Frequently Asked Questions

SecureCall is an Android app for end-to-end encrypted voice calls. Every call is encrypted using XChaCha20-Poly1305 with X25519 key exchange and Double Ratchet forward secrecy. The cryptographic engine is written in Rust, and the complete source code is publicly available on GitHub.

No. Calls are encrypted end-to-end. Encryption keys are generated on your device and never sent to our servers. We are technically unable to decrypt your calls, even if compelled by a court order. Our signaling server only sees encrypted payloads and temporary identifiers.

No. SecureCall generates an anonymous ID on your device. No phone number, email address, or personal information is required. You share your SecureCall ID with contacts through any channel you choose.

Currently, SecureCall is Android-only. An iOS version is planned but not yet under development. The Rust crypto engine is cross-platform, so the core security will be identical.

Transparency builds trust. By publishing our source code, we allow security researchers, journalists, and privacy advocates to verify that our encryption works as claimed. Any backdoor would be visible in the public code. Security through obscurity is no security at all.

It depends on your tier. Free: optional anonymous crash reports only. Pro: nothing. Premium: absolutely nothing, not even your IP address (masked via GhostNet). No call logs, no contacts, no analytics — on any tier. See our Privacy Policy for detailed tables.

Yes. SecureCall complies with the EU General Data Protection Regulation (GDPR) and the German Bundesdatenschutzgesetz (BDSG). Since we collect virtually no personal data, most GDPR rights are satisfied by default. StealthX is based in Germany.

No. We cannot provide call content because we do not have it. End-to-end encryption means only the two call participants possess the decryption keys. We cannot comply with wiretap requests because it is technically impossible for us to decrypt calls.

XChaCha20-Poly1305 for symmetric encryption (256-bit AEAD with 192-bit nonce), X25519 for key exchange (ECDH on Curve25519), and the Double Ratchet protocol for perfect forward secrecy. Keys are derived using HKDF-SHA256. See our Security Architecture page for full details.

Pro and Premium tiers include active protection against call recording attempts: FLAG_SECURE prevents screen capture, exclusive audio focus blocks other apps from recording, and continuous monitoring detects screen recording apps, microphone hijacking, and known spy/surveillance apps. Pro blocks threats; Premium auto-terminates the call.

Rust guarantees memory safety at compile time, eliminating buffer overflows, use-after-free, and data races — the most common sources of security vulnerabilities in cryptographic code. The Rust crypto engine is compiled to a native library and accessed from Android via JNI.

Forever Licenses are one-time purchases that give you lifetime access to Pro or Premium — no subscription needed. Only 100 licenses are available per tier. The price starts low and increases automatically with each sale: PRO Lifetime starts at $15 (rises to $50), Premium Lifetime starts at $25 (rises to $100). Once sold out, only monthly/yearly subscriptions remain. Early buyers get the best deal.

The price scales linearly based on how many licenses have been sold. For example, PRO Lifetime: License #1 costs $15.00, license #50 costs ~$32.50, and the last license (#100) costs $50.00. The exact remaining count and next price are shown live in the app's Upgrade screen.

Lifetime: Pay once, own forever. Best value if you plan to use SecureCall long-term. Includes all future updates. Available only while licenses last.
Subscription: Pay monthly ($9.99 Pro / $29.99 Premium) or yearly ($99.99 Pro / $299.99 Premium). Cancel anytime. Always available.

Subscriptions are managed through Google Play. To upgrade, tap the upgrade button in SecureCall Settings. To cancel, go to Google Play > Subscriptions > SecureCall > Cancel. Your Pro/Premium features remain active until the end of the billing period. Lifetime purchases never expire.

No. All payments are processed through Google Play Billing. We never see your credit card number, billing address, or other payment details. Google handles the entire transaction.

Open SecureCall Settings > Delete All Data, then uninstall the app. Since we don't store data on our servers, uninstalling removes all traces. Your encryption keys, contacts, and call history are stored only on your device.