Privacy Policy
Last updated: 3 October 2026. Placall is operated by DIRWAAS Intelligent Solutions LLC, Amman, Jordan ("we", "us"), which is responsible for the personal data described here. Contact for any privacy request: hello@placall.com.
What we keep
Account: your email address, a hash of your password (never the password itself), your display name, the character you chose or your profile photo if you upload one, your language, and a friend code.
Sign-in: a hash of each device's sign-in token, and when it was last used. Codes we email you to confirm your address or reset your password are stored only as a hash and expire after ten minutes; the record of the request (your email and how many codes were sent) is deleted within two days.
Groups and friends: the groups you create or join, their names and members, invite codes, and your friendships and friend requests.
Chat: the messages you write in group chats, with their time, and how far you have read in each group. Members of a group see its messages and your name and picture.
Games: the drawing on the board while people are in the group room (it is wiped when everyone has left and no game is on), scores during a game, and a summary of each game (when it started and ended, number of players, rounds, turns and words guessed).
Usage and call quality: when you open a group and leave it, which kind of device (iPhone or Android), how long you were in voice, and, from your device, the amount of audio data sent and received, the connection's round-trip time, whether a relay was used and whether someone could not be reached. We use this to run the service, fix problems and understand its costs. We do not keep the content of calls.
Feedback and reports: your answers to the short "how was it?" question, and problem reports, with your name, email, device type and system version, and the group concerned. Reports and bad ratings are also sent to our team by email.
On your device the app keeps your sign-in token, your language and your per-group display choices. We use no advertising, no cookies for tracking and no third-party analytics in the app.
Voice
Voice goes directly between the devices in a call (peer to peer). We do not record, store or listen to it. To connect devices, the app uses public STUN servers (Cloudflare and Google) that see your IP address. The other people in the call can see your device's IP address, which can reveal your approximate location and internet provider. The microphone is used only while you are in voice and only with your permission; you can mute or leave at any time.
Why we use it
To provide the service you ask for: your account, groups, friends, chat, voice connections and games.
To keep the service safe and working: preventing abuse, enforcing our Terms, handling reports, security, fixing faults and measuring call quality and costs.
To meet legal obligations and defend legal claims.
We do not sell your data, use it for advertising, or build advertising profiles.
Who receives it
Other users: your name and picture are shown to members of your groups, your friends, and anyone who opens your friend link or code. Your messages are shown to the members of the group they are in. Your email is never shown to other users.
Service providers acting for us: Cloudflare (hosting, database, realtime rooms and email sending), and Apple and Google as the app stores. They process data on our instructions.
Authorities, where the law requires it, or where needed to protect the rights, safety or property of users, the public or us.
A successor, if our business is merged, acquired or sold, under this policy.
Where it is kept
Our providers operate worldwide, so your data may be processed outside your country, including in the United States and the European Union. We rely on their safeguards for such transfers.
How long we keep it
Your account: until you delete it. Group memberships and friendships: until you leave or end them, or delete your account. Messages: until you delete your account or the group is deleted (messages stay in a group you leave). Deleting your account deletes your account, sign-ins, friendships, group memberships, the messages you wrote, your read positions and your feedback; groups you owned pass to another member, or are deleted with their messages if nobody is left.
Usage and call-quality records may be kept for up to 24 months and are then deleted or made anonymous. Copies of reports sent by email are kept as long as needed to handle them and any related claim.
We may keep data longer where the law requires it or to establish, exercise or defend legal claims.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your data, to object to or restrict some uses, and to complain to a data protection authority. You can change your name and picture and delete your account in the app. For anything else, write to hello@placall.com; we may need to confirm your identity first.
Children
Placall is not for children under 13. Users from 13 to 17 need a parent's or guardian's permission. If we learn that a child under 13 has an account, we will delete it. A parent who believes this has happened can write to hello@placall.com.
Security
We protect data with encryption in transit, hashed passwords and tokens, and access limits. No system is completely secure, and we cannot guarantee the security of data sent over the internet.
Changes
We may update this policy. We will show the new date here and, for significant changes, tell you in the app.
Contact
DIRWAAS Intelligent Solutions LLC, Amman, Jordan. Email: hello@placall.com