1. ABOUT THIS POLICY & LEGAL ARCHITECTURE
Shieldloom is a consumer communication-safety and family-protection product operated by Navneet Trust under the trade name Gala Intelligence. This Privacy Policy explains how Personal Data is processed when you use the Shieldloom mobile application, related web pages, support channels and family features (collectively, "Shieldloom" or the "Service").
This is a product-specific privacy notice and should be read together with the Gala Intelligence Privacy Policy. Where this Policy is more specific about Shieldloom processing, this Policy governs that product-specific processing. The Gala Intelligence Privacy Policy continues to apply to company-level processing that is not specifically addressed here.
Shieldloom operates across mobile platforms whose technical capabilities and permission models differ. The Personal Data available to Shieldloom, and the features that can be provided, may therefore differ between Android, iOS, device versions, jurisdictions, account settings and permissions granted by the user.
Gala Intelligence complies with privacy and data-protection law to the extent it applies to the relevant processing, person and jurisdiction. References to particular laws are subject to their applicable scope and commencement.
2. WHOSE PERSONAL DATA MAY BE PROCESSED
Depending on how Shieldloom is used, Personal Data may relate to:
- registered Shieldloom users and account holders;
- adult family members who accept an invitation to join a Family Dashboard;
- children or minors whose use is managed by a parent or lawful guardian where Shieldloom supports that functionality and applicable law permits it;
- individuals whose phone numbers, caller labels, spam reports or other caller-intelligence records are processed even though they do not have a Shieldloom account; and
- people who contact Gala Intelligence for support, correction, delisting, privacy or grievance requests.
3. PRIVACY ROLES
For core Shieldloom consumer functionality, Gala Intelligence generally determines the purposes and essential means of processing and therefore acts as the relevant controller, Data Fiduciary or equivalent role under applicable law.
Where another person provides Personal Data to Shieldloom – for example through a family invitation, a spam report or a correction request – Gala Intelligence assesses its role and obligations for the relevant processing activity. A user submitting information about another person remains responsible for using Shieldloom lawfully and must not use the Service for stalking, harassment, covert surveillance or other unlawful purposes.
4. PERSONAL DATA SHIELDLOOM MAY PROCESS
| Category | Examples | Typical purpose |
|---|---|---|
| Account & profile data | Name, mobile number, email address, account identifier, authentication information, language and preferences | Registration, authentication, account administration, support and service communications. |
| Device & app data | Device model, operating-system and app version, IP address, language/region, crash logs, diagnostics, notification token and security events | Operate, secure, troubleshoot and improve Shieldloom. |
| Phone-number & caller-intelligence data | Phone numbers, caller labels, category information, number lookups, spam or telemarketing indicators, user reports and correction status | Caller identification, spam awareness, number intelligence, correction and service quality. |
| Communication-related metadata | Where supported by the operating system, permitted by applicable platform rules and enabled by the user, limited call-event information such as phone number, date or time, direction, duration and applicable spam or caller category | Provide supported call-history functions, statistics, spam detection, family safety insights and related features. Shieldloom does not represent that the same call-related data is available on every device or operating system. |
| Contacts / safe-list data | Contact names and phone numbers made available through an optional contacts permission or user-selected import, where the relevant feature is enabled | Recognise known contacts, maintain safe lists, support family functions and provide other user-requested contact-based features. Where a feature processes contacts only on the device, such information is not uploaded to Gala Intelligence unless the relevant feature specifically requires and discloses such processing. |
| Family Dashboard data | Family-group membership, member identifier, relationship or role where provided, invitation and acceptance status, enabled protections, safety statistics, flagged-number information, recommendations and other information a participating member makes available to the Family Dashboard | Create and administer family groups and provide family safety dashboards, controls, summaries, alerts and recommendations. The information available may differ between operating systems, permissions and member settings. |
| Community & correction submissions | Spam reports, number categories, comments, correction/delisting requests, evidence and support correspondence | Maintain and improve caller intelligence, investigate reports or abuse, correct records and resolve disputes. |
| Optional uploaded content | Images or documents a user voluntarily submits to an optional safety, authenticity or support feature, if offered | Provide the requested feature, investigate a report, troubleshoot the Service, prevent abuse or provide support. This category applies only where Shieldloom actually offers a feature requiring such content. |
| Subscription & transaction data | Subscription plan, entitlement, purchase status, transaction or invoice reference, app-store subscription status, refund status and applicable tax information | Activate and administer premium features, verify subscriptions, process permitted refunds and satisfy accounting or tax requirements. Payment-card details processed directly by an app store or payment provider are not received by Gala Intelligence unless expressly stated. |
| Usage & analytics data | Feature interactions, app events, performance information, error information and analytics events, subject to applicable permissions, settings and consent requirements | Product reliability, diagnostics, security, service improvement and permitted analytics. |
| Consent, permission & privacy-request records | Consent status, permission selections, withdrawal records, privacy requests, grievance references, correction requests and records reasonably necessary to demonstrate how a request was handled | Manage user choices, respond to privacy requests and grievances, demonstrate compliance and maintain appropriate audit records. |
5. DEVICE PERMISSIONS & PLATFORM DIFFERENCES
Shieldloom requests device or operating-system permissions only where a feature requires access that the platform does not otherwise provide. The permissions actually requested depend on your device, operating system, country, Shieldloom version and enabled features.
You may decline or later revoke optional permissions through your device settings, although doing so may limit or disable the associated feature.
| Permission / platform capability | How it may be used | Choice & limitation |
|---|---|---|
| Caller ID / call screening / phone-state capabilities | Identify or classify incoming calls, show warnings, apply supported call-protection features or generate safety statistics. | Capabilities differ materially between Android and iOS. On Android, supported call-screening functionality may operate through system-provided call-screening capabilities or roles. On iOS, caller-identification and blocking functionality may operate through Apple-supported caller-identification or Call Directory capabilities. Shieldloom does not receive the same call information on every platform. Enabling or selecting Shieldloom for the relevant system capability may be necessary for the feature to operate. |
| Call history or call-related metadata | Where permitted by the operating system, applicable platform rules and your enabled settings, process limited call-related information such as a phone number, date or time, call direction, duration or applicable caller/spam classification for supported history, statistics, spam-detection or family-safety features. | Contact access is optional and may be revoked through device settings. Where supported, Shieldloom may use system-provided selection mechanisms or request only the level of contact access reasonably necessary for the relevant feature. Denying access may affect only features that require contact information. |
| Contacts | Recognise known contacts, maintain safe lists, support family setup or provide other contact-based features where offered. | Contact access is optional and may be revoked through device settings. Where supported, Shieldloom may use system-provided selection mechanisms or request only the level of contact access reasonably necessary for the relevant feature. Denying access may affect only features that require contact information. |
| Notifications | Deliver caller or spam alerts, security notices, family invitations, safety recommendations, subscription information and other service-related messages. | Notification permissions and preferences can be changed through device or app settings. Disabling notifications does not necessarily prevent use of other Shieldloom functionality. |
| Camera / photos / files | Where an applicable Shieldloom feature is offered, allow you to voluntarily select or upload an image, document or other file for that feature or for a support request. | Shieldloom does not require unrestricted access to your photo library or files for ordinary caller-identification or spam-protection functionality. Where supported, system-provided file or photo-selection tools may be used to limit access to content you select. |
If Shieldloom introduces a feature that requires access to an additional category of device data or content, Gala Intelligence will provide any notice, permission request or consent required by applicable law and applicable platform requirements before using that access for the new purpose.
6. SHIELDLOOM FUNCTIONS & PURPOSES OF PROCESSING
6.1 Caller identification, spam awareness & call protection
Shieldloom may process phone numbers, caller categories, user reports, permitted source information, service signals and limited call-event metadata to identify incoming numbers, show caller or spam information, support blocking or screening features where technically available, and maintain spam-call history or safety statistics.
6.2 Family Dashboard & recommendations
Where the Family Dashboard is enabled, Shieldloom processes family-group membership, account roles, enabled permissions and safety information made available by each member device. Depending on platform capabilities and the member's settings, the dashboard may display safety statistics, detected or blocked spam activity, flagged-number history, protection settings and recommendations.
Family Dashboard visibility is not identical across Android and iOS and is not guaranteed to include the same information for every member. Shieldloom does not represent the Family Dashboard as a complete record of a person's communications or as a covert-monitoring tool.
6.3 Community reporting, correction & data quality
Users may report numbers, suggest categories or challenge existing labels. Gala Intelligence may use those submissions together with other permitted information to investigate reports, detect coordinated abuse, improve classification quality and correct records.
6.4 Image/Document safety features
Before submission, the feature identifies the content being sent, its purpose, any external assessment provider and its retention period. Submission for an assessment does not, by itself, authorise use of the content for unrelated model training or another product. Users should remove information unnecessary for the requested check and have appropriate authority to submit information relating to others.
6.5 Account, security, support, billing & legal compliance
Gala Intelligence also processes Personal Data to authenticate users, administer accounts, prevent abuse, investigate security incidents, provide support, manage subscriptions, keep required financial or legal records, respond to lawful requests, and establish, exercise or defend legal rights.
7. LAWFUL GROUNDS & USER CHOICES
Gala Intelligence processes personal data only where permitted by applicable law. The legal basis or permitted ground depends on the jurisdiction and the relevant processing activity.
In India, processing may be based on consent or another permitted legitimate use under applicable data-protection law. In jurisdictions that recognise additional legal bases, processing may also be necessary to provide a requested service or perform a contract, comply with a legal obligation, protect rights or security, or pursue a legitimate interest where that basis is available and applicable.
Where a mobile operating system requires a device permission, role or platform setting, enabling that permission or capability allows the device to make the relevant information or functionality available to Shieldloom. A device or operating-system permission does not by itself replace any consent, notice or other lawful basis separately required under applicable law.
Users may revoke optional permissions through device settings. Revoking a permission may limit or disable the associated feature. Where processing is based on consent, withdrawal does not affect the lawfulness of processing carried out before withdrawal, and Gala Intelligence will cease consent-based processing within the period required by applicable law unless continued processing is otherwise permitted or required.
Marketing communications may be declined using the unsubscribe method provided in the communication or applicable account settings.
Where consent is required, the relevant notice identifies the information, purpose and available choices before consent is requested. Optional family sharing, marketing and other separate purposes are not authorised merely by accepting the Service terms.
8. INDIRECT COLLECTION, TRANSPARENCY & NON-USERS
Shieldloom may process phone-number-related Personal Data about individuals who do not have a Shieldloom account and may never have interacted directly with Gala Intelligence. This is inherent to caller identification and spam-intelligence services, where an incoming number must sometimes be assessed before the number owner has any relationship with Shieldloom.
8.1 Information that may be processed
- a phone number and associated caller or business identity information;
- spam, telemarketing, scam-risk or other caller-category information;
- community reports, correction history and evidence relevant to a classification;
- information associated with the number from proprietary, licensed, public or otherwise authorised sources; and
- derived or probabilistic indicators generated from permitted inputs.
8.2 Why non-user information may be processed
Non-user information may be processed to provide caller identification, spam detection, communication-safety warnings, number reputation information, data-quality review, abuse prevention and correction/delisting mechanisms. Gala Intelligence does not use a non-user record solely because it exists in Shieldloom to send that person targeted marketing.
8.3 Sources
Information relating to callers, phone numbers or other non-users may be obtained from sources including Shieldloom users and community reports; information independently maintained by Gala Intelligence; historical service signals retained for a permitted purpose; licensed, contracted or authorised data providers; publicly available information that Gala Intelligence is permitted to process; and other lawful sources relevant to caller-identification, spam detection, fraud or abuse prevention, correction and caller-safety functionality.
Information from these sources may be combined, compared or evaluated to generate or maintain caller-intelligence information, subject to applicable law and the accuracy, correction, retention and other safeguards described in this Privacy Policy.
Gala Intelligence may protect confidential source arrangements, source-selection or weighting methods, proprietary analytical techniques, security-sensitive processes and trade secrets, except where disclosure is required by applicable law.
8.4 Accuracy, correction, delisting & suppression
An affected person may ask Gala Intelligence to review, correct, delist or suppress information associated with their phone number by contacting privacy@galaintelligence.com or through an available Shieldloom correction/unlisting channel. Gala Intelligence may require reasonable verification of number ownership, identity or authority before changing a record.
Gala Intelligence will implement corrections, erasure or other action where required. Where appropriate, it may also remove a caller label from display or retain a minimal suppression record to prevent inappropriate reintroduction. Suppression restricts use or display and is not the same as deletion.
Any retained suppression record is limited to the information necessary for its documented purpose and is reviewed under Section 13. Action within Shieldloom does not directly alter an independent external source.
8.5 Retention & rights
The retention periods and exceptions in Section 13 also apply to non-user records. A person's lack of a Shieldloom account does not justify indefinite retention. Records are reviewed for relevance, age, reliability and continued necessity. Users and non-users may exercise applicable rights through the process in Section 16.
9. FAMILY DASHBOARD, ADULT MEMBERS & CHILDREN
Shieldloom is designed to support family-safety use, but family features must be used transparently and lawfully.
- Adult members should be added through an invitation or acceptance process where the product supports it. An adult member may leave or revoke participation through available account or support controls.
- A family administrator must not use Shieldloom for covert surveillance, coercive control, stalking, harassment or to misrepresent the scope of data visible through the Family Dashboard.
- Where a child or minor is linked to a family feature, the parent or lawful guardian is responsible for providing any consent or authorisation required by applicable law and for using the feature in the child's interests.
- Shieldloom does not use child-related Personal Data for targeted advertising or unrelated commercial behavioural profiling where such use is prohibited by applicable law.
- Family Dashboard data is limited by platform permissions and technical availability. A family administrator may therefore receive different or less information from an iOS member than from an Android member.
A child must not independently accept contractual terms where applicable law does not permit the child to do so. Gala Intelligence may restrict child accounts, family features or categories of information made available through the Family Dashboard where necessary to comply with applicable law or platform requirements.
10. AUTOMATED CLASSIFICATION & ADVISORY OUTPUTS
Shieldloom may use statistical models, rules, automated matching, machine-learning methods and community signals to generate caller labels, spam indicators, risk categories, recommendations and other safety Outputs.
These Outputs are probabilistic and source-dependent. They may be incomplete, stale, incorrectly attributed or otherwise inaccurate. A spam or risk label is not definitive proof that a person or business has committed fraud, a crime or other wrongdoing, and it should not be presented publicly as such.
Shieldloom Outputs are intended for communication safety and awareness. They are not intended to be the sole basis for credit, employment, housing, insurance, law-enforcement, medical, legal or other decisions that materially affect a person where such use is prohibited or regulated.
12. INTERNATIONAL PROCESSING & DATA TRANSFERS
Gala Intelligence is based in India and may use infrastructure or service providers in India and other jurisdictions. Personal Data may therefore be processed outside the country in which a user or non-user is located.
Where applicable law restricts international transfers, Gala Intelligence will use an applicable transfer mechanism, contractual safeguard, adequacy framework, localisation arrangement or another legally permitted method.
13. RETENTION, DELETION & LEGAL HOLDS
Shieldloom does not use a single retention period for all data. Retention depends on the feature, account status, product settings, platform capability, data quality, security needs, correction/dispute history, legal obligations and applicable limitation periods.
| Category | General retention approach |
|---|---|
| Account & profile data | Retained while the account is active. Following account closure or a valid deletion request, information that is no longer required is ordinarily removed from active systems within 30 calendar days, subject to information that must be retained for security, legal, tax, dispute-resolution or other permitted purposes. |
| Call/spam event history & family safety metrics | Ordinarily retained for up to 12 months from the relevant event or collection, where needed to provide history, statistics, recommendations or Family Dashboard functionality. Information may be deleted earlier where the relevant feature is disabled or a valid deletion request applies, unless continued retention is permitted or required by law. |
| Community reports & caller classifications | Reviewed at least every 12 months for continuing accuracy, relevance and necessity. Caller-intelligence information should not ordinarily remain in active use for more than 3 years without revalidation, refresh, a new supporting signal or another documented continuing basis for retention. Information that is no longer relevant or sufficiently supported may be corrected, suppressed, anonymised or deleted as appropriate. |
| Contacts / safe-list data | Retained only while the relevant contact or safe-list feature is enabled or otherwise required to provide the requested functionality. Server-side copies, where any are maintained, are ordinarily removed within 30 calendar days after the feature is disabled, permission is withdrawn or the account is closed, unless continued retention is permitted or required by law. Contacts processed solely on the device are not subject to server-side retention by Gala Intelligence. |
| Optional uploaded images/documents | Ordinarily removed within 30 calendar days after completion of the requested check or closure of the relevant support matter. Where the material is reasonably required for a security, abuse, fraud or dispute investigation, it may be retained for up to 90 calendar days after the matter closes, or longer where a legal preservation obligation applies. |
| Family-group data | Retained while the relevant family group or member participation remains active. Information that is no longer required is ordinarily removed from active systems within 30 calendar days after a member leaves, participation is revoked or the family group is terminated, subject to security, dispute-resolution and legal-retention requirements. |
| Security, authentication & diagnostic logs | Retained for a rolling period of 12 months from the recorded event, subject to any longer period required for an identified security incident, investigation, legal hold or other applicable law. |
| Correction, delisting & grievance records | Necessary records are retained for 3 years after the request, grievance or dispute is closed, where needed to demonstrate appropriate handling, respond to claims or regulatory enquiries, or establish, exercise or defend legal rights. Minimum suppression information necessary to honour a continuing delisting, objection or restriction may be retained for as long as reasonably necessary to prevent inappropriate reintroduction of the information. Excess identity-verification material is ordinarily removed within 30 calendar days after verification or case closure where it is no longer required. |
| Billing & transaction records | Necessary billing, accounting, invoice and transaction records are retained for 8 financial years from the end of the financial year to which the relevant records relate, or for any longer period required by applicable tax, accounting, audit, investigation or legal requirements. |
| Backups & legal holds | Ordinary backup copies expire or are overwritten within 90 calendar days after information is removed from active systems. Backups remain access-restricted and are not used for routine processing. Records subject to a legal hold are retained for the duration of the applicable litigation, investigation or preservation requirement; such holds are reviewed at least every 6 months, and affected records are ordinarily removed within 30 calendar days after the hold ends unless another retention requirement applies. |
When Personal Data is no longer required and no lawful retention ground applies, Gala Intelligence will delete, anonymise or otherwise dispose of it according to the relevant system, product setting and legal requirements. Aggregated or genuinely anonymised information that no longer identifies an individual may be retained for analytics, security or service-improvement purposes.
14. CORRECTION, REVIEW, DELISTING & DATA QUALITY
Gala Intelligence takes reasonable measures appropriate to Shieldloom to maintain the accuracy, completeness and consistency of personal data where those qualities are material to caller identification, spam classification, family-safety functionality or other uses of the information.
Users and affected non-users may submit a correction, review, suppression or delisting request through available in-product controls or by contacting privacy@galaintelligence.com. Gala Intelligence may request information reasonably necessary to verify the request, including where the request concerns control of a phone number, business identity or a disputed community report.
Where applicable law requires correction, completion, updating or erasure of personal data, Gala Intelligence will process the request in accordance with those requirements. Gala Intelligence may also review supporting information, correct or update a Shieldloom-controlled classification, suppress information from display, remove or relabel a classification, or mark information for further verification.
A delisting, suppression or erasure request may be declined or limited where Gala Intelligence has a lawful and continuing reason to retain or process the relevant information, including where retention is necessary for the applicable purpose or required by law.
Where information originates from an independent third-party source, Gala Intelligence may correct, suppress or cease using the information within systems under its control where appropriate, but may not be able to alter or delete information maintained independently by that third party.
15. SECURITY & PERSONAL DATA BREACHES
Gala Intelligence maintains reasonable technical and organisational safeguards appropriate to the nature and risk of Shieldloom processing. Depending on the system, these may include access controls, secure transmission, authentication, logging, monitoring, backups, secure-development practices, vulnerability management, personnel confidentiality and incident-response procedures.
No application or information system can be guaranteed absolutely secure. If Gala Intelligence becomes aware of a Personal Data Breach, it will investigate and take appropriate containment and remedial action. Required initial notifications will be made without delay; where applicable, detailed regulatory follow-up will be provided within 72 hours of awareness unless an authorised extension applies. Any shorter reporting deadline remains effective.
Notices to affected individuals will explain the incident, likely effects, protective action and a contact for assistance, using available information and providing updates as appropriate.
16. PRIVACY RIGHTS
Depending on your location, the nature of the processing and applicable law, you may have rights concerning Personal Data relating to you. These may include the right to:
- obtain information about whether and how Personal Data relating to you is processed;
- request access to Personal Data relating to you;
- request correction, completion or updating of inaccurate or incomplete Personal Data;
- request deletion or erasure where applicable;
- withdraw consent where processing is based on consent, without affecting prior lawful processing;
- restrict or object to certain processing where applicable;
- request portability where applicable;
- exercise rights relating to certain automated decision-making or profiling where applicable;
- appeal certain privacy decisions where applicable;
- lodge a grievance or complaint with Gala Intelligence or a competent authority;
- nominate another individual to exercise applicable rights in the event of death or incapacity, subject to the required conditions; and
- obtain information about recipients, including recipient identities and information shared where required.
Send requests to privacy@galaintelligence.com, identifying Shieldloom, the relevant phone number or account identifier, and the action requested. A Shieldloom account is not required. Do not send passwords or one-time passcodes.
Gala Intelligence may request proportionate evidence of identity, number ownership or authority. Nominees and lawful guardians may be asked to establish their authority. For nomination requests, Gala Intelligence will explain the information needed to record the nomination or act on it. Not every right applies in every jurisdiction or to every processing activity.
17. WEBSITE TECHNOLOGIES & COMMUNICATIONS
Shieldloom does not currently use non-essential cookies or similar tracking technologies for advertising or behavioural marketing purposes.
Shieldloom websites or underlying service providers may use strictly necessary technical mechanisms, such as session storage or similar technologies, where required for security, website operation, authentication or essential functionality.
If Gala Intelligence introduces analytics, advertising cookies or other non-essential tracking technologies in the future, this Privacy Policy and any applicable cookie notice or consent mechanism will be updated as required by applicable law.
Gala Intelligence may send service-related, transactional, security or account communications where necessary to operate Shieldloom or communicate important information about the Service.
Marketing or promotional communications, where offered, are optional and may be declined using the unsubscribe mechanism provided in the communication or applicable account settings. Opting out of marketing communications does not prevent Gala Intelligence from sending necessary service, security, transactional or legally required communications.
18. CONTACT, GRIEVANCES & CHANGES
- Privacy, correction and delisting requests: privacy@galaintelligence.com
- General support: support@galaintelligence.com
- Address: Cabin No. B-8, 12th Floor, Office-1204, Gala Empire, Opp. Doordarshan Center, Ahmedabad - 380059, Gujarat, India
To submit a grievance, explain the issue, identify the relevant Service and provide a contact address and any existing request reference. Include only information reasonably necessary to investigate the matter.
Gala Intelligence will respond to grievances within 90 calendar days of receipt, or sooner where required by applicable law. Where additional information or verification is reasonably necessary to process the grievance, Gala Intelligence may request proportionate information or evidence. Any verification process will be limited to what is reasonably necessary and will not be used to improperly delay the handling of a grievance.
Gala Intelligence may update this Policy to reflect changes in Shieldloom features, operating-system capabilities, law, data sources, security practices or business operations. Material changes will be communicated through the app, website, email or another reasonable method where required. If a materially different processing purpose requires fresh consent or another legal step, Gala Intelligence will take that step where required.
