Privacy

Last updated October 2026

Countersign exists to protect families from scams. We collect as little as we can, keep it only as long as we need it, and never sell it.

What we keep

• Your phone number and first name, so family members can reach you and you can sign in.
• Who is in your family and the relationship labels you chose.
• A record of each check: who asked, who answered, when, and the result. Not what was said.
• Scam checks you run: a short excerpt with names, numbers and links removed, so we can improve the check.
• Devices and passkeys: a description of each phone you use and its public passkey. We never hold the private half.

What we do not keep

• The family phrase, in readable form. We keep only a one-way scrambled version that lets us check a phrase is right. Even we cannot read it back.
• Audio or transcripts of practice calls. They are used live, then discarded.
• Your location, contacts, or anything on your phone.

Voice practice calls

A practice call uses a copy of a family member’s voice, and only after that person says yes, in the app, with their passkey. The voice copy is held by our voice provider, used for one practice call at a time, and deleted when you ask, when you delete your account, and automatically if unused. We keep a log of each deletion. Every practice call ends by telling the person it was a practice.

Who helps us

We use a small set of providers to run the service: for text messages and calls (Telnyx), voice (ElevenLabs), message analysis and call transcription (OpenAI), link checking (Google Web Risk), payments (Stripe), hosting and database, and, only if you agree, product analytics (PostHog). Each receives only what it needs to do its job.

Your choices

• Download your data at any time from Settings.
• Delete your account from Settings. Your details, voice and history are erased. We keep only a record that your number asked us to stop texting, so we honour it forever.
• Reply STOP to any text to stop texts from us. Reply START to resume.
• Analytics are off unless you turn them on, and you can switch them off again.

If you are in the UK, EU or similar, you also have the right to access, correct, object and complain to your data protection authority. We answer every request within 30 days.

Children

Countersign is for adults. We do not knowingly accept anyone under 16.

Contact

Write to support@gocountersign.com about anything in this page.