Privacy & Data Processing

Updated October 15, 2026

Operator and contact

CallerIndex is operated by 华慧健（天津）科技有限公司. To access, correct, export, or delete personal data, use Privacy & Data in the app or contact service@h2me.tech.

Data and purposes

CallerIndex processes phone-number reports, categories, handling choices, and a random device identifier to save your reports, synchronize caller identification and blocking lists, and support recovery on a new device. The device also provides the app language, region setting, app and OS versions, and device model for service-region compatibility, diagnostics, and aggregate operations statistics; this does not include real-time location. Private contacts are used only for your own management, cross-device recovery, and caller-name identification that you choose to enable.

You may create a recovery account without a phone number or email address. When you choose Sign in with Apple, the server stores only a one-way digest of Apple’s stable user identifier. Apple-provided names and email addresses are not used as account keys.

Security

Data is transmitted over HTTPS. Phone numbers, labels, and contacts are encrypted at rest with AES-256-GCM. Only one-way digests of device and account secrets are stored. Administrative tools do not show phone numbers or contact contents by default.

Report retention and deletion

Phone-number reports are retained as long-term public-interest signals. When you delete a report or account, the server immediately removes its association with your account and devices while retaining the report content and original time in a form that can no longer be linked to you.

Contacts

Contacts are private user data and synchronize only within the same recovery account. When you delete a contact or account, contact contents are deleted from the server. A deletion marker is retained only to prevent an older device from restoring deleted data.

Device permissions

Camera and photo-library access are used only when you choose to scan information, with text recognition performed on the device. Contacts access is used only when you choose to save to iPhone Contacts. Location is used only to determine a city when you request nearby public services. iOS controls these permissions, and you can revoke them in Settings.

App isolation

This app uses a separate domain and data namespace. Business records and device credentials are not shared with other H2Me apps.

Server region and international transfers

Online services are hosted in Hong Kong SAR, China. When you use reporting, synchronization, or recovery outside Hong Kong, related data is transmitted over an encrypted connection to Hong Kong for processing and storage. Disabling online synchronization does not automatically delete existing data; delete it in the app or contact support.