Privacy

The short version

CallShot keeps the record of what you called and when. To do that it holds a small amount of information about you: how you signed in, an identifier for your account, a token to send you notifications if you turn them on, and what you do in the app. Your resolved calls are public by design; your open calls are private until they resolve.

We do not sell your data. We do not show ads. We do not track you across other apps or websites.

What we collect

Sign in with Apple. The name and email address Apple shares when you sign in. You can use Apple’s Hide My Email; we then receive a relay address. You can make your first call before signing in; an account is only needed to save your record.
An account identifier. A random user id created for you. Your calls, receipts and record are attached to it.
A device push token, only if you turn notifications on, so we can tell you when a market you follow is about to close or has resolved. Turn notifications off in iOS Settings and the token is discarded.
First-party analytics. Which screens are opened and which actions succeed or fail, linked to your user id so we can find and fix what is broken. This stays on our own servers; there is no third-party analytics or advertising SDK in the app.
Your public record. Your handle, the display name you choose, and every resolved call with its receipt: the market, your side, the price at lock, and the outcome. This is published at callshot.co/r/your-handle and appears in link previews when you share it.
A wallet address, if you link one. The public address only, to show “Wallet linked” on your record. We never hold keys or funds, and linking a wallet does not verify any trade or result.

What we do not collect

No phone number, contacts, photos, location, microphone or camera. No advertising identifier and no cross-app or cross-site tracking. No payment information: there is nothing to buy in the app.

How we use it

To run the app: keep your record, resolve your calls, mint receipts, send the notifications you asked for, and let people you share with see what you called. To keep the app working: find crashes and failures in our own analytics. Nothing else.

Public record pages

Resolved calls and receipts are public. Open calls are not shown anywhere until the market resolves. Record pages can be reported from the app; we remove content that breaks the terms.

Who else is involved

Apple handles sign in and push notifications under Apple’s privacy policy.
Microsoft Azure hosts our servers and database.
Polymarket. We read public market prices from Polymarket’s public data. Nothing about you is sent to Polymarket. CallShot is not affiliated with or endorsed by Polymarket.

There are no advertising networks, data brokers or analytics vendors in that list.

Deleting your account

Delete your account from inside the app. Deletion is immediate and permanent on our side: your user id, calls, receipts and analytics events are hard-deleted and your record page stops resolving. Backups age out shortly after. You can also email us to request deletion or a copy of what we hold.

Age

CallShot is for adults. You must be 18 or older to create an account, and we do not knowingly collect anything from anyone younger. If you think someone under 18 has an account, email us and we will remove it.

Changes

If this policy changes in a way that affects what we collect or who sees it, the effective date above changes with it and the app’s release notes will say so.

Contact

privacy@callshot.co

Draft for counsel review