ColdCallBack to Home

Legal

Privacy Policy

Last updated: April 5, 2026

1. Overview

ColdCall ("we", "our", or "us") is an AI-powered legal study platform built for Filipino law students and operated by LoomaLabs. This Privacy Policy explains what information we collect when you use ColdCall, why we collect it, how it is used, and the choices you have over your data.

By signing in and using ColdCall, you acknowledge that you have read, understood, and agree to the practices described in this policy.

2. Google Sign-In

ColdCall requires you to sign in using your Google account. We have chosen Google Sign-In as our sole authentication method because ColdCall is built in close integration with Google's ecosystem of services — several of the features that power the platform operate within Google's infrastructure. Using Google Sign-In allows us to provide a seamless, secure experience without requiring you to create and manage a separate password.

When you sign in with Google, we receive the following information from Google via the OAuth 2.0 protocol:

  • Full name — used to personalize your dashboard and greetings within the app.
  • Email address — used as your unique account identifier to store and retrieve your cases, notes, and study progress.
  • Profile picture — displayed in the app header for your convenience.

We do not receive your Google password, access your Google Drive, Gmail, Google Calendar, or any other Google service beyond what is listed above. The sign-in scope is strictly limited to your basic profile information.

Google's handling of your sign-in data is governed by Google's Privacy Policy. You may review and manage which applications have access to your Google account at any time via your Google Account permissions page.

3. Information We Collect

Beyond what is received through Google Sign-In, we collect only the information necessary to deliver the features of the platform:

  • Case Content — When you upload a PDF or text file, or perform a citation search, the text content of the case is processed to generate your study materials (digest, flashcards, quiz questions, and Cold Call prompts). This content is associated with your account and stored so you can access it later.
  • Study Activity — We record when you generate a digest, complete a quiz, or finish a Cold Call session. This data is used to calculate your Bala score and track your overall study progress within the platform.
  • Subject Tags — Tags you assign to cases (e.g., "Civil Law", "Torts") are stored to help you organize and filter your case library.
  • Notes — Case notes you write are stored securely in your account so they persist across devices and sessions.
  • Local Browser Data — Certain preference data such as your weekly study schedule and sticky notes are stored in your browser's local storage. This data never leaves your device and is not transmitted to our servers.

4. How We Use Your Information

The information we collect is used exclusively to operate and improve the platform:

  • Authentication & Account Management — Your Google identity is used to create and maintain your account, ensure only you can access your data, and keep sessions secure.
  • AI Study Material Generation — Case text you provide is sent to an AI processing service to generate case digests, flashcards, quiz questions, and Cold Call session prompts. This processing happens at the time of your request and is not used to train AI models on your personal data.
  • Citation Search — When you search for a case by citation, your query is used to locate and retrieve the relevant case text from publicly available legal databases, which is then processed to generate your study materials.
  • Progress Tracking — Study activity records are used to calculate your Bala score and surface recently studied cases on your dashboard.
  • Platform Improvement — Aggregate, anonymized usage patterns may be used to identify bugs, improve features, and prioritize development. We do not use individually identifiable data for this purpose.

We do not sell, rent, share, or otherwise disclose your personal information to third parties for advertising, marketing, or any commercial purpose.

5. Third-Party Services

ColdCall relies on trusted third-party infrastructure to operate. These services process your data only as necessary to deliver the features of the platform:

  • Authentication Provider — Google OAuth 2.0 is used for sign-in. See Section 2 for full details.
  • Cloud Database — Your account profile, cases, digests, notes, and activity records are stored in a secure cloud database with row-level access controls, ensuring only you can read your own data.
  • AI Processing — Case text and your prompts are sent to an AI service to generate study materials. This service operates within Google's infrastructure. Content sent for processing is subject to the AI provider's API usage policies; it is not used to train models on your personal content.
  • Hosting & Delivery — The ColdCall web application is hosted on a cloud platform that serves the app to your browser. Standard access logs (IP address, request path, timestamps) may be retained by the hosting provider as part of normal infrastructure operations.

We do not integrate with advertising networks, analytics trackers, or social media platforms beyond what is listed above.

6. Codals — Third-Party Legal Content

The Codals Browser displays the text of major Philippine legal codes sourced from The LawPhil Project (lawphil.net), maintained by the Arellano Law Foundation. The codal texts are Philippine government issuances and are in the public domain.

No personal data is collected when you browse the Codals section. The codal texts are served as static files bundled with the application and do not involve any network requests to the Arellano Law Foundation or any other third party at the time of use.

ColdCall does not warrant that the codal texts are fully updated to reflect the latest amendments. Users are advised to verify provisions against official government sources (e.g., the Official Gazette of the Philippines at officialgazette.gov.ph) for any legal or professional purpose.

7. Data Retention

Your account information, cases, digests, notes, and activity records are retained for as long as your account remains active on the platform.

  • You may delete individual cases at any time from within the platform.
  • To request complete deletion of your account and all associated data, contact us at the email address listed in Section 10. We will process deletion requests within a reasonable timeframe.
  • Data stored in your browser's local storage (schedule, sticky notes) can be cleared at any time by clearing your browser data.

8. Security

We implement industry-standard security practices to protect your data, including HTTPS encryption for all data in transit, row-level security controls on the database so each user can only access their own records, and secure OAuth-based authentication that avoids storing passwords entirely. While we take reasonable precautions, no system is completely immune to security risks. We encourage you to use a secure Google account and to sign out of ColdCall when using shared devices.

9. Changes to This Policy

We may update this Privacy Policy from time to time as the platform evolves. When material changes are made, we will update the "Last updated" date at the top of this page. Continued use of ColdCall after changes are posted constitutes your acceptance of the revised policy. We recommend reviewing this page periodically.

10. Contact

For privacy-related questions, concerns, or data deletion requests, please contact LoomaLabs at looma.labs@gmail.com. We aim to respond to all inquiries within 7 business days.