Privacy policy

Last updated November 2, 2026

coldcall listens to your lectures, writes them down, and helps you answer when you are called on. This page says what it collects, where it goes, and how to delete it. It covers the coldcall app for Mac, Windows, iPhone and iPad, its browser extension, its connection to AI apps, and the website getcoldcall.app. coldcall ("we") is based in the United States and decides how this data is used. Questions: team@getcoldcall.app.

The short version

• The class audio is streamed to be written down as you go, and never saved. We keep the words, when they were said, and which voice said them.
• We do not sell your lectures, notes or chats, and never use them for ads.
• coldcall does not train AI models on your lectures.
• You can download your data and delete your account in the app. A few copies stay for a while (see “How long it is kept”).
• Recording a class is your choice and your responsibility: follow your school’s rules and the law where you are (see the terms).

What coldcall collects

• Your account. Your email address, to sign you in, and your name with the ways it can be spelled or said (as text, never a recording), so coldcall can tell when you are called on.
• Your classes. The names, days and times, colours and settings you choose, and your device’s time zone, to put each lecture on the right day.
• Your lectures. While you record, the app sends the class audio to be written down: the microphone in a classroom, or the computer’s sound on a video call (the microphone if the computer’s sound can’t be recorded). On iPhone and iPad it is always the microphone, also with the screen locked, and the Live Activity on the Lock Screen shows that it is recording, with the class and any card you get, to anyone who can see the screen. The audio goes through our server to Soniox, our speech-to-text provider, which writes it down as it arrives. The audio is never saved, not on your device and not on our servers. We keep the words, when they were said, and the voice labels below.
• Your answers on a video call. When a card tells you that you were called on, or you tap Help me answer, the app turns on your microphone to hear your answer, and turns it off when the answer is over, or 30 seconds after the newest card at the latest. What it hears, including anyone near you, is written down and kept with the lecture, like the rest of the class.
• Voices. To tell the professor from the students, Soniox tells the voices in a lecture apart by how they sound while it streams, and labels them “speaker 1”, “speaker 2”. coldcall keeps those labels with the transcript. When the professor calls a name, coldcall may write it beside the label of the reply that follows, by its timing, not by matching a voice. coldcall does not keep any recording or profile of what a voice sounds like, and it does not recognise anyone from one lecture to the next: each lecture starts fresh.
• What coldcall writes for you. Notes, the summary after class, the moments you marked, and your chats about a lecture.
• Files and pages you add. The words of slides, PDFs and documents you drop on the app, pick in Files on iPhone and iPad, or send from the extension. The file is read on your device; only its words, its name and any speaker notes are sent.
• Your plan and payments. Your plan, its status and renewal date, your Stripe customer ID, the email you paid with, and the credits you bought and have left. Your card number never reaches coldcall. If we give you a plan (for example as a tester), we keep your email, the plan and a short note on why.
• Usage counts. Minutes transcribed, how many answers and searches you used, and technical events like a dropped connection. These never contain what was said.
• How the app is used. Which screens and buttons you use and for how long, like time on your notes or how often the notch opens, with the app’s version and your device’s system (Mac, Windows, iPhone or iPad), so we can make coldcall better. Never words, audio or names. It is on unless you turn it off in Settings › General › Share usage stats.
• Messages you send us, and our replies.

Our own servers see your IP address with each request and use it for up to ten minutes to stop abuse, without saving it. The providers that sign you in, serve app updates and host our servers may keep it in their logs. Our server logs hold account and customer IDs and technical events, never what was said. The app does not capture your screen, show ads, track you across other companies’ apps or websites, or use cookies.

This comes from you, from Canvas or Blackboard when you connect them, from Stripe, Google and Apple when you pay or sign in with them, and, for other people in your lectures, from what the app hears.

Our website

You can visit getcoldcall.app without an account. Its only form is the one that emails you the download link (below), and its only cookies are Google’s ad cookies, below. We measure how the site is used, to find what confuses people, and we advertise it:

• Visits, counted by the company that hosts the site, which sees each request’s IP address as it serves the page: the page, the site you came from, your country, your browser and kind of device, and how fast the page loaded. It tells visitors apart only by a code that changes every day.
• What you do on the page, recorded by our analytics provider: where you click or tap, where the mouse goes, how far you scroll, which questions and buttons you open, how long the page took to load, and the page’s errors. It does not record a replay of your visit. Anything you type is hidden from it. It does not keep your IP address.
• Ads, measured by Google Ads: which visits from our ads went on to buy a plan. Google may also use your visit to show you our ads later (“remarketing”). For this Google sets cookies (like _gcl_au); in the European Economic Area, the United Kingdom and Switzerland they are refused by default. Google may connect your visit with what it knows from other sites; you can limit this at myadcenter.google.com.

The host and the analytics provider keep nothing on your device (no cookies, no local storage), so each page you open is counted on its own and never tied to your coldcall account. When you go from one of our pages to another, the next page reads the address of the one before, which your browser sends it, only to know which ad or link brought you. If your browser asks sites not to track it (Do Not Track or Global Privacy Control), the analytics recorder and the Google tag are not loaded at all; the host’s visit count still runs. None of this happens in the app.

The download link by email. coldcall’s computer app runs on Mac and Windows, so on a phone, tablet or Chromebook the site offers to email you its download link instead. You type your email address; our email provider sends the link once, and keeps a record of the message for a limited time. We do not keep your address or add it to any list. To stop abuse, our server holds your IP address in memory for up to an hour, without saving it.

Buying on the site. The plan buttons take you to Stripe’s own checkout page, where you type your email, card, and billing address as far as tax needs it. Stripe sends us back the email you paid with, your customer ID, and your plan with its status and renewal date, which we keep so the plan reaches you when you sign in to the app with that email.

The browser extension (Canvas and Blackboard)

If you add the coldcall extension, it brings your courses in from your school’s Canvas or Blackboard so you do not have to type your classes. It reads them with the login your browser already has for that site, the same way the site’s own pages do: in a tab open on it, or in the background when Chrome starts and when you press Update. It reads only the school sites you allow.

• It reads: course names, codes, terms and time zones; your teachers’ names; the syllabus; assignment names and due dates; the names and addresses of the modules, pages, files, links and videos in a course (with each file’s type, size and date); class meetings on the course calendar; and, for the courses you made classes of, the words of their slides (with speaker notes), PDFs and Word documents. It opens those files in your browser and sends only their words: the files themselves never leave your browser.
• On Canvas, your calendar feed’s link. Canvas gives each student a private link to their own calendar. The extension sends it with each sync; coldcall keeps it encrypted and uses it only to read your due dates: when you press Update, or when your chat, class or connected AI app needs them and an hour has passed, so they stay right with Chrome closed. Disconnect forgets it.
• Use for my class, only when you press it: the words, title and address of the page or file in that one tab, added to your class. It refuses the Canvas or Blackboard sites you allowed, coldcall’s own pages, and common mail, calendar, contacts and sign-in pages (like Gmail, Outlook, Google Calendar and Contacts, and Google or Microsoft sign-in).
• It never reads: grades, quiz questions, submissions, classmates, discussions or messages. (A graded quiz or discussion shows up only by its name and due date, like any assignment. On Blackboard it may read the names and due dates of gradebook columns, never scores.)
• Your login never leaves your browser. The extension does not read or send your password or cookies, and it never posts anything to your school’s site.
• It sends what it read to your coldcall account only, with a key that can only send to it. It keeps that key, the sites you allowed and how the last sync went in the browser.

Reading your courses is like opening them yourself: your school’s site may record that your account viewed them, as it does whenever you browse. Nothing is posted and no one is notified. Disconnect in the app deletes the courses, files and calendar link the extension sent; the classes you made from them, and pages you added with Use for my class, stay until you delete them.

The extension’s use of what it reads follows the Chrome Web Store User Data Policy, including its Limited Use requirements: it is used only to set up and run your classes in coldcall, never sold, never used for ads, and not read by people except as the “Who reads it” part below allows.

How it is used

To run coldcall for you: to write down your lectures, recognise your name, answer your questions, write your notes, set up your classes, and give you the plan you paid for. Your course material (like the syllabus and your slides) is used as context for those answers. Also to keep coldcall safe and working, to answer you when you write, to see which parts of the app and the site are used so we can improve them, to tell people about coldcall through ads, and to meet legal duties like keeping tax records.

Where the law asks on what basis we use your data, it is: our contract with you; legitimate interests you can object to (yours, in notes of your own classes, which covers what others say in them; ours, in keeping coldcall safe, improving it, and measuring and advertising it); and our legal duties.

We do not sell your lectures, notes or chats, and never use them for ads. The website’s Google ad tag may count as a “sale” or “sharing” of browsing data under some US state laws; a browser that sends Global Privacy Control does not load it.

coldcall makes no decisions about you by automated means that have legal or similarly significant effects.

Who else handles it

coldcall uses a few companies to do its work. Each gets only what its job needs. The AI companies below, and the providers that run coldcall for us, may use your data only to do that work for us, and are bound by written contracts (their terms and data processing terms for business customers) to keep it confidential and secure: to protect it at least as well as this policy does. We name the AI companies and say what each gets; the others we describe by what they do, and give their names if you write to team@getcoldcall.app.

The AI companies. None of them gets your email address or your account ID, and none trains its AI models on your data.

• Soniox (United States) writes the lecture down as it is said, and tells its voices apart. It gets the lecture audio as it streams, and the ways your name is spelled, so it writes your name right. It does not keep the audio; it keeps only technical records with no content.
• OpenAI (United States) writes the answers, notes and summaries, and searches the web when a card has to look something up. It gets the lecture’s text (with any names said in it, yours too), your questions, and your class’s name, files, syllabus, deadlines and earlier notes. We ask it not to store what we send. Under its terms for business customers, it keeps it up to 30 days to check for abuse, unless a law or court requires longer.
• TypeSafe (United States) reads a few lines of the lecture text around a question the professor asks, to decide whether it was put to the class. It gets only those lines.

On iPhone and iPad, the app asks before anything goes to these three: before your first recording or question it shows what each one gets and why, and Continue allows it. You can take it back in Settings › Account › AI services; until you allow it again, the app records nothing and sends them nothing.

The other companies:

• A database provider signs you in, serves app updates and stores your data, in a database in Canada.
• A hosting provider runs our servers in the United States.
• Stripe (United States) takes payments and works out tax: it gets your email, the card and billing address you type on its page, and your coldcall account ID. Stripe also uses this data for its own purposes, like preventing fraud (stripe.com/privacy).
• An email provider delivers the sign-in emails, and the download link you ask for on the website. Google Workspace holds the email you send us.
• Google gets only a website’s name, to show its icon next to a web source. If you sign in with Google, Google shares your email address and may share your Google profile’s name and picture, which our database provider keeps with your sign-in; coldcall uses only the email. coldcall’s use of information from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Apple signs you in if you choose Sign in with Apple. Apple shares your email address, or an address of its own that forwards to yours if you choose to hide it, which our database provider keeps with your sign-in. Apple may also share your name; coldcall does not keep it.
• A website host counts the site’s visits and an analytics provider records how it is used; Google Ads measures our ads (above). All in the United States.
• An error-reporting service, if we turn on error reports: what failed in our code, with the IDs of your account and lecture. Never what was said, your name or your email.

Your account data is stored in Canada. These companies process it, and some keep it for a while, in the United States, under their terms for business customers. We share data beyond this only when you ask us to, when the law requires it (and we will tell you when we can), to protect someone’s safety, or if coldcall is sold or merged, under this policy.

Who reads it

Your lectures, notes, chats and course material are for you. People at coldcall do not read them, except when you ask us to (for example, to fix a problem you report), to keep coldcall safe from abuse, or when the law requires it.

If you open a lecture in an AI app you have not connected, you paste the text there yourself, and that app’s privacy policy applies.

You can connect coldcall to your own AI app, like Claude, ChatGPT or Grok. A connected app can read your own lectures, transcripts, notes and summaries, and your courses’ slides, readings, syllabus and deadlines, so it can answer about your classes. It may also learn your account’s email address, because it connects with your coldcall sign-in. It never gets coldcall’s note of which classmate spoke, and it cannot change or delete anything. Connecting asks you to sign in on our site, which sets one cookie for ten minutes for that sign-in. What that app does with what it reads is covered by its own privacy policy. You can remove an app at any time in coldcall under Settings › AI apps.

Other people in your lectures

A transcript holds what was said in class, so it includes your teacher, other students, and any names said aloud. The note of which voice was a classmate’s is never sent to the AI or to connected apps, though it appears in a transcript you copy with Copy transcript; names said aloud are part of the text the AI reads. Please follow your school’s rules and the law on recording classes (see the terms).

If you are a teacher or a student whose words may be in someone’s coldcall lectures, write to team@getcoldcall.app with the class and dates. We will look for your name in those transcripts and remove it where the law gives you that right.

How long it is kept

• Your lectures, notes, chats, classes, course material and usage: until you delete them or your account.
• On iPhone and iPad, the copy the app keeps of your name, your classes, your plan and the last lectures you opened, so they open at once, even offline: on that device only, left out of its backups, until you sign out, delete your account or sign in with another account.
• OpenAI’s copy of what it was sent: up to 30 days, as above.
• Plans bought on the website: kept under the email paid with until an account with that email signs in, or until you ask us to delete them.
• A plan we gave you: kept under your email, also after it ends, until you delete your account or ask us to remove it.
• Payment records: Stripe keeps them as tax and payment law requires, also after you delete your account.
• Server logs, and the emails you send us: for a limited time, as long as we need them to run coldcall and answer you.
• Deleted data can remain in our providers’ backups for a limited time, until they are replaced.

Your data travels encrypted, your sign-in stays in your device’s keychain, and your calendar link is stored encrypted. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

Your choices and rights

• Delete a class in the app, and its lectures, everything written from them and the files you added to it go with it. Course data from Canvas or Blackboard stays until you disconnect.
• Disconnect Canvas or Blackboard in the app to delete the course data it sent.
• Remove a connected AI app in Settings › AI apps.
• Download your data in Settings › Account: one file with your classes, lectures, notes, chats, course material, plan and usage. It leaves out your calendar link, which works like a password.
• Delete your account in Settings › Account. If your plan still renews, cancel it first, and stop any lecture you are recording. Your classes, lectures, notes, chats, what the extension sent, your credits, any plan we gave your email, your usage and your sign-in are deleted right away, and every AI app loses access. If you signed in with Apple, we also ask Apple to revoke coldcall’s sign-in. It can’t be undone. Copies stay for a while in backups and at OpenAI (see above), and your payment records stay with Stripe as the law requires.
• Stop sharing usage stats in Settings › General.

Wherever you live, you can ask us to see, correct or delete your data, to get a copy, to stop or limit a use of it, or to withdraw your consent. Write to team@getcoldcall.app from your account’s email; we answer within 30 days. If you are not satisfied, you can complain to the authority that protects personal data where you live (in the United States, your state’s attorney general).

Children

coldcall is made for university students. It is not meant for children under 13, and we do not knowingly collect their data. If we learn that a child under 13 has an account, we delete it. If you think one does, write to team@getcoldcall.app.

Changes

If this policy changes, the date at the top changes. Before a change to how we use data we already have, we will tell you in the app, and ask you first where the law requires it.

Contact

coldcall, the United States. team@getcoldcall.app