/>

Legal

Privacy Policy

Last updated: May 27, 2026

At OsmO, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our call filtering service.

OsmO is operated by Mountainheads Private Limited, a company registered in India (CIN: U47912KA2025PTC207841), with its registered office at A-305, Mantri Classic Apt, 8th Cross, S.T Bed Layout, Koramangala, Bangalore - 560034, Karnataka, India.

1. Information We Collect

Information You Provide

  • Account information (email address, name)
  • Contact preferences and settings
  • Communications with our support team

Information Collected Automatically

  • Call metadata (phone numbers, call times, call duration)
  • Device information (device type, operating system)
  • Usage data (features used, interaction patterns)
  • Approximate location (latitude and longitude), if you grant location permission
  • Timezone and local time

Information Collected Through the AI Assistant

When you use the OsmO AI chat assistant, the following data is collected and processed:

  • Chat messages you send to the assistant
  • Conversation history (to provide contextual responses)
  • Contact names referenced in conversations (when you @mention a contact)
  • Call history context (when the assistant searches your call records)

Information Processed by AI Services

To power OsmO's AI features, the following data may be sent to third-party AI services:

  • Chat messages and questions you send to the OsmO assistant
  • Call transcripts and recordings from AI-screened or AI-initiated calls
  • Phone numbers and contact names associated with your calls
  • Your location (if you have granted location permission)

2. How We Use Your Information

We use the information we collect to:

  • Provide and improve our call filtering service
  • Screen and filter spam, scam, and unwanted calls
  • Personalize your experience and preferences
  • Communicate with you about service updates
  • Analyze usage patterns to enhance our AI models
  • Process your requests through AI services to provide intelligent call screening, outbound calls, and chat assistance
  • Comply with legal obligations

3. How We Protect Your Information

We implement appropriate technical and organizational measures to protect your personal information, including:

  • End-to-end encryption for sensitive data
  • Regular security audits and assessments
  • Access controls and authentication protocols
  • Secure data storage with leading cloud providers

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With trusted third parties who assist in operating our service
  • Third-Party AI Providers: As described in Section 5 below
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you have given us explicit permission

5. Third-Party AI Services

OsmO uses third-party artificial intelligence services to power the AI chat assistant and AI-powered calling features. When you use these features, the following data may be sent to these providers:

What Data Is Shared

  • Chat messages: The text of messages you send to the AI assistant
  • Conversation history: Prior messages in the current conversation, used to provide contextual responses
  • Location data: Your approximate location (latitude and longitude), if you have granted location permission, to provide local recommendations
  • Your name: Your first name, used to personalize responses
  • Timezone: Your device timezone, used for time-aware responses
  • Contact names: Names of contacts you reference in chat (via @mention)
  • Call history context: Summaries of your call records when the assistant searches your call history
  • Call audio and transcripts: Audio and transcripts from AI-screened or AI-initiated calls, processed by Ringg
  • Phone numbers: Phone numbers associated with your calls, used for call screening and outbound calls

Who Receives This Data

Your data may be processed by the following third-party AI providers:

  • OpenAI (San Francisco, USA) — provider of GPT language models, used for AI chat responses. See OpenAI's Privacy Policy.
  • Google (Mountain View, USA) — provider of Gemini language models, used for AI chat responses. See Google's Privacy Policy.
  • Ringg — powers AI phone calls, call screening, and call transcription. Ringg processes call audio, transcripts, and phone numbers to deliver these services.
  • Mem0 — stores conversation memory so the assistant remembers prior context. Mem0 receives chat messages and an anonymous user ID. See Mem0's Privacy Policy.

Data processor relationship: These providers act as data processors under enterprise agreements and do not train models on your data.

We may change AI providers in the future. This policy will be updated to reflect any such changes.

Why This Data Is Shared

This data is sent to AI providers solely to generate responses to your queries within the OsmO AI assistant and to power AI calling features (call screening, outbound calls, and transcription). Without this data sharing, the AI assistant and AI calling features cannot function.

Data Protection by AI Providers

Our agreements with these providers require them to process your data only for the purpose of providing AI responses and call services to OsmO. These providers maintain their own privacy policies and data protection practices, which we encourage you to review. We select providers that offer enterprise-grade data protection and do not use your data to train their general models.

6. Other Third-Party Service Providers

In addition to AI providers, OsmO uses the following third-party services to operate and improve the app:

  • RevenueCat (New York, USA) — manages in-app subscriptions and purchase validation. RevenueCat processes your subscription status, purchase receipts, and an anonymous app user ID. See RevenueCat's Privacy Policy.
  • Sentry (San Francisco, USA) — provides error monitoring and crash reporting to help us identify and fix bugs. Sentry receives crash logs, device information (model, OS version), and app performance data. See Sentry's Privacy Policy.
  • Firebase (Google, Mountain View, USA) — provides authentication, remote configuration, and push notification delivery. Firebase processes your device token, app usage events, and authentication state. See Firebase's Privacy Policy.
  • AppsFlyer (Herzliya, Israel) — measures install attribution and ad campaign performance so we know which ads brought you to OsmO. AppsFlyer receives a non-IDFA device identifier (on iOS, we do not ask for App Tracking Transparency permission and do not share the IDFA), your hashed app user ID, and conversion events (such as install, trial start, and subscription). We do not send your phone number, email address, contact list, call content, or precise location to AppsFlyer. See AppsFlyer's Privacy Policy.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Call metadata is typically retained for 90 days to improve spam detection accuracy.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (see "How to delete your account" below)
  • Portability: Request transfer of your data in a machine-readable format
  • Opt-out: Withdraw consent for specific processing activities (see "How to opt out" below)

To exercise any of these rights, contact us at [email protected]. We respond within 30 days.

8.1 How to delete your account

You can permanently delete your OsmO account at any time, directly from the app:

  1. Open the OsmO app and sign in
  2. Tap the Settings icon (gear, top-right of the main screen)
  3. Scroll to the Delete Account button
  4. Tap it and confirm "Delete" in the prompt

What happens when you delete your account:

  • Your user profile (name, email, phone number) is removed from our servers immediately.
  • Your conversation history, call transcripts, and call audio are deleted from OsmO and a deletion request is sent to our AI sub-processors (OpenAI, Google, Ringg AI, Mem0). Sub-processors complete deletion within 30 days per their respective Data Processing Agreements.
  • Push notification tokens are unregistered.
  • Active subscriptions are cancelled (any unused 7-day trial period is forfeited; renewals stop).
  • If you cannot access the app, you may also email [email protected] from the email associated with your account; we will complete deletion within 30 days.

8.2 How to opt out

You can withdraw consent for the following processing activities without deleting your account:

  • AI features (OpenAI / Google / Ringg AI / Mem0): AI processing is core to OsmO. To stop all AI processing, delete your account (see above). We do not currently offer a partial opt-out that keeps your account active.
  • Contacts access: Revoke at any time in your device's Settings → OsmO → Contacts. Already-synced names are deleted from our servers within 30 days.
  • Location access: Revoke at any time in your device's Settings → OsmO → Location. We do not store historical location.
  • Notifications: Revoke at any time in your device's Settings → OsmO → Notifications.
  • Microphone: Revoke at any time in your device's Settings → OsmO → Microphone.
  • Marketing communications: We do not currently send marketing email; if we do in future, every email will include an unsubscribe link.

9. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights regarding your personal information.

Categories of personal information collected in the last 12 months: identifiers (phone number, name, email), customer records, audio (call recordings), commercial information (subscription status), internet activity (app usage), geolocation data (approximate location for nearby search), and inferences drawn from the above.

Sources: directly from you, automatically when you use the app, and from third-party AI providers when they return processing results.

Purpose: to provide the OsmO service (call screening, AI assistant, scheduling).

We do not sell or share personal information for cross-context behavioral advertising under the CPRA's definitions. Data sharing with our AI sub-processors (OpenAI, Google, Ringg AI, Mem0) is limited to providing the service you've requested and is contractually limited to that purpose. Our attribution provider (AppsFlyer) acts as a service provider on our behalf to measure which ads brought users to OsmO; it does not receive your IDFA on iOS (we do not request App Tracking Transparency permission) and is contractually prohibited from using your data for its own profile-building or cross-context behavioral advertising.

As a California resident, you have the right to:

  • Know: what personal information we have about you and how it is used
  • Delete: request deletion of your personal information (see Section 8.1)
  • Correct: inaccurate personal information
  • Limit use of sensitive personal information: request that we limit use of your call audio or contact data
  • Non-discrimination: we will not deny service, charge a different price, or provide a different level of quality because you exercised any of these rights
  • Authorized agent: you may designate an agent to exercise these rights on your behalf

To exercise these rights, email [email protected] with the subject line "California Privacy Request". We will verify your identity using the email and phone number associated with your OsmO account before processing your request.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where OpenAI, Google, and Mem0 operate). We ensure appropriate safeguards are in place — including Standard Contractual Clauses and our sub-processors' compliance certifications — to protect your information in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via the app or email. We encourage you to review this policy periodically.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Mountainheads Private Limited
A-305, Mantri Classic Apt, 8th Cross, S.T Bed Layout,
Koramangala, Bangalore - 560034, Karnataka, India

Support: [email protected]
Privacy: [email protected]