Privacy Policy

Effective November 12, 2026

Quillcall ("the app") is made by Marsic Solutions. Quillcall lets you make free audio calls with a share link or a 6-digit code (people can join as a guest, without an account) and optionally log your calls to your own Notion. This policy explains what data the app uses and why. We don't sell your data, show ads, or track you across apps or websites.

Data we collect

Account information: your name, email address, profile photo and a user ID from Google, or your name, email (which can be Apple's private relay address) and a user ID from Apple, used to sign you in through Firebase Authentication. Your first name is shown to the person you call.
Guests: if you join a call as a guest (no Google account), we create an anonymous ID for you through Firebase Authentication and use the name you type, shown to the other person as "Name (guest)". Guests have no email, photo or Notion connection. Deleting the app or choosing "Leave guest mode" ends the guest session.
Call connection data: to connect two people, our server briefly holds the 6-digit call code, the first names of both people, the technical connection details WebRTC needs (including network addresses) and the start and end time. This data is deleted automatically after at most 2 hours.
Notion connection (only if you connect Notion): an access token (stored encrypted), the name of your Notion workspace and the database you chose, and a small record per logged call (user ID, call code, start and end time) so the same call is not logged twice. Calls and the notes you type are written into your own Notion database. We do not read other pages in your Notion.
Reports and blocks: if you report someone on a call, we keep the call code, both user IDs, the first name of the person you reported, the reason and any note you wrote, for 180 days, so the Quillcall team can review it. If you block someone, we keep your block list (their user ID and first name) until you unblock them or delete your account.

Data we don't collect

Call audio travels directly between the two phones (or browsers) whenever possible. On some networks a direct connection is not possible; then the audio is relayed through Quillcall's relay server (TURN). Relayed audio stays encrypted between the two devices, so the relay cannot listen to it, and it is never recorded or stored. While relaying, the server sees the network addresses of both devices and a temporary connection name. We do not collect location, contacts, analytics, or advertising identifiers. We do not track you.

Microphone

Quillcall asks for the microphone only to carry your voice during a call. The call keeps running with the screen off or while you use another app, and works with Bluetooth headsets and car kits. Quillcall does not use the camera.

How Google data is used

Quillcall's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google sign-in data (name, email, photo) is used only to provide the app's features, is not transferred to others except as needed to provide those features, and is never used for advertising.

Service providers

Google Firebase Authentication: sign-in with Google or Apple. Google STUN servers help two phones find each other, so Google sees the network address of a device that starts a call.
Our hosting provider, relay server and MongoDB database: call connection data, relayed (encrypted) audio and Notion connection data, as described above.
Notion: only if you use it. Their handling of your data is described in their own privacy policies.

Retention and deletion

Call connection data is deleted automatically within 2 hours. Your account, block list and Notion connection data are kept until you delete your account, unblock, or disconnect Notion. Reports are deleted after 180 days. You can delete your account at any time in the app (avatar → Delete Account). This removes your sign-in record, your block list, your Notion connection and call records on our server, and revokes Quillcall's access to your Google account or your Sign in with Apple link. Pages already written to your Notion stay in your Notion; you can remove them there. You can also revoke access at myaccount.google.com/permissions and, for Notion, in Notion's connection settings. See Delete your account.

Children

Quillcall is not directed to children under 13 and we don't knowingly collect their data.

Changes

If this policy changes, we will update this page and the effective date above.

Contact

support@getmarsic.cc