Privacy
Everything that leaves your devices.
Callyou has no accounts, shows no ads, and collects nothing about how you use it. Calls are encrypted end to end. This page lists what does leave your devices, who sees it, and for how long.
Last updated 19 October 2026
In short
- No account, no phone number, no email address.
- No ads, no analytics, no crash reports, and no trackers, in the apps and on this website.
- Calls are encrypted end to end: only the two devices on a call can see or hear it.
- Who you paired and when you called stays on your own devices.
- A few servers help calls along. They see device keys and internet addresses, never a name and never a call.
What stays on your devices
Callyou keeps these on the device itself, and nowhere else:
- The device's key. Its secret half never leaves the device, and Callyou keeps it out of a phone's backups.
- The devices you paired, with the names you gave them, their type, and settings such as the ringtone and auto-answer.
- Pairing requests you sent and received, and the devices you blocked.
- A history of calls and pairings.
- A short technical log for when something goes wrong. It never holds names, device keys, or anything said in a call, and it leaves the device only if you share it yourself.
Your phone's own backup, such as iCloud or Google's, may include the devices you paired and your history, but never the device's key. On an iPhone, calls also appear in the Phone app's Recents, with the device's name, like any other call.
What our servers see
Callyou runs two small servers of its own, in the Netherlands. Neither ever sees or hears a call, and neither learns a name.
The push service
A phone that's asleep can't hear a call arrive, so the push service wakes it. For each device that registers, it keeps the device's public key and its push address: the address Apple or a push service gave the phone to reach it. It keeps them until the device registers again or the push provider reports the address gone.
When a device asks it to wake another, it sees both devices' keys and the asking device's internet address. It uses them to check the request and deliver the wake-up, and keeps no record of the call. The web server in front of it keeps a standard log of each request, with the internet address and the time, for up to 90 days, to keep the service running and to stop abuse.
The relay server
When two devices can't reach each other directly, a relay server (a TURN server) passes the call along, still encrypted. Devices check in with it on most calls, even ones that end up going direct. It sees the internet addresses of the devices on a call, when, and how much data passes. The passwords it accepts are temporary and name no device. Its log, with internet addresses, is kept on the server for up to 7 days.
Watching over the servers
Our servers send health figures and warnings to a monitoring service, Grafana Cloud, in the European Union. The push service's own lines in it hold no device keys, push addresses, or internet addresses.
What others see
n0, for finding each other
To find each other across home networks, Callyou's devices use iroh, an open source networking library, and the public relays and address book that its makers, n0, run. These see each device's public key, its internet address, when it is online, and which devices connect to each other. Everything that passes through them is encrypted. Their servers stand in the United States, Europe, and Asia, and n0's own policies apply to them.
Apple, Google, and push services
Wake-ups travel through the phone's own push service:
- iPhone and iPad: through Apple. For a call, Apple's wake-up carries the calling device's public key, so Apple can see which device calls.
- Android: through the UnifiedPush app you chose, or through Google Play if you have none. The wake-up is encrypted so that only the phone can read it.
- The web app: through your browser's push service. The wake-up is encrypted for the browser alone.
Computers stay running to ring, so Callyou never wakes them through anyone.
This website
This website sets no cookies, counts no visitors, keeps no record of visits, and loads nothing from other websites.
Children
Callyou is made for families, and children use it. It asks nobody for personal details: there is no account, no profile, no age, and no email address. The only things our servers handle are the device keys, push addresses, and internet addresses this page describes, and only to deliver calls.
Your rights
We handle this data only to deliver your calls and keep the servers running. Under the European privacy law, the GDPR, you can ask what our servers hold about your device, have it corrected, or have it removed. Because Callyou doesn't know who you are, we can only find a device by its key. Write to us at hello@callyou.nl, and you can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Changes
When anything on this page changes, we update it and the date at the top. Callyou is open source, so you can always check what the apps and our servers really do in the source code.