Privacy Policy
Recorded Calls · Updated October 10, 2026
Who we are
Recorded Calls is operated by Looty Group LLC under the HomeDrop name. This policy covers the Recorded Calls iPhone app and its calling service. Contact support@homedrop.io for privacy questions or data requests.
Accounts and contacts
We use your app-specific Sign in with Apple identifier to authenticate you. We store your chosen username, contact requests, accepted contacts, blocked contacts, and session credentials to operate your account. A display name may be shared with your call guest. Your username is visible to people who look it up or contact you. We do not read or upload your iPhone address book. Guests can use an invitation without creating an account.
Calls and connection data
Our service processes invitations, participant identifiers, call status, recording-consent messages and network connection information to connect calls and prevent abuse. Your IP address is processed when you connect. Audio and video travel over encrypted connections between participants, sometimes through a relay server. The service does not store call audio or video. Network addresses may be visible to the other participant as part of establishing a direct connection.
Recordings and device permissions
Camera and microphone access enable calls; they do not authorize recording. Recording requires both participants to agree, and either participant can stop it. Where recording is available, each participant’s iPhone saves its own local copy, including for guests. Recordings are not uploaded to our service. A frame preview and duration are visible before sign-in; an account and Plus subscription are required to play, save to Photos or share a recording. Test builds may also save diagnostic audio locally. Saving to Photos requires permission to add videos. Either participant with an account and Plus can export or share their copy, and we cannot retrieve, delete or control copies exported to Photos, other apps, recipients or their backups. Delete recordings in the app and delete exported copies separately.
Incoming calls and purchases
We store an Apple push notification token associated with your account to deliver incoming-call notifications through Apple. Notifications contain a call identifier, caller username and expiry time. Apple processes subscription payments. The app uses StoreKit transaction and entitlement information to check access to Plus; we do not receive your payment card details.
Providers and sharing
DigitalOcean hosts our calling backend and relay service. Apple provides sign-in, push notifications and App Store purchases. We disclose the information needed for these services and the information needed to connect you with the other participant. If you contact support, we process your message and contact details to respond. We may disclose information where required by law or to protect users and the service. We do not sell app data, use it for targeted advertising, or include advertising or behavioral analytics SDKs in the iPhone app.
Retention
Account profiles and contact relationships are kept until removed or the account is deleted. Expired invitation and direct-call records are ordinarily removed after a one-day grace period. Access sessions expire after 15 minutes; refresh sessions expire after 30 days unless renewed. Push device registrations expire after 90 days without an update. Recordings stay on your device until you delete them or remove the app. Support correspondence is retained as needed to resolve your request and meet applicable obligations.
Your choices and deletion
Private contact names and favorites are stored for your account and are not shown to the other contact. You can change your automatically assigned unique username, remove or block contacts, revoke camera, microphone and Photos permissions in iOS Settings, and manage subscriptions in your Apple Account. Request account deletion in the app under Settings → Delete account, or contact support@homedrop.io if that option is unavailable. We verify account ownership before acting on requests. Deletion removes account and contact records and ends associated sessions; recordings on your device and exported copies must be deleted separately. Deleting your account or app does not cancel an Apple subscription. Depending on your location, you may have rights to access, correct, delete or receive a copy of your personal information, or complain to your data protection authority.
Security and international processing
We use encrypted connections, restricted server access and iOS storage protections. No system can guarantee absolute security. Our calling infrastructure is hosted in the United States; provider services may process data in other countries. We process information to provide the requested service, maintain security, respond to support requests and meet legal obligations; where required, we rely on your consent for optional access or processing.
Website and policy changes
The HomeDrop website is hosted by Vercel and uses Google Analytics, separately from the iPhone app. See the HomeDrop website privacy policy for website practices. We may update this policy as the service changes and will update its date. Material changes will be communicated where required.