Privacy Policy

Last updated: 15 October 2026

Keeping phone numbers private is the whole point of ReachU. This policy explains what we collect and why. It is written to meet India's Digital Personal Data Protection Act, 2023.

What we collect

• Owners: your mobile number (stored encrypted), the tags you create, your consent record, and your plan status.
• People who contact an owner: the reason chosen, messages sent, and the time. For masked calls, the number is used only to connect the call and is never shown to the owner.
• Devices: a random browser identifier for message threads, and push-notification subscriptions if you turn alerts on.
• Payments: handled by Dodo Payments. We do not see or store your card details.

How we use it

• To relay calls and messages without revealing anyone's number.
• To send owners alerts, limit abuse, and let owners block unwanted contact.
• To manage your plan and billing.

We do not sell personal data or use it for advertising.

Who we share it with

Only service providers that run ReachU for us: Supabase (database and sign-in), Vercel (hosting), Exotel (call connection), Apple and Google push services (alerts), and Dodo Payments (payments).

How long we keep it

Contact history, messages and call records are deleted automatically after 90 days. Verified caller numbers are kept encrypted for at most 30 days. Account data is kept while your account is active.

Your rights

You can ask to see, correct or delete your data, or withdraw consent, by writing to pulamala1729@gmail.com. We respond within 30 days.

Data controller: Chandra Sekhar Pulamala, India.