Privacy Policy

1. Who we are

Vahti ("we", "us", "our") is a call screening service operated from Finland. This policy explains how we collect, use, and protect your personal data when you use our mobile application and web dashboard at vahti.co.

2. Data we collect

We collect the following data to provide the Vahti service:

Account data: Email address, name, and payment information when you create an account.

Contact list: Phone numbers and names from your device contacts. These are synced to our servers to identify known callers. We store only names and phone numbers — no photos, addresses, or other contact fields.

Call data: For each call screened by Vahti, we store the caller's phone number, call duration, an AI-generated summary, and an AI-generated transcript. We do not record or store the raw audio of calls.

Device data: Push notification tokens, device platform (iOS/Android), and app version for delivering notifications.

Usage data: Basic analytics about how you use the app, including screen views and feature usage.

3. How we use your data

We use your data to:

• Provide call screening: identify callers, route calls, generate summaries

• Send push notifications when a call has been screened

• Display call logs and summaries in the app and dashboard

• Improve our AI models and service quality

• Communicate with you about your account and service updates

4. Third-party services

We use the following third-party services to operate Vahti:

Telnyx — Telephony provider for receiving and routing calls. Subject to Telnyx Privacy Policy.

Vapi — AI voice agent platform for conducting call screening conversations. Subject to Vapi Privacy Policy.

OpenAI — AI language model used to extract structured information from call transcripts. Subject to OpenAI Privacy Policy.

Supabase — Database and authentication provider. Data is stored in EU data centers. Subject to Supabase Privacy Policy.

Expo — Mobile app infrastructure and push notification delivery. Subject to Expo Privacy Policy.

5. Data retention

Call logs and transcripts are stored for 90 days, after which they are automatically deleted. Contact data is retained as long as your account is active. Account data is deleted within 30 days of account closure upon request.

6. Data security

All data is encrypted in transit (TLS) and at rest. Access to personal data is restricted to authorized personnel only. Our database infrastructure is hosted within the EU.

7. Your rights (GDPR)

As a user in the EU/EEA, you have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion of your data

• Export your data in a portable format

• Restrict or object to processing

To exercise any of these rights, contact us at hello@vahti.co.

8. SMS and text messages

Vahti only forwards voice calls. Text messages, SMS verification codes (2FA), and other non-voice communications are never intercepted, forwarded, or accessed by Vahti in any way.

9. Children's privacy

Vahti is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact

For questions about this privacy policy or your data, contact us at hello@vahti.co.