Privacy Policy

This Privacy Policy explains how Otro ("we," "us," "our") collects, uses, shares, and protects information when you use the Otro mobile application (the "App"). By using the App, you agree to the collection and use of information as described here. If you do not agree, please do not use the App.

1. Information We Collect

We collect the following categories of information: (a) Account information — a unique account identifier generated when you first use the App, and, if you choose to link Sign in with Apple, the identifier and relay email Apple provides us (we do not receive your real Apple ID email unless you choose to share it), and your name if Apple shares it with us, which happens only on the first authorization of your Apple ID with the App; (b) Phone and communications data — the Otro Number(s) assigned to you, the phone numbers you call or message, timestamps, call duration, message delivery status, and, where necessary to provide the Service, the content of text messages you send and receive, so they can be delivered and displayed to you in your conversation history; (c) Device and technical data — device identifiers, push notification tokens, app version, and general diagnostic and crash data; (d) Purchase data — subscription and credit-purchase status and history, processed by Apple and our subscription-management provider; we do not receive or store your payment card details; (e) Support communications — information you provide when you contact support@getotro.app.

2. How We Use Information

We use the information above to: provide, operate, and maintain the App and Otro Numbers; process subscriptions and credit purchases; route and deliver your calls and messages; detect, prevent, and investigate fraud, spam, and abuse, including automated screening of outbound message content against known scam and phishing patterns, and, where enabled, an AI-based classifier described in Section 3; respond to support requests; send you service-related notifications, such as delivery confirmations or missed-call alerts, and, if you agree, other communications; comply with legal obligations; and improve and troubleshoot the App, including through aggregated or de-identified usage analytics.

3. Message and Call Content

Because Otro's core function is delivering your calls and text messages, message text and call metadata are processed and stored so we can deliver them and display your conversation history back to you in the App. Outbound messages are automatically screened before sending for prohibited content, such as spam, phishing, and scam patterns, using keyword rules and, where configured, a third-party AI text-classification service; only the message is sent to that classifier for the purpose of a send/block decision, and a hashed, not plain-text, record of screened messages is retained for our moderation log. We do not read your messages for advertising purposes and we do not sell message content. Deleting a conversation in the App removes it from your device view; you can permanently delete your account and its associated data as described in Section 8.

4. Third-Party Service Providers

We share information with service providers who perform functions on our behalf, under confidentiality and data-protection obligations, including: telecommunications infrastructure providers that route and deliver your calls and SMS/MMS; Apple, for authentication (Sign in with Apple) and processing subscriptions and in-app purchases; a subscription-management platform that reconciles purchases with Apple and notifies us of subscription status changes; error-monitoring and crash-reporting tooling to help us find and fix bugs; and our cloud hosting infrastructure, which stores the App's data. Each of these providers only receives the information necessary to perform its function and is not authorized to use it for their own independent purposes.

5. Data Sharing and Disclosure

We do not sell your personal information. We may disclose information: to comply with a valid legal process, such as a subpoena or court order, or to respond to a good-faith request from law enforcement; to protect the rights, property, or safety of Otro, our users, or the public, including enforcing our Terms of Use and preventing fraud or abuse of our telecommunications partners' networks; in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections; and with your consent.

6. Data Retention

We retain account, communications, and billing information for as long as your account is active and as needed to provide the Service, resolve disputes, enforce our agreements, and comply with legal, tax, and regulatory obligations. When you delete your account, we release your Otro Number(s), delete your profile and associated personal data, and anonymize or delete your communications records, except where we are permitted or required to retain limited records, for example fraud-prevention or financial records, for a further period as required by law.

7. Your Rights and Choices

You can access and control much of your information directly in the App: view your numbers, conversations, and purchase history in Settings; adjust notification preferences; and permanently delete your account at any time from Settings, which is irreversible and removes your profile and releases your numbers. Depending on where you live, you may have additional rights under applicable law, such as the EU/UK GDPR or U.S. state privacy laws, including the right to request access to, correction of, deletion of, or a copy of your personal information, and the right to object to or restrict certain processing. To exercise these rights, contact support@getotro.app; we will respond within the time required by applicable law. We do not sell personal information and have no "Do Not Sell" mechanism to offer because none applies.

8. Account Deletion

You may delete your account at any time from Settings → Delete Account within the App. This action is immediate and irreversible: it releases any Otro Number(s) you hold back into our carrier's inventory, revokes your active sessions, and anonymizes or deletes your profile and personal data from our systems, subject to the limited retention described in Section 6.

9. Children's Privacy

Otro is not directed to children and is not intended for use by children under the age of 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under the applicable minimum age, we will take steps to delete it.

10. International Data Transfers

We and our service providers may process and store information in countries other than your own, including the United States and countries within the European Union, which may have data protection laws different from those in your jurisdiction. Where required by applicable law, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

11. Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption of data in transit and access controls limiting who can view sensitive data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Push Notifications

If you enable notifications, we store a device push token to deliver call and message alerts through Apple's Push Notification service. You can disable notification categories at any time in Settings within the App or in your device's system settings.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy in the App and updating the "Last updated" date shown alongside it.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your information, contact us at support@getotro.app.