Privacy Policy

1. Information We Collect

We collect only the minimum data strictly necessary to provide reliable calling, deliver incoming call notifications, and prevent abuse:

• Anonymous Identifier (Peer ID): A randomly generated identifier created on your device upon initial installation. No real name, phone number, or email address is linked to this ID.
• Push Notification Tokens: Device tokens issued by Apple Push Notification service (APNs) used solely to wake your device and alert you of incoming calls while the app is in the background or screen is locked.
• Diagnostic & Connection Logs: IP addresses and technical metadata (such as packet loss rate, jitter, and connection timestamps) needed to establish WebRTC/STUN/TURN sessions and analyze call quality.
• SIP Credentials (Optional): If you configure an external SIP account (Bring Your Own Account), authentication credentials are stored exclusively within your device's secure enclave (iOS Keychain) and are never transmitted to or saved on our central servers.

2. How We Use Information

Collected data is used solely for legitimate operational purposes:

• Establishing peer-to-peer WebRTC signaling and call connections.
• Delivering incoming call push notifications via Apple APNs / CallKit integration.
• Detecting network issues, balancing server loads, and improving transmission quality.
• Investigating and preventing malicious network attacks or service disruption.
• Responding to inquiries submitted to customer support.

3. Voice, Video & Media Data Security (End-to-End Encryption)

Your audio and video conversations are protected with the highest standards of communication security:

• End-to-End Encryption: 1-on-1 calls utilize direct WebRTC transmission secured by DTLS (Datagram Transport Layer Security) and SRTP (Secure Real-time Transport Protocol). Media packets are encrypted directly between participating devices.
• Zero Server Recording: We do not listen to, record, analyze, transcribe, or store audio/video conversations on our servers under any circumstances.
• Media Relays (TURN / SFU): In network environments where direct P2P connection is unreachable (e.g. strict symmetric NATs) or during group calls, media packets may pass through relay servers. These servers solely forward encrypted packets in memory without writing or persisting call data to disk.

4. Device Permissions

To enable calling functionality, Tsuwa requests access to specific iOS device capabilities. You may adjust or revoke these permissions at any time via iOS Settings > Tsuwa:

• Microphone: Essential for transmitting your voice during audio and video calls. The microphone is accessed strictly during an active call session.
• Camera (Optional): Required only when enabling video transmission during a video call.
• Notifications: Used to ring and display incoming call banners when the app is running in the background or locked.

5. Third-Party Services & Infrastructure

We partner with trusted global infrastructure providers to deliver reliable services:

• Apple Inc. (Apple Push Notification service / APNs): Utilized for routing incoming call wake-up notifications to iOS devices.
• Cloudflare Calls: Utilized as an Anycast edge-managed SFU/TURN relay infrastructure for resilient media transmission.

We do not sell, rent, or trade your personal data to advertisers or third-party marketing companies.

6. Data Retention & Account / Data Deletion (User Rights)

We believe users should have complete control over their data:

• Transient Diagnostic Logs: Technical connection metadata is automatically purged within 30 days.
• In-App Data Deletion & Reset: You can delete all local data, settings, and regenerate your Peer ID at any time by navigating to Settings > Reset Account & Delete Data inside the Tsuwa app.
• Uninstalling the App: Deleting the Tsuwa app from your iOS device immediately and permanently deletes all locally stored data.
• Server-side Data Deletion Requests: If you wish to request the manual deletion of associated server logs or push notification tokens, you may contact our privacy team at [email protected], and we will fulfill your request promptly.

7. Children's Privacy

Our service is not directed at children under the age of 13. If you are under 18 years of age, please obtain permission from a parent or legal guardian before using the Service.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or service enhancements. Material changes will be prominently announced on our website or within the app.

9. Contact Us

If you have any questions, comments, or data deletion requests regarding this Privacy Policy, please contact our support team: