Privacy Policy

1. Information We Collect

We collect only the minimum data strictly necessary to provide reliable calling, deliver incoming call notifications, and prevent abuse:

• Anonymous Identifier (Peer ID): A randomly generated identifier created on your device upon initial installation. No real name, phone number, or email address is linked to this ID.
• Push Notification Tokens: Device tokens issued by Apple Push Notification service (APNs) used solely to wake your device and alert you of incoming calls while the app is in the background or screen is locked.
• Diagnostic & Connection Logs: IP addresses and technical metadata (such as packet loss rate, jitter, and connection timestamps) needed to establish WebRTC/STUN/TURN sessions and analyze call quality.
• Protection of Private Information (Zero Server Retention): Contacts (address book), call history, and SIP/PBX configuration settings are stored exclusively on your device and are never transmitted to or collected by our servers.

2. How We Use Information

Collected data is used solely for legitimate operational purposes:

• Establishing peer-to-peer WebRTC signaling and call connections.
• Delivering incoming call push notifications via Apple APNs / CallKit integration.
• Detecting network issues, balancing server loads, and improving transmission quality.
• Investigating and preventing malicious network attacks or service disruption.
• Responding to inquiries submitted to customer support.

3. Protection of Communications, Calls & Message Handling

We enforce strict security and privacy measures to ensure you can communicate with complete peace of mind:

• Protection of All Communications: All communications are protected by encryption (TLS/WSS).
• Call Encryption: Calls (audio/video) are protected by encryption (DTLS-SRTP) upon direct device-to-device connection. Audio/video calls are never recorded or stored on our servers.
• Message Handling: Chat messages are not end-to-end encrypted (E2EE), but are immediately erased from the server once delivery to the recipient is complete (temporary retention for up to 7 days when offline).
• Media Relays (TURN / SFU): In network environments where direct P2P connection is unreachable or during group calls, media packets passing through relay servers are forwarded purely in memory and are never persisted or stored on disk.

4. Device Permissions

To enable calling functionality, Tsuwa requests access to specific iOS device capabilities. You may adjust or revoke these permissions at any time via iOS Settings > Tsuwa:

• Microphone: Essential for transmitting your voice during audio and video calls. The microphone is accessed strictly during an active call session.
• Camera (Optional): Required only when enabling video transmission during a video call. You can switch between front/rear cameras or turn off video at any time during a call.
• Notifications: Used to ring and display incoming call banners when the app is running in the background or locked.

5. Third-Party Services & Infrastructure

We partner with trusted global infrastructure providers to deliver reliable services:

• Apple Inc. (Apple Push Notification service / APNs): Utilized for routing incoming call wake-up notifications to iOS devices.
• Cloudflare Calls: Utilized as an Anycast edge-managed SFU/TURN relay infrastructure for resilient media transmission.

We do not sell, rent, or trade your personal data to advertisers or third-party marketing companies.

6. Account Security & Encrypted Backup

• Account Security (One Account per Device): To prevent impersonation and eavesdropping, a single account cannot be used simultaneously across multiple devices. Logging in on another device will automatically log you out of the previous device.
• Important Data Backup: Settings and data on your device can be safely saved and migrated as an encrypted backup file protected by your own password.

7. Data Retention & Account / Data Deletion (User Rights)

We believe users should have complete control over their data:

• Chat Messages: Immediately erased from our servers once delivery to the recipient is complete (retained temporarily for up to 7 days when offline, then automatically erased).
• Transient Diagnostic Logs: Technical connection metadata is automatically purged within 30 days.
• In-App Data Deletion & Reset: You can delete all local data, settings, and regenerate your Peer ID at any time by navigating to Settings > Reset Account & Delete Data inside the Tsuwa app.
• Uninstalling the App: Deleting the Tsuwa app from your iOS device immediately and permanently deletes all locally stored data.
• Server-side Data Deletion Requests: If you wish to request the manual deletion of associated server logs or push notification tokens, you may contact our privacy team at support@tsuwa.kicensa.uk, and we will fulfill your request promptly.

8. Children's Privacy

Our service is not directed at children under the age of 13. If you are under 18 years of age, please obtain permission from a parent or legal guardian before using the Service.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or service enhancements. Material changes will be prominently announced on our website or within the app.

10. Contact Us

If you have any questions, comments, or data deletion requests regarding this Privacy Policy, please contact our support team: