Privacy notice

Data controller and contact

Mercax.com, S.A. de C.V., based in Querétaro, Mexico, is the data controller. SinSpam is developed under the brand KEB.mx. For privacy matters and rights over your data, write to oscar@mercax.com.

What we send and why

• Calls: the incoming number and the date and time of each call observed while using SinSpam as your call filter.
• Votes: the number and the “Annoying” or “Not annoying” vote contributed during use, whether chosen by you or generated by the app. Each installation keeps one vote per number; resending does not multiply the count.
• Installation identification: a random identifier (UUID) associates calls and votes with the installation and prevents the same vote being counted repeatedly. A private credential authenticates its submissions. We do not ask for your name or your own phone number to create this identification; we do not verify your personal identity.
• Transmission and verification: each submission includes a technical identifier to confirm receipt. Google Play Integrity checks the app and device and helps detect modified apps or emulation. It does not verify the person or the truthfulness of each vote.

We use this data to receive your contributions, update the community list and manage retention and deletion. Some versions also send technical data about call processing; the API discards it and does not include it in stored contributions.

We check Contacts only on your phone. We do not send your contacts’ names or your address book.

We do not record calls or use their content.

Where data is stored and what we share

The server is in St. Louis, United States. Authorized staff can access the data and private backups. The downloadable community list contains numbers and vote counts, without UUIDs or individual call histories. Votes do not represent verified people.

Google processes app and device signals for Play Integrity under its privacy policy.

How long we keep data

• Server: a vote is automatically deleted when it is over a year old and the number has had no calls observed by any installation for three complete calendar months. If it keeps calling, its old votes remain. Reports without a vote are deleted under the same age and inactivity periods. Private backups are kept for up to seven days.
• Phone: the most recent 1,500 observed calls in total are stored, including blocked calls. Manual votes do not expire; clearing history or expiry on the server does not delete them. Clearing app data or uninstalling deletes local data.
• Community list on the phone: each number is kept for two calendar years from the UTC date of the last received update in which it appeared.

Your contributions and your rights

If your version shows Delete my server contributions in Help, use that action to delete the calls and votes sent by this installation, along with its old pending submissions. Your identifier, authorization and phone data are kept: history, rules and personal votes.

If that action is not available in your version, request deletion of your installation’s contributions at oscar@mercax.com.

This does not delete other installations’ contributions or immediately change community figures already distributed. Continuing to use the filter generates new contributions. To stop observing new calls, remove SinSpam as your Android call filter or uninstall it.

To exercise rights over your data, ask questions or request a review of a number, write to oscar@mercax.com. Explain your request and how to reply. We may ask for information to verify your identity or representation before sharing or changing data.

Promotions in the app

Promotions from mercax.com within the app are not selected using your calls, Contacts, votes or UUID. We do not measure their views or clicks or share filter data with advertisers. When you open a link, the destination site’s privacy terms apply.

Changes to this notice

We will publish changes and their date here. The app will inform you about changes that require additional information or consent.