Legal
Privacy Policy
Effective July 6, 2026 · Last updated July 11, 2026
Call Bear is a personal phone companion: a virtual agent that answers your phone calls on your behalf, takes messages, and rings you only when you allow it. This policy explains what information Call Bear handles, why, and the control you have over it. Call Bear is a service provided by Dostylo LLC ("Call Bear," "we," "us," or "our"). Call Bear is offered in the United States and is intended for adults 18 and older.
The short version
- Call Bear does not retain call transcripts or audio recordings by default. Those are off unless you turn them on.
- If your Call Bear takes a message for you, that message is saved for you to read.
- Your Call Bear recognizes expected callers by phone number only — never by voice or any biometric.
- We do not sell your personal information.
- You can change what is stored, or delete your account and its data, at any time.
Two kinds of people this policy covers
Users are people who sign up for Call Bear and set up a virtual agent for their own phone line. As a user, you decide how your Call Bear behaves and what it keeps.
Callers are people who call a user's Call Bear number. If you reached this page because a Call Bear answered your call: the user of that line directs how their Call Bear works, and this policy explains how we handle the limited information involved.
Information we handle
Information users provide
- Account and identity. When you sign in we use Firebase Authentication, which supports Sign in with Apple, Google, email, or your phone number. Depending on the method, this includes a user identifier and, where applicable, your email address.
- Your verified phone number. To activate a line, we verify a phone number you own. We keep it to reach you (for example, optional call forwarding) and, so your Call Bear can match expected callers privately, we also store it as a one-way hashed value rather than relying on the raw number.
- Your Call Bear's configuration. The name, voice, and personality you choose; expected-caller rules (which you key on a caller's phone number); and any answers you add for your Call Bear to share. This is your configuration — we treat it as your data, not as instructions that can rewrite how the service behaves.
- Billing. You manage your subscription in the app; payments are processed by our payment processor, Stripe. We store a Stripe customer identifier to manage your plan, and we never see or store your full card details — Stripe handles payment information directly.
- Devices and notifications. Push notification tokens for your devices so we can alert you (for example, when your Call Bear takes a message or asks you a question during a call).
- Support messages. If you email us, we keep that correspondence to help you.
Information from and about calls
- Caller ID. The phone number of an incoming call, used to route the call and to match any expected-caller rules the user set.
- Live call audio. While a call is in progress, the caller's speech is processed in real time so the AI can understand and respond. This real-time processing is how the service works.
- Messages. If your Call Bear takes a message, we save the caller's name (if given), a callback number, and a summary of the message, so you can read it later.
- Consent choices. When recording or transcription is enabled on a line, we keep a minimal record of whether the caller consented.
- Transcripts and recordings — only if the user enables them. Text transcripts and audio recordings of calls are off by default. They exist only when a user turns them on for their line.
We recognize callers by phone number only. Call Bear does not create voiceprints and does not use voice, face, or any other biometric identifier to recognize anyone.
Information collected automatically
Like most online services, our website and servers record basic technical information — such as IP address, timestamps, and request details — to keep the service secure and reliable. Our marketing website does not run third-party advertising or cross-site tracking.
How calls work, and recording & consent
Call Bear is an assistance and accessibility tool. It is built to help people who find phone calls difficult — or who cannot speak at all — hold clear, well-spoken conversations. It is not built to trick anyone. Your Call Bear proactively identifies itself as an AI on every call.
Transcription and audio recording are off unless a user turns them on. When a line has recording or transcription enabled, the Call Bear gives a clear notice at the start of the call — that it is an automated AI system and that the call may be recorded or transcribed — and asks the caller. We apply an all-party-consent standard nationwide. If a caller declines, the call is handled ephemerally: no transcript or recording is kept for that call, though your Call Bear can still take a message for you.
How we use information
- To operate your Call Bear — answer calls, follow your rules, take messages, and (if you enable it) forward calls to you.
- To notify you about your line and deliver messages and questions from your Call Bear.
- To provide billing and manage your subscription.
- To keep the service secure, prevent abuse, and enforce our terms.
- To provide support and to comply with legal obligations.
We do not sell your personal information. We improve Call Bear using direct customer feedback and our own hands-on testing of our own Call Bears.
AI infrastructure and service providers
Call Bear runs on trusted infrastructure, and we share information with a small set of providers only as needed to run the service:
- Google Cloud. Call Bear's telephony and conversational AI run on Google Cloud (including its Customer Engagement Suite and Gemini models), and our database, storage, hosting, and push delivery are on Google Cloud and Firebase. Because the AI has to understand and respond to a live call, call audio is processed by this infrastructure to make the service work. This processing is governed by Google's enterprise terms.
- Stripe. Processes payments and manages subscriptions. Stripe handles your payment details directly under its own privacy policy.
- Apple. If you use Sign in with Apple, and for delivering push notifications to Apple devices.
These providers act on our behalf to deliver the service and are not permitted to use your information for their own unrelated purposes. We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer.
Retention and security
- Messages are automatically deleted about 90 days after they're taken. You can delete any message sooner in the app.
- Transcripts and recordings, when you enable them, are retained for a limited window (about 90 days by default) and can be cleared.
- Consent records are kept as minimal evidence; where a caller's number is referenced it is stored as a one-way hash, not as a raw phone number.
- Configuration and account data are kept while your account is active.
When you delete your account, everything above is deleted immediately, and exactly three minimal records are retained — each for a specific legal reason and each deleted automatically when its period ends: basic billing links (Stripe customer/subscription IDs, amounts, dates — card numbers never touch our servers) for 7 years under tax and accounting record-keeping requirements; consent and agreement evidence — a recording-consent answer (with a hashed caller ID) and, if you subscribed, a minimal record that you agreed to our terms and the price you accepted (terms version, plan, and amount — never card details and never call content) — for about 4 years and 3 months, matching the window in which a claim about a call or a charge could be raised; and a minimal deletion receipt (hashed account identifier and dates) for 25 months, as privacy regulations expect proof a deletion happened and stays honored. Server logs age out within 30 days, and we keep no long-term database backups. See deleting your account for the full picture.
We protect information with encryption in transit and at rest (managed by our cloud infrastructure), access controls, and least-privilege practices, and we design the system so that the data your Call Bear consumes cannot be used to hijack its behavior. Please read this honestly: we work hard to keep your data private and access-limited, but no online service can promise perfect security, and Call Bear does not currently offer end-to-end encryption or claim that our personnel can never access stored content. We will keep improving these protections and will describe them accurately as they evolve.
Your choices and controls
- Privacy toggles. Turn text transcripts, audio recordings, and call forwarding on or off at any time in the app, and reverse those choices whenever you like.
- Messages. Read and delete the messages your Call Bear takes.
- Pause. Stop your line from taking calls whenever you want.
- Notifications. Manage push notifications from your device settings.
- Delete your account. You can delete your account and its data from within the app. See deleting your account for exactly what happens.
California privacy rights
This section applies to California residents under the California Consumer Privacy Act, as amended (CCPA/CPRA). In the past 12 months we have collected these categories of personal information to operate Call Bear:
- Identifiers — such as account identifiers, email address, and phone numbers (users and, via caller ID, callers).
- Commercial information — subscription and billing status (payment details are held by Stripe).
- Internet/network activity — technical logs for security and reliability.
- Audio and electronic information — the contents of calls your Call Bear handles, including messages, and — only if enabled — transcripts and recordings.
- Sensitive personal information — account log-in credentials and the contents of communications your Call Bear handles. We use this only to provide the service you asked for, not to infer characteristics about you.
We collect this information from you, from your devices, and from incoming calls, and we use it for the business purposes described above. We disclose it to the service providers listed above to run the service. We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Subject to legal limits, you have the right to know and access the personal information we hold about you, to request its deletion, to correct it, to opt out of any sale or sharing (we do neither), to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. To make a request, email support@call-bear.com; we will verify your request and respond within the timelines required by law. You may use an authorized agent. Callers may also exercise these rights with respect to information from their calls.
Children
Call Bear is intended for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, please contact us so we can remove it.
Changes to this policy, and how to reach us
We may update this policy as Call Bear evolves. When we make material changes we will update the date above and, where appropriate, let you know in the app or on our site. Questions or requests? Email support@call-bear.com.