Last updated 13 November 2026 (reminders and attached files)

Privacy policy

Call My Agent is built so that we don't hold your personal records. This page explains, in plain language, what is stored, where, and for how long.

What stays on your phone

Everything Nova saves (your expenses, health numbers, tasks, people, events and the rest) is stored only in the app's private storage on your phone, encrypted with AES-256. The encryption key is created on your phone and kept in Android's secure key storage; we never have it. Other apps can't read your data, and it isn't copied to our servers or to cloud backups. You can also require your fingerprint or screen lock to open the app. If you delete the app, or use Settings › Delete everything on this phone, it's gone.

What our server keeps

• Your email address and Google account ID, to create your account and sign you in. You sign in with Google: Google confirms who you are and tells us only these two things. We never see your Google password, and we don't access your Gmail, contacts or anything else in your Google account.
• Your signed-in devices: a name such as “Android phone”, when it was last used, and a sign-in token stored only as a one-way hash.
• AI usage: for each request, the time, the AI model, the amount of text processed and its cost, so we can apply each account's monthly allowance. Never the content.

Sign-in tokens are stored only as one-way hashes. Usage records are deleted after 13 months.

Your conversations with Nova

To understand you and reply, Nova sends your messages, a short summary of your saved data, and its own instructions to an AI model. This goes through our server, which passes it on without storing or logging it. We use AI providers that don't keep it or train on it (zero data retention), through OpenRouter.

This part is not end-to-end encrypted: it's encrypted in transit, but the AI model has to read your words to answer them. If that's a concern, don't tell Nova anything you wouldn't want an AI provider to process. An option to run the AI on your own device is planned.

Your voice

During a call, your voice is turned into text by a speech model (Moonshine) that runs on your phone, and Nova's spoken replies are made by your phone's own text-to-speech. Your audio is never recorded to a file or sent to us or anyone else; only the resulting text goes to the AI, as described above. The speech model is downloaded once from callmyagent.in and checked against its fingerprint before use.

Reminders

Reminders, Nova's calls and the morning briefing are scheduled by your phone itself. The schedule is encrypted on the phone and nothing about it is sent to us. When Nova calls about a reminder, the phone must be unlocked before Nova says what it is.

Files you attach

Photos and PDFs you attach (bills, slips, policies, coupons and so on) are stored only in the app's private storage, encrypted with AES-256 using a key protected by Android's secure key storage. Their text is read on your phone by Google ML Kit's on-device text recognition, and the app works out what each one is (its type, issuer, dates, amount, expiry and any code) and files it on the phone too, without the AI. ML Kit doesn't send your images or their text anywhere, but it does send Google anonymous usage statistics (such as phone model, Android version, speed and error codes, with a per-install identifier that doesn't identify you); Google says it doesn't share these with third parties. A document's details reach the AI only when you ask Nova about your documents, in the same way as your messages, with card numbers, Aadhaar numbers and card security codes masked. For a file marked Keep private, the AI only ever sees its title. A file leaves your phone only if you choose Share.

This website

No cookies, analytics, ads or third-party fonts. Our hosting provider (Vercel) handles requests to deliver the pages and may keep standard server logs.

Deleting your data

• Data on your phone: Settings › Delete everything on this phone, or uninstall the app.
• Your account: Settings › Delete my account. This removes your email, Google account ID, devices and usage records from our server immediately. You can also remove Call My Agent's access in your Google Account settings, under Security › Third-party apps.

Changes

If we change how data is handled, we'll update this page and the date at the top, and tell you in the app before the change applies to you.