Privacy Policy — Call Mom

Scope and eligibility

This Policy applies to the Call Mom mobile app, this website, and support or privacy communications. The initial app release is offered only through United States app storefronts and is intended only for people age 18 or older.

The operator is 자동화연구소 (Jadonglab), represented by 김동구, at 서울특별시 영등포구 당산로32길 9, 3층 303호 (당산동3가, 태경빌딩). Contact dkim@jadonglab.com for privacy questions.

The current mobile release stays local

The initial mobile release does not create an account, connect to a Call Mom app API, or upload app data to Jadonglab, AWS, an identity provider, or an AI provider.

Call Mom stores the parent phone number, exact birthdate, biological-sex selection, relationship or custom label, routine, reminder preferences, app-created dialer-open timestamps, and Journal entries only on the device. Each Journal entry contains its text, a link to one dialer-open event, and local creation and edit timestamps. A dialer-open timestamp does not confirm that a call was placed, answered, completed, or how long it lasted.

Local storage and device permissions

App state is encrypted locally. The app uses notification controls to schedule reminders on the device and may use the system contact picker to copy one selected phone number into local app state. The initial release does not register for remote push notifications. It does not upload contacts, health data, carrier call history, or recordings.

Apple or Google may provide operating-system device backup under your platform settings. That is not a Call Mom account or app backup, and Jadonglab cannot view or restore it.

Website, support, and external handoffs

Vercel delivers this public website and may process ordinary web-request data such as IP address, request path, browser information, time, response status, and security diagnostics. The website has no app-data upload form, account, checkout, advertising, or analytics SDK.

Emailing support shares your address, message, attachments, and volunteered details with Jadonglab's support mailbox provider, 다음 스마트워크, and other providers involved in delivering your email. Please do not send a parent's phone number, health information, Journal text, or other sensitive details. Native dialer, contact, notification, browser, and email handoffs operate under the device or provider's own controls.

Planned account and selected-data backup

Account and cloud features are not active in the initial release. A later version is planned to show Back up across devices before offering Google or Apple sign-in and a separate cloud-data consent screen. Refusing cloud collection will leave the free local app available, but account backup and paid AI features will be unavailable.

The planned app will use native Google and Apple sign-in SDKs. Jadonglab-managed Google and Apple accounts will authenticate the user, and Jadonglab-managed AWS Cognito and other AWS services in us-east-1 (Northern Virginia) will operate the Call Mom account and backup service. Google or Apple may receive the sign-in request and process standard authentication, device, and network information under their own policies.

The planned base-account allowlist is: verified email address, identity-provider type, provider user ID, Cognito user ID, policy and consent versions and timestamps, account timestamps, weekly check-in windows, reminder preferences, and app-created dialer-open event IDs and timestamps. Backup is planned as one versioned account snapshot; replacing or restoring a snapshot will not silently merge device records.

The base-account plan excludes the parent phone number, birthdate, biological-sex selection, relationship or custom label, contact-picker results, notification permission state, carrier call history, call outcome or duration, recordings, health data, and Journal text. Journal text would leave the device only under the separate AI Journal consent described below.

Planned providers include Google, Apple, and AWS. Their final contracting entity, transfer country, subprocessors, and operational retention terms will be confirmed and disclosed before account features are activated.

Retention, export, and deletion

App data remains on the device until you use Clear all local data, clear the app through operating-system controls, or uninstall it. The in-app action cancels app-owned reminders, destroys local encrypted state, and returns to onboarding.

You can review and edit active entries in the Journal tab. Deleting an entry removes its text and keeps only an encrypted local tombstone containing its entry ID, dialer-open association, original creation timestamp, and deletion timestamp until all local data is cleared.

The initial release has no Call Mom cloud copy, so Jadonglab cannot recover cleared, lost, or replaced device data. Website and support providers, including Vercel and 다음 스마트워크, apply their own operational retention.

Before account features launch, the app will provide account-data export, consent withdrawal, sign-out, and in-app account deletion. Withdrawing cloud consent will delete the server snapshot, mark cloud consent withdrawn, sign the user out, and leave free local data available. Backup access will remain blocked until the user explicitly accepts cloud consent again. The account identity and consent record will become inactive and remain only so export, deletion, or explicit re-consent can complete; it will remain until account deletion. The current snapshot will remain until replacement, account deletion, or consent withdrawal. Active records will be removed immediately under a 24-hour operational target; API and Lambda operational logs will remain for 30 days, and point-in-time recovery and disaster-recovery copies for up to 35 days. Inactive accounts will not expire automatically until a separate policy is approved. Production tables retained during stack replacement or deletion use a documented manual destruction process. Any legally required exception will be disclosed before account features launch.

Your choices and US privacy rights

You can review or correct app data locally, edit or delete Journal entries, and clear all app data from the device. You may email us to request help or exercise an applicable US state privacy right relating to website or support information. We may verify your request and respond as required by law. Our support target is to respond within 30 days.

We do not sell personal information, use targeted advertising, or track you across apps or websites. Global Privacy Control and Do Not Track do not change app behavior because the app performs no cross-context tracking.

When accounts are introduced, signed-in users will be able to export or delete their Call Mom account and withdraw cloud consent through recently authenticated in-app controls. Support will provide a verified escalation path if those controls fail. Deleting local data alone will not delete a future server snapshot; withdrawing cloud consent will delete that snapshot and sign the user out. Account deletion is planned to revoke Sign in with Apple authorization, the Cognito refresh token, and Google authorization whenever the native provider flow supplies the required credential. If automatic revocation is technically unavailable, the app and support instructions will identify the applicable Google or Apple account control and will not report provider revocation as complete.

Planned AI Journal is a separate choice

AI Journal is a planned subscription, not an active feature. It will require login, an active subscription, AI-specific consent, and a successful automatic encrypted backup before Journal text or related context is sent for server-side processing.

The planned processor is Amazon Bedrock in AWS us-east-1, using Amazon Nova Lite. Approved inputs are the opted-in Journal text, its linked dialer-open timestamp, and user-selected reminder timing. Phone number, birthdate, biological sex, relationship or custom label, contact data, health content, carrier call data, recordings, and unrelated Journal entries are excluded. Generated outputs are editable next-call topics and notification suggestions.

Call Mom will not retain prompts or raw provider responses after generation, except encrypted job data for up to 24 hours. Saved generated topics remain in the encrypted account snapshot until deleted, AI consent is withdrawn, or the account is deleted. Raw Journal text must not appear in AI or provider logs. If the subscription is canceled or lapses, generation and automatic Journal backup stop, the free local Journal remains available, and remote AI Journal content remains downloadable for 30 days before deletion unless the subscription resumes. Encryption means protection in transit and at rest, not end-to-end encryption while the service must read opted-in text. Subscriptions will be sold only through Apple App Store or Google Play in-app purchase; this website will not accept payment.

Security and data minimization

We use authenticated encryption for app state, a separately protected device key, minimal permissions, a fail-closed JavaScript network policy, and no initial app-server connection. Planned cloud data will be protected in transit and at rest, access-controlled by account, and limited to the approved allowlist. No storage method is perfectly secure, so keep your device and operating system protected and contact us with concerns.

Contact and policy changes

Email dkim@jadonglab.com with the subject “Call Mom Privacy.” We may update this Policy as the app, providers, or law changes. Material new collection will be disclosed before activation and will request consent when appropriate. The planned sections describe the current design direction, not an active data collection practice or consent.