CallVault

I did not build a way around Android's call-recording limits.

Android closed that door to ordinary applications after Android 10, and pretending otherwise produces software that records silence and a user who finds out afterwards. So CallVault treats capture as an abstraction with two honest strategies behind it instead.

A RecordingSource interface, two implementations.

One is a microphone foreground service that needs no root. The other is a folder watcher that ingests an external recorder's output on a rooted device. Which one you get depends on the phone in your hand rather than on a promise made on a page.

Neither of them is silent, and that is deliberate.

Recording runs behind a live banner and a persistent notification, so the person holding the phone can see it happening. An application that hides a recording is a different product with a different purpose, and this one is for recording your own calls.

The library is offline-first, and SQLite is the source of truth.

A Drift database on the device holds the record of what exists. Sync is a separate, idempotent, multi-stage state machine with retry and backoff, which means a failed upload is a state to resume from rather than a row that quietly vanishes.

That distinction is the whole reliability story.

A design where the server is the source of truth and the device holds a cache is a design where a bad afternoon on a train costs you a recording. Turning it round costs storage on the handset and buys a system that cannot lose something it already has.

Where the audio goes is worth reading twice.

Recordings upload to self-hosted FilesHub storage. Only metadata syncs to your own Supabase project, behind Postgres row-level security. There is no third-party analytics in the application at all.

The server is yours.

That is more setup than signing into somebody's account, and it is the only version of this that is defensible for a recording of a phone call, because the alternative is a private conversation sitting on infrastructure neither party to it has ever heard of.

Around that sit the ordinary things a library needs.

Playback with seek, skip and speed. Search across the number, the contact and your own notes, with a stats dashboard over the top. Notes are searchable because a call is usually easier to find by what was said in it than by the number that made it. An optional biometric lock on the application, and a Wi-Fi-only control for uploads.

The admin dashboard is the same codebase compiled for the web, which is the reason there is one at all.

The Flutter side is Riverpod and go_router with Material 3 on top, freezed for the models and just_audio for playback, with GitHub Actions doing the builds. One codebase, two outputs.

What it cost is distribution.

It is sideloaded by design, because the Play Store does not permit silent call recorders, so this is an application somebody installs deliberately rather than one they come across. It is Android-only. It is in development rather than finished, and saying so is cheaper than having it discovered.

That last sentence is on the page for the same reason the banner is on the screen.

It is at callvault.aoneahsan.com.

Whether recording a particular call is lawful where you are standing is a question about your jurisdiction and not about this software, and no application is able to answer it for you.