Privacy Policy

Operator: PADELADA WORLD, S.L. Last updated: October 22, 2026.

Who we are (controller)

AskErina is operated by PADELADA WORLD, S.L. (Sociedad Unipersonal) ("we"), NIF B05783238, Calle Josep Pla 8, Esc. 1, Pta. 1, 17252 Calonge i Sant Antoni (Girona), España. Inscrita en el Registro Mercantil de Girona, hoja GI-80156, inscripción 1ª. Contact for privacy requests: hola@padelada.com.

What the service does

AskErina has three parts: Protect me (Erina screens your own unknown and missed calls after you turn on call forwarding), Call for me (Erina calls a business on your behalf at your request; she says at the start that she is an AI and that the call is recorded and transcribed; businesses only) and Protect a loved one (the same screening for another adult, with that person's own consent). The service is for adults 18 and older.

What we collect

• Account (Apple or Google sign-in): the account identifier and, if you allow it, your name and email address, as provided by Apple or Google. We never receive your Apple or Google password.
• You (the user): your phone number, the chat requests you make to the assistant, your call-forwarding status, and the briefs and results of calls Erina makes for you.
• Protected adult (Protect a loved one): name, phone number, consent record (time, wording version, channel, the one-time code check, IP address and browser user agent), preferences.
• People who call you, and businesses Erina calls: phone number, transcript of the conversation, call time and duration, summary, and a scam assessment.

Why we use it and our legal basis (GDPR art. 6)

• Users: to provide the service you asked for, contract (art. 6(1)(b)).
• Protected adults: consent for their protection (art. 6(1)(a)); they can withdraw it by replying STOP.
• Callers and businesses: we process the transcript and number on the basis of our legitimate interest (art. 6(1)(f)) in protecting the user from fraud and in carrying out the calls the user asked for. We balance this against the other party's rights; you may object (see Your rights). Erina tells every caller or business that she is an AI and that the call is recorded and transcribed.
• Consent records (IP address, browser user agent, time, wording version): we keep these as proof that a person agreed to receive texts, on the basis of a legal obligation to be able to demonstrate consent (art. 6(1)(c)) and our legitimate interest in defending legal claims and preventing abuse (art. 6(1)(f)).
• Security and legal claims: legitimate interest (art. 6(1)(f)) and legal obligations (art. 6(1)(c)).

We do not sell or share personal information for cross-context behavioral advertising.

Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Automated scam verdict

During a call, software scores whether the call looks like a scam and may end the call politely and alert the guardian. This is an automated decision that has no legal effect on the caller beyond ending the call. It can be wrong. The guardian and parent can review the summary, and a human can review a decision on request (see Your rights).

Who processes data for us (processors, by category)

• Twilio (telephony: call routing and text messages).
• Google (Gemini: speech-to-text and large language model for conversation and scam assessment; Google sign-in).
• Apple (Sign in with Apple).
• Cloudflare (network, security and delivery of this website).
• Supabase (database and hosting of our data).

Processors act on our instructions under data processing agreements.

Transfers outside the EEA/UK

Our processors may be located in the United States. Where personal data of people in the EEA or UK is transferred there, we rely on the EU-US Data Privacy Framework (for certified recipients) or Standard Contractual Clauses.

Retention

Call transcripts, call records, summaries and scam alerts are deleted automatically 30 days after the call; a scheduled job removes expired records daily. We do not keep call audio: by default only the transcript is kept, and we do not store recording files. Our telephony provider handles call media only to route the call. Invitations and consent records that are not completed (the one-time code is never confirmed) expire after 30 days. Completed consent records, including the IP address and browser user agent stored with them, are kept as proof of consent for as long as protection is active and for the period needed to defend legal claims. If you delete your account, your account data is deleted with it.

Your rights

Where GDPR applies you may request access, correction, deletion, restriction, portability and objection (including to processing based on legitimate interest), withdraw consent at any time, and ask for human review of an automated decision. You may complain to a supervisory authority; in Spain this is the Agencia Española de Protección de Datos (AEPD, www.aepd.es). Write to the contact above.

Notice at collection for California residents (CCPA/CPRA)

We collect the categories listed under "What we collect": identifiers (name, phone, email), call transcripts and summaries, and inferences (scam assessment), for the purposes above. We do not sell or share personal information and the service is for adults 18 and older and we do not knowingly collect data from anyone under 18. California residents may request to know, delete and correct their personal information and may not be discriminated against for doing so; use the contact above.

Minors

AskErina is not for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor's data has reached us, write to the contact above and we will delete it.

Your control

A protected person can reply STOP at any time to end protection. Callers, businesses and others can ask us to delete data at the contact above.