Privacy Policy

Last updated: April 12, 2026

Hush ("we", "our", or "us"), operated by Batalabs, is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.

What we collect

We collect as little as possible:

• Anonymous device ID: A randomly generated identifier created on your device. It contains no personal information and cannot be traced back to you. It is used only to prevent duplicate spam reports from the same device.
• Spam reports: When you report a phone number, we store the phone number, the spam category you selected, your anonymous device ID, and the timestamp. We do not store your name, your phone number, your location, or any other personal information.
• Platform type: iOS, stored alongside your device ID so we can understand usage trends in aggregate.

What we do NOT collect

• Your call history or call logs
• Your contacts or address book
• Your phone number or personal identity
• Your location
• Any analytics, tracking, or advertising identifiers

Call blocking happens entirely on your device through Apple's CallKit framework. We never see which calls were blocked or received.

How we use your information

• Your anonymous device ID is used to prevent a single device from reporting the same number multiple times (spam prevention).
• Spam reports are aggregated to improve the blocklist for all users. Individual reports are never disclosed to third parties.

Data sharing

We do not sell, rent, or share your data with third parties for advertising or marketing purposes. We may share aggregated, anonymized blocklist data (e.g., "this number has been reported 200 times") as part of open-source data contributions, but this contains no personal information.

Data storage

Data is stored in a secured PostgreSQL database hosted on Neon (AWS us-east-1). We use industry-standard encryption in transit (TLS) and at rest.

Data retention

We retain spam number data indefinitely to maintain blocklist quality. Anonymous device IDs and reports are retained for as long as the device is active. You can request deletion of your device's data by emailing hello@hush.click with your device ID (found in the app's Settings screen). We will delete your data within 30 days.

Children's privacy

Hush is not directed at children under 13. We do not knowingly collect any information from children. If you believe we have collected information from a child under 13, please contact us at hello@hush.click.

Changes to this policy

We may update this policy from time to time. Material changes will be noted with an updated date at the top of this page. Continued use of Hush after changes constitutes acceptance of the updated policy.

Contact

Questions about your privacy? Email us at hello@hush.click.