Privacy policy — Quiet: Stop Spam & Robocalls

Quiet

Last updated: 19 September 2026 Operator: the person who publishes this app (see Support). Contact: quiet.dvanlierop@outlook.com (interim until a dedicated quiet@ mailbox exists)

This policy describes this repository’s current binary. It does not claim live robocall blocking, live National Do Not Call filing, or independently verified people-search deletions unless those features are actually enabled on the device you are using.

Quiet does not sell personal information.

Quiet does not include an analytics, ads, or attribution SDK.

Who this app is for

Quiet helps you quiet junk email and reduce robocalls. TestFlight builds compiled with Google/Microsoft client IDs connect live mail when you sign in. The Continue with sample inbox path is for App Review and for builds that do not include those dart-defines. Do Not Call opens the official FTC site (Quiet does not register you). Quiet Shield stays demo until Call Blocking or call screening reports live on the device.

What Quiet stores on this device

Quiet uses on-device storage (shared_preferences) for:

Onboarding complete flag and Keep it quiet schedule / categories
Connected mailbox metadata (provider, address, whether it is a sample inbox) and the last scan list
Activity log entries (email, calls, brokers)
Protected phone number, Do Not Call assist status, Quiet Shield toggle, Silence Unknown / carrier-filter checkboxes
Name and phone you enter for Remove your info, plus opt-out job status

Live Gmail / Outlook access tokens (and Microsoft refresh tokens) and Yahoo / iCloud app-specific passwords (and optional Yahoo OAuth tokens) are stored in the OS Keychain / Android encrypted storage — not in shared_preferences, and never in logs. Disconnect and Delete data on this device remove them.

Quiet does not upload your address book.

Email

App Review / unconfigured builds: Continue with sample inbox uses a local demo mailbox. No Google, Microsoft, Yahoo, or Apple account is contacted.

When you connect live Gmail or Outlook (GOOGLE_CLIENT_ID / Google Sign-In, or a Microsoft Graph access token / device-code login):

Quiet requests Gmail readonly + modify, or Microsoft Graph Mail.Read / Mail.ReadWrite
Quiet reads recent inbox metadata (sender, subject, List-Unsubscribe, List-Unsubscribe-Post) to build the scan list
Stop categories hide matching senders in Quiet. Stop now follows List-Unsubscribe (RFC 8058 one-click POST when present, otherwise GET) and otherwise archives those messages in the connected mailbox. Quiet cannot add a filter, label, or block at Gmail, Outlook, Yahoo, or iCloud
Undo in Activity restores archived mail for live Gmail and Outlook: Undo moves archived messages back to your inbox while the action is undoable and the mailbox stays connected

When you connect live Yahoo or iCloud (iOS/Android; you opt in):

Quiet uses IMAP over TLS (imap.mail.yahoo.com or imap.mail.me.com, port 993)
You provide your mailbox email and an app-specific password you create at Yahoo Account Security or account.apple.com. Quiet does not use your Apple ID / Yahoo account password
Optional Yahoo OAuth2 (mail-r) only if Yahoo has approved a developer app; Quiet never ships a Yahoo client secret
Quiet reads recent inbox headers to build the scan list, follows http(s) List-Unsubscribe (one-click POST when the sender supports RFC 8058), and archives via IMAP MOVE/Trash
Stop categories are not a Yahoo or iCloud server-side filter
Undo in Activity does not restore mail for Yahoo / iCloud

Access tokens and app-specific passwords stay on the device. Client secrets must never be committed to git.

Calls and Quiet Shield

The number you protect stays on this device.

National Do Not Call: Quiet opens https://www.donotcall.gov/ so you can finish the official form. It does not POST to donotcall.gov and does not register the number with the government.
Quiet Shield: a local demo list (128k numbers · updating daily) until iOS Call Blocking & Identification has Quiet enabled (isLiveExtension) or Android’s call-screening role is granted. Until then, the OS does not block calls for Quiet. The in-app Enable steps control opens those OS screens when the platform allows it.
Silence Unknown: Quiet can open system Settings on a device build; it cannot flip the OS toggle itself.
Carrier spam filters stay in the carrier’s app. Quiet only records that you marked them on.

Native scaffolding lives in this repo (Call Directory extension sources, CallScreeningService). It is not live until you complete a Mac / signed-device build and enable the extension or screening role.

Data brokers (Remove your info)

Name and phone stay on this device until you start a removal. Quiet does not POST your name or phone from the app, and does not scrape people-search sites.

Default (production / TestFlight): Remove your info uses assisted live adapters. Each catalog row is a real, public consumer opt-out program (for example Spokeo, Whitepages, PeopleConnect, DAA WebChoices, NAI, FTC National Do Not Call). Quiet may send a reachability GET (no name or phone) to confirm the official page exists, then opens that HTTPS page in your browser. You finish the site’s own form. A listing is marked removed only after you confirm you finished that form. Quiet cannot verify the listing is gone.
Confirm-email steps: if a site emails a confirmation link, open it in your mail app. Quiet can start a mailto: to a published privacy desk when the operator lists one. Quiet does not send that mail for you.
Upload-ID steps: if a site asks for a photo ID, upload it on their page (their file picker or share sheet). Quiet does not collect, store, or upload your ID.
Sample catalog: compile with --dart-define=QUIET_BROKER_DEMO=true for App Review. That path uses generic directory labels and never contacts official sites.

What Quiet does not collect

No analytics events, advertising IDs, or crash-reporter PII SDKs in this repo
No sale, rent, or barter of personal information
No contacts upload

How to delete data

In Settings:

Disconnect inbox (if connected)
Delete data on this device — clears mailbox scan state, call-protection state, broker jobs, and activity stored in this app
Optionally Replay onboarding

Uninstalling Quiet also removes on-device preferences. Live Gmail / Microsoft access can be revoked in your Google or Microsoft account security settings. Live Yahoo / iCloud app-specific passwords should be revoked at Yahoo Account Security or account.apple.com.

Children

Quiet is not directed at children under 13 (or the age required in your country).

Changes

If behavior changes (live Call Directory, live broker POSTs, hosted URLs), this policy must be updated before store listings claim those behaviors.

Hosting this policy

This file is the source of truth in the repo (docs/privacy.md, also bundled as assets/legal/privacy.md). Public HTTPS copy: https://telegra.ph/Privacy-policy--Quiet-Stop-Spam--Robocalls-09-19. Paste that URL into App Store Connect and Play Console. Self-contained HTML (for GitHub Pages or another host) is in docs/legal/. See STORE_CHECKLIST.md.