Privacy Policy

Effective Date: January 1, 2026  ·  Last Updated: March 31, 2026

Niobium LLC ("we," "our," or "us") operates CloakID, a privacy-first phone identity management platform. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our services.

Information We Collect

Information You Provide

• Account Information: Your name, email address, phone number, and password when you create an account. Your phone number is stored encrypted and is the primary identifier for your account.
• Profile Information: Professional details and preferences you add to your personas, including persona names and AI context descriptions.
• Contacts: Phone numbers and names of contacts you add within the app for caller management purposes.
• Communications: Messages and feedback you send to our support team.

Information We Automatically Collect

• Usage Data: Features used, personas created, call outcomes (allowed, blocked, sent to voicemail), and interaction patterns within the app.
• Device Information: Device type, operating system, and a device-level identifier (push notification token) used to deliver push notifications to your device.
• User ID: An internal identifier linked to your account, used to authenticate and personalize your experience.
• Purchase History: Your subscription plan, billing status, and subscription provider (Apple, Google, or Stripe). We do not store payment card numbers or bank account details — payment processing is handled entirely by Apple, Google, or Stripe outside our app.
• Log Data: IP address, access times, and API request logs for security and troubleshooting purposes.

Call and Voicemail Data

When you receive calls through CloakID:

• Caller phone numbers are collected, logged, and associated with your account to provide call history and screening decisions.
• Caller audio during the screening phase of an inbound call is streamed in real time to Deepgram, Inc. for speech-to-text transcription. This transcription is used to make a call screening decision. The audio stream itself is not stored by CloakID.
• Call transcripts generated during screening are sent to OpenAI (GPT-4) to determine whether to allow, block, or send a call to voicemail. Transcripts are processed in real time and are not stored in your account after the call ends.
• Voicemail recordings left by callers are downloaded from our telephony provider, encrypted, and stored securely on Amazon Web Services (AWS) S3. Voicemail transcriptions are also encrypted and stored so you can read them in the app. You can delete voicemails at any time.
• Call metadata — including timestamps, duration, and screening decisions — is stored and linked to your account.

Device Contacts

With your explicit permission, CloakID can write your virtual phone numbers into your device's native Contacts app. This allows your persona numbers to appear in iOS Focus filters and other device features. CloakID reads your device contacts only to check whether a persona number has already been saved, to avoid duplicates. Your device contacts are never uploaded to our servers.

Biometric Data

When you enable biometric authentication (Face ID / Touch ID), biometric identifiers are stored securely on your device using iOS Keychain or Android Keystore. This data is never transmitted to our servers and is automatically invalidated if you change your device's biometric enrollment.

Diagnostics and Crash Reporting

We use Sentry to collect crash reports and performance data when the app encounters errors. This data may include your user ID, device information, and details about what the app was doing when the error occurred. This information is used solely to identify and fix bugs and improve app stability.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the CloakID platform
• Screen incoming calls and make routing decisions (allow, block, voicemail)
• Store and transcribe voicemails for your review
• Deliver push notifications about calls, voicemails, and account activity
• Process transactions and manage your subscription
• Send service updates and important account notifications
• Provide customer support and respond to inquiries
• Detect and prevent fraud and spam
• Identify and fix bugs and improve app performance
• Comply with legal obligations

Third-Party Service Providers

We share data with the following third-party providers solely to operate the CloakID service. These providers are not permitted to use your data for their own marketing or advertising purposes.

• Telnyx: Our telephony provider. Phone numbers, call routing, SMS delivery, and voicemail recording are handled by Telnyx. Caller phone numbers and call metadata are transmitted to Telnyx as part of normal call processing.
• Deepgram, Inc.: Caller audio during call screening is streamed to Deepgram for real-time speech-to-text transcription. Audio is not stored by Deepgram beyond the active call session under our agreement.
• OpenAI: Call screening transcripts are sent to OpenAI's GPT-4 API to generate a screening decision. No personally identifiable information beyond the transcript and your persona's context description is included.
• Amazon Web Services (AWS): Encrypted voicemail recordings and transcripts are stored in AWS S3.
• Firebase (Google): We use Firebase Cloud Messaging (FCM) to deliver push notifications to your device. Your device's push notification token is shared with Google/Firebase for this purpose.
• Sentry: Crash reports and performance data are sent to Sentry for error monitoring and app stability. This data may include your user ID and device context.
• Apple / Google / Stripe: Subscription and billing verification. We receive confirmation of your purchase but never your payment card details.
• IPQualityScore / Twilio: Used at account registration to validate your phone number. Caller phone numbers may also be looked up via Telnyx's Number Lookup service during call screening to detect spam or VOIP numbers.

Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We do not share your data with advertising networks or data brokers. We may share your information only in these circumstances:

• Service Providers: As described above, with providers who help us operate CloakID (telephony, transcription, AI screening, cloud storage, push notifications, error monitoring, and billing).
• Legal Requirements: When required by law, court order, or to protect the rights, property, or safety of Niobium LLC, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of assets. You will be notified of any such change.
• With Your Consent: When you explicitly agree to sharing in any other circumstance.

Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of phone numbers and voicemail data at rest (Fernet encryption)
• Encryption of all data in transit (TLS)
• Voicemail recordings stored encrypted in AWS S3
• Regular security audits and vulnerability assessments
• Access controls and multi-factor authentication for internal systems

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Update: Correct inaccurate or incomplete information in your profile
• Delete: Request deletion of your account and associated data. You can delete your account directly in the app under Profile settings.
• Port: Receive your data in a portable format
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at privacy@cloakid.app.

Data Retention

We retain your information for as long as your account is active or as needed to provide services. Voicemail recordings are retained until you delete them. Call logs are retained for account history purposes. After account deletion, we may retain certain information as required by law or for legitimate business purposes, after which it is permanently deleted.

Children's Privacy

CloakID is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have inadvertently collected information from a minor, please contact us at privacy@cloakid.app.

International Data Transfers

Your information is processed and stored in the United States (AWS us-east-2). By using CloakID, you consent to the transfer of your information to the United States. We ensure appropriate safeguards are in place for any international transfers.

California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. For more information or to exercise your rights, contact us at privacy@cloakid.app.

Cookie Policy

Our website uses cookies and similar technologies to enhance your experience and analyze usage. You can manage cookie preferences through your browser settings. The CloakID mobile app does not use browser cookies.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the app. Continued use of CloakID after changes take effect constitutes acceptance of the updated policy.

Contact Information

For questions about this Privacy Policy or our privacy practices, contact us at: