Privacy Policy for C-Trace Mobile Android APP

Last updated: 29-05-2026

C-Trace Mobile ("the App", "we", "us") is a forensic Call Detail Record (CDR) analysis tool developed by C-Trace / CDR Softwares for use by law-enforcement officers in India. This Privacy Policy explains what information the App collects, how it is used, and the safeguards in place.

By installing and using the App, you agree to the terms below.

1. Who we are

C-Trace Mobile is published by C-Trace / CDR Softwares.

• Support phone: 9100111666
• Support email: [email protected]
• Website: https://cdrsoftwares.com

2. What data we collect

We collect the minimum data necessary for the App to function. The App is designed to run almost entirely on your phone — CDR records you import never leave your device.

2.1 Data you provide directly

• Your registered mobile number — entered at login. Used to authenticate you against C-Trace's registered-officer database.
• One-Time Password (OTP) — received by you on WhatsApp on your registered number and entered into the App to complete login.
• App-lock PIN (optional) — a 4-digit PIN you can set inside the App. The PIN is never transmitted to our servers; only a salted SHA-256 hash of it is stored on your device.

2.2 Data collected automatically

• Device identifier — a random 16-character identifier generated by the App on first launch and stored on your device. It is sent with login requests so we can enforce single-device sign-in. It is not Android Advertising ID, IMEI, or any system-supplied identifier.
• Profile information — your name, police-station, district and state, as recorded against your mobile number in our registered-officer database, are sent back to the App after successful login and displayed in your Profile screen.

2.3 Data sent to our servers during normal use

When you use specific features, the App sends the following to api.cdrsoftwares.com:

• Cell tower IDs — to resolve a tower's address, latitude and longitude. Only the cell ID is sent; the call timestamp, parties and duration stay on your device.
• Phone numbers from CDRs (B-party numbers) — when you open an Analysis report (Common Numbers, Pre-Analysis Report, Find New Numbers etc.), the App may look up names for the contacted numbers. Only the phone number is sent; no record of who called whom or when.

2.4 Data sent to third-party services

• OpenStreetMap (tile.openstreetmap.org) — when you view the offline map (Geo Analysis, Common Locations, Meeting Points), the App downloads map tiles for the area being shown.
• OSRM routing (router.project-osrm.org) — when you enable road-routing in Geo Analysis, pairs of latitude/longitude points are sent so OSRM can compute the road between them.

2.5 What we do NOT collect

• We do not upload your CDR files, call records, SMS contents, or any other data parsed from CDRs.
• We do not collect your Android Advertising ID or any other Google-supplied identifier.
• We do not access your contacts, call log, SMS inbox, location services, microphone, or camera.
• We do not use third-party analytics, advertising, or tracking SDKs.

3. How we use the data

Data	Purpose
Mobile number + OTP	Verify you are a registered C-Trace officer
Device identifier	Enforce single-device sign-in (so one account cannot be used on multiple phones at the same time)
Profile info	Display your account in the App
Cell IDs	Resolve tower addresses for reports and maps
Phone numbers (B-party)	Look up caller names for Analysis reports

4. Where the data goes

• Servers: api.cdrsoftwares.com (hosted in India).
• Third-party services: OpenStreetMap (Germany), OSRM (Germany).
• We do not sell, rent, or share your data with advertisers, data brokers, or any other third parties.

5. Where the data stays

• Imported CDRs stay on your phone in the App's private storage. They are not backed up to Google Drive (we disable Android auto-backup for this reason).
• Caller-name and tower-address lookups are cached on your phone so the same number / cell ID is not looked up twice.
• Login session, PIN hash, and device identifier are stored in the App's private SharedPreferences.

When you sign out, the login session is cleared. When you uninstall the App, all locally stored data is removed by Android.

6. Security

• All network traffic to api.cdrsoftwares.com uses HTTPS.
• Your PIN is never stored in plain text — only a salted SHA-256 hash.
• The App enforces single-device sign-in: only one phone can be signed in to your account at a time.
• You can call support on 9100111666 to release your account from a lost or stolen device.

7. Data retention

• Login sessions persist until your trial / plan expires or you sign out.
• Cached lookups (cell addresses, caller names) persist until you uninstall the App or clear app data.
• Imported CDRs persist until you delete them inside the App or uninstall.
• Registered-officer profile data is retained by C-Trace for as long as your account is active. To delete your account permanently, contact support.

8. Your rights

You may at any time:

• Sign out from inside the App (Profile → Sign out).
• Set or remove a 4-digit PIN lock from inside the App.
• Delete imported CDRs individually or in bulk from the home screen.
• Clear all local data by uninstalling the App, or via Android Settings → Apps → C-Trace Mobile → Clear data.
• Request deletion of your registered-officer account and all server-side data by calling support on 9100111666.

9. Children's privacy

C-Trace Mobile is intended for use by authorised law-enforcement officers and is not directed at children under 18. We do not knowingly collect any data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent change. Continued use of the App after an update constitutes acceptance of the revised policy.

11. Contact

For questions, complaints, or data-deletion requests:

Phone: 9100111666

Email: [email protected]