The short version
- Your contacts, calls, photos and videos are used on your phone to show your looks. We don’t receive them.
- Some data does leave your phone: usage statistics and crash reports (Google Firebase), purchase status (RevenueCat), ads (AppLovin and ad networks), and downloads of looks (Cloudflare). Section 4 says exactly what.
- In the EEA, the UK and Switzerland, ads are personalised only if you agree. In US states with privacy laws, you can opt out of the “sale” or “sharing” of your data.
- There is no account. We don’t ask for your name, email address or phone number.
- You’re in control: Me → Settings → Privacy & ads lets you turn off usage statistics, change your ad choices and delete your data.
- Call Screen is for adults (18+).
1. Who we are
Call Screen is published by Moonlanes (“we”, “us”). We decide how the personal data described here is used, so we are its controller under the General Data Protection Regulation (GDPR).
Moonlanes is the trade name of:
Full company details: legal notice
- Privacy questions
- privacy@moonlanes.com
- Support
- support@moonlanes.com
We have not appointed a data protection officer. Every privacy question goes to privacy@moonlanes.com, and we answer it ourselves.
2. What stays on your phone
Call Screen does its main work on your phone. The information in this section is stored in the app’s private storage and used there. It isn’t sent to us or to our partners, and we can’t see it. Only Android’s own backup, if you have it on, can copy some of it to your Google account (see 4.10).
Contacts
The app reads your contacts to show names and photos on calls, and so you can choose people in the app. It writes to a contact only when you ask it to: when you set a ringtone for that person, Android saves the ringtone on the contact, and when you turn on Always use this number, that number becomes their default in Contacts.
Calls
When a call comes in or goes out, Android gives the app the phone number and the state of the call. The app uses them on your phone to find the contact and show the look you chose. Phone numbers, your contacts’ names and call times are never sent to us or to our partners.
Call Screen works in one of two modes:
- Lite mode (Android 11 and newer): Call Screen is your Caller ID & spam app. It keeps a “looks shown” history on your phone: which look it showed, for which contact, and when. It never records how long a call lasted or whether you answered. Each entry is deleted automatically after 30 days. The history orders your People and suggests who could get a look.
- Full mode (Android 8 to 10, or when you choose it): Call Screen is your phone app. It shows the call history that Android keeps on your phone (the call log).
Photos and videos you choose
You pick them with Android’s photo picker, so the app only receives the ones you pick. It keeps copies in its own storage so your looks keep working. Cut-outs, Depth callers, face placement, name ringtones and video exports are all made on your phone. Your photos and videos are never uploaded, and shared looks never contain them.
Cut-outs and face detection use Google’s ML Kit, which runs on your phone with models provided by Google Play services (see 4.9).
Sounds and voices
Sound files you pick, ringtones you trim and name ringtones you make stay on your phone. Name ringtones and the caller-name announcer use the text-to-speech voice installed on your phone (for example, Speech Services by Google). The app gives that voice engine the words to say; the engine’s own terms apply to it.
Your settings and rules
Which look belongs to whom, block rules, quick replies, callback reminders, flash and vibration choices, items you have unlocked, and your other settings.
Backups you make
Settings → Backup saves a file to a place you choose. That file is yours, and we don’t receive it. If you save it to a cloud drive, that service’s privacy terms apply.
3. Permissions the app asks for
Android asks you before the app can use most of these. You can change them at any time in your phone’s settings; features that need a permission stop working without it.
| Permission | What it’s for | When |
|---|---|---|
| Caller ID & spam app | Showing your look when a call comes in, and turning away calls you block (Android 11 and newer) | During setup |
| Default phone app | Handling calls with themed screens, the keypad, recent calls and contacts | When you use Full mode |
| Contacts | Names and photos on calls, choosing people, setting a person’s ringtone or default number | During setup or first use; you can say no |
| Phone | Knowing when a call rings and ends, and answering or declining from your look | During setup |
| Call history | Showing your recent calls in the phone app | Full mode only |
| Display over other apps, full-screen notifications | Showing your look over the lock screen and other apps while a call rings | During setup |
| Notifications | Call notifications when a look can’t open full screen, reminders, and news about looks if you allow it | During setup or first use |
| Modify system settings | Setting your phone’s default ringtone | Only when you set a ringtone for everyone |
| Storage (Android 8 and 9 only) | Putting your sounds in the phone’s ringtone list, and saving the videos you make to your gallery | When you first do either |
| Alarms & reminders | Callback reminders at the exact time you pick | When you set a reminder |
| Internet, vibration, flashlight | Downloads, ads, purchases and statistics; vibration and flash patterns | Not asked; Android allows them |
| Advertising ID | Ads and ad measurement (see 4.6) | Not asked; see your choices in 4.6 |
Call Screen doesn’t ask for your location, microphone, camera or text messages, and asks for files only on Android 8 and 9, as above. Quick replies open your messaging app, which sends the text.
4. What leaves your phone, and why
This is everything the app sends off your phone. None of it includes your contacts, your call history, or your photos and videos.
4.1 Usage statistics: Google Analytics for Firebase
- What is sent
- Events about how the app is used: for example, which screens you open, which looks you preview or use, which features you try, how you found the app (a shared link or a store search), which version of a test you see, and whether a purchase or an ad was completed, with what the ad earned. Each event comes with a random app-instance ID, your device model, Android version, app version, language, and your approximate country or region, which Google works out from your IP address. Your Android advertising ID is added only where your choices allow it: in the EEA, the UK and Switzerland, only if you agree in Google’s consent form; elsewhere, unless you have deleted it in your phone’s settings (see 4.6). Events never contain names, phone numbers, email addresses or anything you type: the app checks every event before it is sent.
- Why
- To see which features and looks people use, find problems, decide what to build next, measure how ads and purchases perform, and compare versions of a screen in tests.
- Your choice
- Me → Settings → Privacy & ads → Usage statistics. When it’s off, the app stops sending usage statistics and crash reports. In the EEA, the UK and Switzerland, Google Analytics runs in a restricted mode (Google’s consent mode) until you answer the consent form, and then follows your answer.
- How long
- Event data linked to the app-instance ID is kept for up to 14 months. Totals that identify no one, such as “how many people used the Depth caller this week”, can be kept longer.
4.2 Crash reports: Firebase Crashlytics
- What is sent
- When the app crashes or hits a serious error: the error and where in the app’s code it happened, a short log of what the app was doing, the app’s state at the time, your device model, Android version, app version, free memory and storage, and a Crashlytics installation ID.
- Why
- To find and fix crashes.
- Your choice
- The same Usage statistics switch turns crash reports off.
- How long
- 90 days, then Google deletes them.
4.3 Feature switches: Firebase Remote Config
- What is sent
- The app asks Firebase for its current settings, such as which features are on and how often ads may show. The request includes a Firebase installation ID, the app version, your Android version, and your phone’s language and region settings.
- Why
- To turn features on or off, fix problems quickly and run tests without an app update.
- Your choice
- The app needs these settings to work, so the Usage statistics switch doesn’t cover them.
- How long
- Google keeps the installation ID until it is deleted, and removes the related data within 180 days after that.
4.4 Purchases: RevenueCat and Google Play
- What is sent
- To RevenueCat: a random app user ID, created on your phone and not linked to your name, email address or phone number; what you bought and when, the price and currency, the Google Play order number and purchase token, trial and renewal status, your store country, the app version, your device type, and your IP address as part of each request.
- Why
- To unlock what you paid for, restore it on a new phone, show your plan and the date a trial ends, handle refunds and withdrawals, and prevent fraud.
- Payments
- Google Play takes all payments. We never see your card, bank or billing details. Google Play gives us order details (such as the order number, product, price, date and country) so we can handle refunds and withdrawals.
- Withdrawals
- Where the law of the country you live in gives you a right to withdraw from a purchase, you can do so within 14 days (terms of use, section 8). When you do, in the app or by email, we use the purchase details (the Google Play order number, product, date and price) and, if you write to us, your email address, to confirm the withdrawal and refund you through Google Play. We keep that record for as long as consumer and tax law require.
- How long
- While you have purchases in the app, so you can restore them, and afterwards as long as tax and consumer law require. You can ask us to delete your RevenueCat record at any time; if you still own a purchase, Restore purchases brings it back from Google Play.
4.5 Google Play
Google Play delivers the app and its updates, takes payments, handles refunds, and shows the in-app review and update prompts. When you install the app from a shared link, Google Play passes what the link carries to the app (the “install referrer”), so the app can open the shared look or name ringtone. We also receive statistics from Google Play that don’t identify you (installs, crashes, ratings), and the reviews you post publicly. Google’s privacy policy applies to Google Play.
4.6 Ads: AppLovin MAX, Google AdMob and other ad networks
The free version shows ads: in lists of looks and sounds, between some screens, and short videos you can choose to watch to unlock an item. Ads never appear on a call screen.
- What is sent
- Your Android advertising ID and similar device identifiers, device model, Android version, language, screen size, network type, your IP address (which gives an approximate location), the app’s name and version, your consent choices, and which ads were shown, tapped or watched to the end.
- Who receives it
- AppLovin MAX, a service of AppLovin, runs a quick auction for each ad. It works with Google AdMob and, at the time of writing, Meta Audience Network, Mintegral, Pangle, Unity Ads, Liftoff (Vungle) and DT Exchange. The ad networks that bid for an ad receive the data above; the winner shows the ad.
- Why
- To show ads that pay for the free version, count views and taps, keep the same ad from repeating too often, and prevent fraud. Ads are personalised only where your choices allow it.
- Your choices
-
- EEA, UK and Switzerland: before the first ad, Google’s consent form asks whether our ad partners may use your data for personalised ads and measurement. If you don’t consent, you get non-personalised ads, which still use limited data (such as your IP address and device information) to show an ad and prevent fraud. Change your answer at any time in Me → Settings → Privacy & ads → Privacy options.
- US states with privacy laws: turn on Do not sell or share my info in Me → Settings → Privacy & ads. We pass your choice to AppLovin and the ad networks, which then must not use your data for targeted advertising, and we tell Google Analytics not to use your data for advertising.
- Everywhere: you can reset or delete your advertising ID in your phone’s settings (look for Ads under Privacy, or under Google on older phones). VIP and Remove ads turn off the ads we show.
- How long
- Each ad partner keeps data under its own policy (links in section 6). We receive totals (how many ads were shown and what they earned) and, through our usage statistics, what each ad earned.
4.7 Downloads of looks and sounds: our content server
Looks, sounds, the catalogue of looks and help articles download from cdn.moonlanes.com, which runs on Cloudflare. Like any web server, it receives your IP address, the time, the file requested and basic details of the connection. This is used to deliver the files and to protect the service from abuse. We don’t keep these request logs ourselves; Cloudflare processes them briefly to run and secure the service.
4.8 Links and videos you share
When you share a look, the app makes a link to moonlanes.com. A link to one of our looks carries that look’s short name, such as galaxy-pop. A link to a look you made carries its parts, such as layout, buttons, effects and name style, and never photos or videos. Your first name is added only if you switch on Add my first name to the link.
When you send a name ringtone as a video, its link carries the name the ringtone says, such as Siobhan, so the app opens its name ringtone maker with that name. The video has the music and the name on screen, never the phone’s voice.
Anyone who has the link can see what is in it. When someone opens it and the app doesn’t open it directly, our website shows a page that explains the link and, on an Android phone, opens it in Call Screen or in Google Play (see our website privacy policy). If they then install the app from Google Play, what the link carries travels with the install so the app can open it. The name from a name ringtone link stays in the app and is never sent to our analytics.
Videos you export are saved on your phone, and you decide where to post them. They show a sample face unless you choose a real photo.
4.9 Google services on your phone
- ML Kit (cut-outs and face detection) runs on your phone, and your photos never leave it. ML Kit sends Google technical data about how it runs: device model, Android version, the app’s name and version, speed, errors and a per-installation ID. Google uses it to maintain and improve ML Kit (Google’s ML Kit data disclosure).
- Google’s consent form (User Messaging Platform) checks with Google, using your IP address, whether a consent form is needed where you are. It stores your answer on your phone and shares it with our ad partners.
- The photo picker and file picker are part of Android. The app only receives the items you pick.
4.10 Android backup
If backup is on in your phone’s settings, Android may copy what you made and chose in the app to your Google account: your looks and the people they’re for, people you picked, speed dial, block rules, name ringtones, the “looks shown” history and your settings. It never copies your photos, videos or cut-outs, or the app’s call history. You control this in Android settings, and Google handles it under its own terms. We can’t see it.
4.11 When you email us
- What we receive
- Your email address, your message and anything you attach. When you use Contact support in the app, it adds a short diagnostics block (app version, phone model, Android version, call mode and which permissions are on) that you can read and edit before sending. It never includes phone numbers or contact names.
- Why
- To answer you, fix problems, and handle purchases, refunds, withdrawals and privacy requests.
- Who handles it
- Email to our addresses arrives through Cloudflare Email Routing and is kept in a mailbox hosted by Google (Gmail). Our replies are sent through SMTP2GO.
- How long
- Up to 2 years after our last message, unless we need it longer to handle a legal claim or to meet a legal duty.
5. Legal bases
The GDPR only lets us use personal data when we have a legal basis for it. These are ours:
| Purpose | Legal basis |
|---|---|
| Showing your looks and running the features you use | Providing the app you asked for (contract, Art. 6(1)(b) GDPR) |
| Feature switches and downloads of looks | Contract (Art. 6(1)(b)), and our legitimate interest in running a reliable service (Art. 6(1)(f)) |
| Usage statistics and crash reports | Our legitimate interest in understanding and improving the app (Art. 6(1)(f)); in the EEA, the UK and Switzerland, your consent where it is needed to store or read identifiers on your phone (Art. 6(1)(a)) |
| Purchases, restoring them, trials and renewals | Contract (Art. 6(1)(b)) |
| Personalised ads and ad measurement in the EEA, the UK and Switzerland | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Non-personalised ads, limiting repeats, preventing fraud | Our legitimate interest in funding the free version and keeping it safe (Art. 6(1)(f)) |
| Answering your emails | Our legitimate interest in helping you (Art. 6(1)(f)); contract when it’s about a purchase |
| Withdrawals, refunds, privacy requests, tax and accounting | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have weighed them against your rights and expectations, and you can object at any time (section 9). Where the law requires consent to store or read information on your phone, we ask for it first.
Giving us data is up to you, and no law requires it. Some of it is needed for what you ask the app to do: without the Contacts permission, looks can’t show names and photos, and without purchase data, VIP can’t be unlocked or restored.
6. Who receives data
Service providers (“processors”) handle data only on our instructions, under data processing terms. Ad networks and Google Play also use data for their own purposes, as their own policies explain. When we add an ad network or another partner, we list it here before it receives any data.
| Recipient | What for | Privacy policy |
|---|---|---|
| Google (Google Ireland Limited, Google LLC) | Firebase Analytics, Crashlytics and Remote Config, as our processor | firebase.google.com/support/privacy |
| Google Play, ML Kit, the consent form, Android backup and our Gmail mailbox | policies.google.com/privacy | |
| RevenueCat, Inc. | Purchase and subscription status, as our processor | revenuecat.com/privacy |
| AppLovin (AppLovin MAX) | Choosing and measuring ads | legal.applovin.com/privacy |
| Google AdMob | Ads | policies.google.com/technologies/ads |
| Meta Audience Network | Ads | facebook.com/privacy/policy |
| Mintegral | Ads | mintegral.com/en/privacy |
| Pangle | Ads | pangleglobal.com/privacy |
| Unity Ads (Unity Technologies) | Ads | unity.com/legal |
| Liftoff (Vungle) | Ads | liftoff.ai/privacy-policy |
| DT Exchange (Digital Turbine) | Ads | digitalturbine.com/legal/privacy-policy |
| Cloudflare, Inc. | Our website, content server and email routing, as our processor | cloudflare.com/privacypolicy |
| SMTP2GO | Sending our email replies, as our processor | smtp2go.com/privacy |
We may also share data when the law requires it, to protect our rights or someone’s safety, or with a company that takes over the app, which would then have to follow this policy. We don’t sell personal data for money. Some US state laws call the use of advertising IDs for targeted ads a “sale” or “sharing”; see section 10.
7. International transfers
Several recipients are based in, or use servers in, the United States and other countries outside the European Economic Area. When data leaves the EEA, it is protected by one of these safeguards:
- the EU–US Data Privacy Framework, for recipients certified under it;
- the European Commission’s Standard Contractual Clauses, which are part of our partners’ data processing terms;
- an adequacy decision of the European Commission, for example for New Zealand, where SMTP2GO is based.
You can ask us for a copy of the safeguards at privacy@moonlanes.com.
8. How long data is kept
| Data | Where | How long |
|---|---|---|
| Your looks, settings, rules, and the photos, videos and sounds you added | Your phone | Until you delete them, use Delete my data or uninstall the app |
| “Looks shown” history (Lite mode) | Your phone | 30 days |
| Usage statistics | Google (Firebase) | Up to 14 months; sooner if you ask us to delete them |
| Crash reports | Google (Firebase) | 90 days |
| Firebase installation ID (feature switches) | Google (Firebase) | Until deleted, then removed within 180 days |
| Purchase records | RevenueCat | While you have purchases, then as long as tax and consumer law require |
| Ad data | AppLovin and the ad networks | Under each partner’s own policy |
| Content server request data | Cloudflare | Briefly, to deliver files and keep the service secure |
| Emails with us | Our mailbox | Up to 2 years after our last message |
9. Your choices and rights
In the app
Open Me → Settings → Privacy & ads:
- Usage statistics: turn usage statistics and crash reports off or on.
- Privacy options: change your ad consent (EEA, UK and Switzerland).
- Do not sell or share my info: opt out of targeted advertising (US states).
- Delete my data: erase everything the app stored on your phone and ask for the usage statistics linked to this phone’s app ID to be deleted. How deletion works.
You can also withdraw permissions, reset or delete your advertising ID and turn off backup in your phone’s settings, or uninstall the app.
Your rights under the GDPR
If you are in the EEA, the UK or Switzerland, you have the right to:
- access the personal data we hold about you and get a copy;
- correct data that is wrong;
- delete your data;
- restrict how we use it;
- port data you gave us, in a machine-readable format;
- object to uses based on legitimate interests, including usage statistics;
- withdraw consent at any time, as easily as you gave it, without affecting what happened before;
- complain to a data protection authority, in particular the one where you live, where you work or where you think the problem happened.
How to ask
Email privacy@moonlanes.com. Because Call Screen has no accounts, we can only find data if you give us something that links it to you: use Delete my data in the app, which sends this phone’s app ID with the request, or tell us your Google Play order number (it starts with GPA.) for anything about purchases. We may ask for more information to confirm a request is yours.
We answer within one month. If a request is complex, we may need up to two more months, and we will tell you why. Using your rights is free.
10. US state privacy rights
If you live in a US state with a consumer privacy law, such as California, Virginia, Colorado, Connecticut, Texas or Oregon, you also have these rights:
- Know what we collect and why. This policy describes it: identifiers (app-instance ID, advertising ID, IP address), commercial information (purchases), internet or other electronic network activity (app usage and ad interactions), approximate location (from your IP address), and the inferences ad networks may draw to personalise ads. We don’t collect sensitive personal information.
- Delete and correct your personal information.
- Opt out of the “sale” or “sharing” of personal information and of targeted advertising. Giving advertising IDs and app activity to ad networks for targeted ads can count as a sale or sharing. Turn on Do not sell or share my info in Me → Settings → Privacy & ads. We don’t knowingly sell or share the personal information of anyone under 16.
- Equal treatment: we won’t treat you differently for using your rights.
- Appeal: if we turn down a request, reply to our answer or email privacy@moonlanes.com with “Appeal” in the subject. We will answer within the time your state’s law sets.
An authorised agent can make a request for you if they show us your written permission.
11. Children
Call Screen is made for adults (18+) and isn’t directed to children. We don’t knowingly collect personal data from children. If you believe a child has used the app and data about them reached us or our partners, write to privacy@moonlanes.com and we will delete what we can.
12. Security
- Everything the app sends travels encrypted (HTTPS).
- Data on your phone stays in the app’s private storage, which other apps can’t read.
- We don’t run our own servers that store your data. Our partners protect it under their own security programmes, and we limit access to our partner accounts to what is needed to run the app.
- No system is perfect. If a breach puts your rights at risk, we will tell you and the authority as the law requires.
13. Automated decisions
We don’t make decisions about you based only on automated processing that have legal or similarly significant effects. Ad networks may use profiling to personalise ads, only as your choices allow (4.6). The order of looks and the suggestions in the app are worked out on your phone.
14. Changes to this policy
When the app or our partners change in a way that affects your data, we update this page and the date at the top. If a change is significant, we will also tell you in the app before it takes effect. You can ask us for earlier versions.
15. Contact
Privacy questions and requests: privacy@moonlanes.com. Everything else: support@moonlanes.com.
Full company details: legal notice.
See also: Terms of use · Delete your data · Privacy policy for our website