date of birth
• Home address
• The user's own phone number
• Contact lists (device address book)
• GPS location data
• Camera, microphone, or other audio/visual data
• SMS or message content
• Call history or call content (no recording or transcription of any kind)

As a result, it is technically impossible for us to identify any individual user.

Article 2 — Information We Collect

We collect only the following information, solely for the purpose of providing the Service:

2.1 Device Identifiers

• A device-generated unique identifier (UUID): used as the account identifier
• A Firebase Cloud Messaging device token: used for push notification delivery
• An anonymous app-instance ID generated on the device by Google Analytics for Firebase: used for usage statistics (launches, active users, country, retention)
• The device's advertising identifier (Google Advertising ID): used to measure advertising (which ad led to an install and a subscription, in aggregate). You can reset or disable it at any time in your device settings
• The install referrer (a string provided by Google Play indicating which ad or link led to the install): used for advertising measurement. Read once, at first launch

2.2 User-Provided Information

• Support ID (a random identifier assigned by our service, in the form ND-XXXX-XXXX; used to identify your account when you contact support)
• Phone numbers to block: transmitted to our server in SHA-256 hashed form only. The original numbers are never sent to or stored on our servers.

2.3 Usage Data

• onPlaceCall trigger events (hashed number + timestamp): used to display your call-attempt history within the app and for aggregate statistics
• Periodic heartbeat signals (daily): used to confirm the app is running (to notify you if call blocking may have stopped) and to clean up long-unused data
• The device's country (a country code determined from the SIM, mobile network, or language settings), device language, app version, and last-active date: used to understand usage by country, to show guidance in the right language, and to identify versions that are not working. No GPS or other precise location data is collected

2.4 Plan and Subscription Information

• Purchase token issued by Google Play: used to verify, manage, and aggregate Premium Plan subscription status
• Subscription status (plan type [Free / Premium], expiration date, and status [active, pending cancellation, expired, etc.])

Article 3 — Purpose of Collection

We use the information we collect solely for the following purposes:

1. Providing the Service (number registration management, outgoing call blocking)
2. Verifying Premium Plan subscription status and providing plan-appropriate features (Google Play billing; RevenueCat is used to manage and aggregate subscription status)
3. Confirming the app is running (a notice after 2 days without a heartbeat) and cleaning up long-unused data (deleting Free Plan data after 180 days without a heartbeat)
4. Preventing unauthorized use
5. Improving the Service (on an aggregated, anonymized basis only)

Information collected will not be used beyond the scope of the purposes listed above.

Article 4 — Third-Party Disclosure and Sub-Processors

We do not provide collected information to third parties except in the following circumstances:

1. When the user has given consent
2. When disclosure is required by law
3. When necessary to protect the life, body, or property of a person

However, we entrust data processing to the following service providers solely for the purpose of delivering the Service:

These sub-processors are contractually obligated to handle data appropriately in accordance with our agreements with them.

Article 5 — International Data Transfers

1. Data from the Service is stored on servers operated by Google Play / Firebase (US region), Supabase (US or EU regions), RevenueCat (US region), and Meta Platforms (US region).
2. These sub-processors implement appropriate data protection measures, including compliance with applicable laws such as the GDPR and CCPA, as well as technical and organizational safeguards such as encryption.
3. Pursuant to Article 28 of the Act on the Protection of Personal Information (Japan), please contact us separately for information regarding the handling of personal information by the above transfer recipients.

Article 6 — Data Retention and Deletion

1. All user-related data stored on our servers will be deleted at the following points:
   • When the account deletion procedure is completed (deletion is immediate)
   • When 180 days have passed without a heartbeat (Free Plan only; data is not deleted while a Premium Plan subscription is active)
   • When we discontinue the Service
2. Data subject to deletion includes: device UUID, Support ID, nickname (if one was set in an earlier version), hashed phone numbers, call attempt history, subscription status (plan type, expiration date, status), purchase token, heartbeat history, and related data.
3. Anonymous usage statistics (device-level events such as onboarding screen views and interactions) are not linked to your account and are therefore not included in the deletion described above.
4. Records of Premium Plan purchases and billing themselves are separately retained by Google Play (Google LLC) and are handled in accordance with Google Play's terms.
5. Premium Plan subscription records (purchase token, account ID, product ID, and subscription status history) are retained by RevenueCat, Inc. until you request deletion, for subscription verification, management, and aggregation. Deleting your account from our servers or uninstalling the app does not automatically delete these records from RevenueCat. To request deletion, please contact us via the channel described in Article 10. We will verify your request against purchase records before processing it. Deleting records does not cancel your Google Play subscription.

Article 7 — User Rights

Users have the following rights regarding their own data:

1. Right of access: You may view your registered numbers, call attempt history, and subscription plan status through the in-app dashboard.
2. Right to deletion: You may delete your data from our servers by using the account deletion procedure or uninstalling the app. Deletion via the account deletion procedure is executed immediately; in the case of uninstallation, deletion is executed after 180 days without a heartbeat.
3. Deletion requests for records held by Google Play: For requests to delete purchase or billing records held by Google Play, please contact Google directly.
4. To exercise any of these rights, please reach out via the contact details in Article 10.

Article 8 — Cookies, Ad Tracking, and Analytics

1. The Service (mobile application) does not use browser cookies.
2. No third-party advertising networks are used within the Service, and no third-party advertisements are displayed within the Service.
3. To understand and improve how the app is used, the Service uses Google Analytics for Firebase, provided by Google LLC. Only interaction data (app launches, screens viewed, subscription status) and an anonymous app-instance ID generated on the device are sent (on Google's side, a coarse location at country/city level is derived from a masked IP address); no phone numbers, memos, names, or other personally identifying information are sent. The device's advertising identifier (which you can reset or disable in your device settings) is also sent, for advertising measurement. The collected information is handled in accordance with Google's Privacy Policy.
4. For advertising measurement and ad delivery optimization, the Service uses technology from third parties, including Meta. Only interaction data (app launches, completion of initial setup, opening the purchase screen), the device's advertising identifier (which you can reset or disable in your device settings), and device information are sent; no phone numbers, memos, names, or other personally identifying information are sent. Subscription start, renewal, and refund information is sent from RevenueCat to advertising partners. These third parties, including Meta, use this information for measurement and ad targeting. Information collected by Meta is handled in accordance with Meta's Privacy Policy.
5. However, our website (no-dial.com) uses Google Analytics, an analytics tool provided by Google LLC, to understand and improve how the site is used. Google Analytics uses cookies and similar technologies to collect browsing information (pages viewed, time on page, approximate region, browser type, etc.); this information does not include personally identifying details such as your name or address. The collected information is handled in accordance with Google's Privacy Policy. You can disable this data collection at any time using the Google Analytics Opt-out Browser Add-on.

Article 9 — Changes to This Policy

1. We may update this Privacy Policy from time to time.
2. When changes are made, we will notify users of the content and effective date through in-app notifications.
3. For material changes (such as the addition of new categories of information collected or new third-party recipients), we will obtain renewed consent from users.

Article 10 — Contact