Privacy Policy

Operator: PADELADA WORLD, S.L. Last updated: October 23, 2026. This is the privacy policy for all AskErina products: Protect me, Protect a loved one (together, AskErina Guard) and Call for me.

Who we are (controller)

AskErina is operated by PADELADA WORLD, S.L. (Sociedad Unipersonal) ("we"), NIF B05783238, Calle Josep Pla 8, Esc. 1, Pta. 1, 17252 Calonge i Sant Antoni (Girona), España. Inscrita en el Registro Mercantil de Girona, hoja GI-80156, inscripción 1ª. Contact for privacy requests: hola@padelada.com. The service is for adults 18 and older.

Sign in with Apple or Google (all products)

You sign in with Apple or Google. We receive the account identifier and, if you allow it, your name and email address, as provided by Apple or Google. We never receive your Apple or Google password. We use this data to provide your account (GDPR art. 6(1)(b)). If you delete your account, your account data is deleted with it.

Protect me

Erina screens your own unknown and missed calls after you turn on call forwarding. She tells the caller she is an AI and that the call is recorded and transcribed.

• What we collect: your phone number, your chat requests to the assistant, your call-forwarding status, and for each screened call the caller's phone number, a transcript, call time and duration, a summary and a scam assessment.
• Why and legal basis: to provide the service you asked for (art. 6(1)(b)). For callers, we process the number and transcript on the basis of our legitimate interest in protecting you from fraud (art. 6(1)(f)), balanced against the caller's rights.

Protect a loved one

The same screening for another adult, with that person's own consent. Nothing starts until they agree.

• What we collect: the protected adult's name and phone number, their preferences, and a consent record: time, wording version, channel, the one-time code check, IP address and browser user agent. We also collect the same call data as in Protect me.
• Why and legal basis: the protected adult's consent for their protection (art. 6(1)(a)); they can withdraw it by replying STOP. The guardian's use of the service is based on art. 6(1)(b).
• Consent records (IP address, browser user agent, time, wording version): we keep these as proof that a person agreed to receive texts, on the basis of a legal obligation to be able to demonstrate consent (art. 6(1)(c)) and our legitimate interest in defending legal claims and preventing abuse (art. 6(1)(f)).
• Text messages: see the AskErina Guard alerts SMS Terms.

Call for me (when available)

At your request, Erina calls a business (restaurant, clinic, shop or service) on your behalf. She says at the start that she is an AI and that the call is recorded and transcribed. She calls businesses only, never private individuals.

• What we collect: your request and the brief you confirm, the business's phone number, a transcript of the call, call time and duration, and the result we report back to you.
• Why and legal basis: to carry out the call you asked for (art. 6(1)(b)). For the business and the people who answer, our legitimate interest in completing the call you requested (art. 6(1)(f)), balanced against their rights.

Security and legal claims

Legitimate interest (art. 6(1)(f)) and legal obligations (art. 6(1)(c)).

We do not sell or share personal information for cross-context behavioral advertising.

Mobile information is not shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

Automated scam verdict

During a screened call, software scores whether the call looks like a scam and may end the call politely and alert the user or guardian. This is an automated decision that has no legal effect on the caller beyond ending the call. It can be wrong. The user or guardian can review the summary, and a human can review a decision on request (see Your rights).

Who processes data for us (processors, by category)

• Twilio (telephony: call routing and text messages).
• Google (Gemini: speech-to-text and large language model for conversation and scam assessment; Google sign-in).
• Apple (Sign in with Apple).
• Cloudflare (network, security and delivery of our websites).
• Supabase (database and hosting of our data).

Processors act on our instructions under data processing agreements.

Transfers outside the EEA/UK

Our processors may be located in the United States. Where personal data of people in the EEA or UK is transferred there, we rely on the EU-US Data Privacy Framework (for certified recipients) or Standard Contractual Clauses.

Retention

Call transcripts, call records, summaries and scam alerts are deleted automatically 30 days after the call; a scheduled job removes expired records daily. We do not keep call audio: by default only the transcript is kept, and we do not store recording files. Our telephony provider handles call media only to route the call. Invitations and consent records that are not completed (the one-time code is never confirmed) expire after 30 days. Completed consent records, including the IP address and browser user agent stored with them, are kept as proof of consent for as long as protection is active and for the period needed to defend legal claims. If you delete your account, your account data is deleted with it.

Your rights

Where GDPR applies you may request access, correction, deletion, restriction, portability and objection (including to processing based on legitimate interest), withdraw consent at any time, and ask for human review of an automated decision. You may complain to a supervisory authority; in Spain this is the Agencia Española de Protección de Datos (AEPD, www.aepd.es). Write to the contact above.

Notice at collection for California residents (CCPA/CPRA)

We collect the categories listed above: identifiers (name, phone, email), call transcripts and summaries, and inferences (scam assessment), for the purposes above. We do not sell or share personal information. The service is for adults 18 and older and we do not knowingly collect data from anyone under 18. California residents may request to know, delete and correct their personal information and may not be discriminated against for doing so; use the contact above.

Minors

AskErina is not for anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor's data has reached us, write to the contact above and we will delete it.

Your control

A protected person can reply STOP at any time to end protection. Callers, businesses and others can ask us to delete data at the contact above.