Privacy Policy

ScamCheck AI is an AI-powered scam detection application designed to help individuals identify and report scam messages, links, QR codes, calls, and emails. We are committed to protecting your privacy while building a safer digital community across the GCC, India, Bangladesh, and the Philippines.

This Privacy Policy explains what data we collect, why, how it is stored, your rights, and how we comply with UAE PDPL, Saudi Arabia PDPL, India DPDP Act 2023, Bangladesh Digital Security Act 2018, Philippines Data Privacy Act 2012 (Republic Act No. 10173), and Apple App Store and Google Play Store requirements.

On your first launch, ScamCheck displays the following notice before any data is processed:

You must acknowledge this before using the app. This satisfies consent requirements under Apple App Store guidelines, Google Play Store Data Safety requirements, UAE PDPL, India DPDP Act 2023, Bangladesh Digital Security Act 2018, and Philippines Data Privacy Act 2012.

ScamCheck collects data through two distinct, clearly defined triggers. We do not collect your name, phone number, email, device identifiers, IP address, location, or any information that identifies you as a user.

4.1 Trigger 1 — AI-Detected Scam (Automatic)

When you submit content for scanning and our AI returns a risk score of 70% or higher, the following is automatically stored:

• The scanned content (message text, URL, QR data, or phone number submitted)
• The AI-generated risk score
• The detected scam category
• Date and time of scan — no user identity attached
• Data source tag: "ai_detected"

4.2 Trigger 2 — User-Reported Scam (Intentional)

When you manually submit a report via "Report a Scammer" or "Report Scam", the following data is initially recorded. However, a reported phone number or email address will only be retained if independently reported by multiple users. Single, uncorroborated reports are discarded.

• The reported phone number or email address
• The selected scam category (e.g., Scam Call, Phishing Email, Fake Offer)
• Your custom description of the scam (if provided)
• Date and time of the report
• Data source tag: "user_reported"

4.3 Data We Never Collect

• Your name, personal email address, or phone number as a user
• Device identifiers, advertising IDs, or IP addresses
• Location data of any kind
• Contacts, photos, microphone, or camera (QR scanning is in-session only, never stored)
• Browsing history, app usage behaviour, or third-party analytics
• Payment or financial information of any kind

• AI-Detected Scans (Trigger 1): Retained for as long as reasonably necessary for scam threat intelligence and community protection, subject to periodic review.
• User-Reported Scams (Trigger 2): Where a reported identifier meets the corroboration threshold, retained as long as reasonably necessary. Uncorroborated reports are discarded immediately.
• Content Scoring Below 70%: Immediately discarded, never stored.

ScamCheck periodically reviews retained data to assess whether continued storage remains necessary. Data that no longer serves an active intelligence function will be deleted.

• To detect and flag scam content for the protection of all users
• To train, improve, and validate our AI scam detection models
• To build a community-driven scam intelligence database for the GCC, India, Bangladesh, and the Philippines
• To generate anonymised regional scam trend reports shown in the Scam Alerts feature
• We do not sell, rent, or share data with third parties for commercial or advertising purposes
• We do not use data for user profiling or behavioural targeting of any kind

We do not sell or rent any data. We may share anonymised, aggregated scam intelligence with:

• Government cybersecurity agencies (e.g., UAE CIRT, CERT-In India, BGD e-GOV CIRT Bangladesh, DICT Philippines) for public safety
• Law enforcement agencies when legally required by court order or applicable law
• Our secure cloud infrastructure provider, solely for storage and processing

Depending on your jurisdiction, you have the right to:

• Know what scam content data (if any) was stored from your submission
• Request deletion of specific data you submitted (e.g., a specific phone number or message)
• Withdraw consent at any time by uninstalling the app — no further data is collected
• Lodge a complaint with your local data protection authority

We may update this Privacy Policy periodically. When we do, we will update the "Last Updated" date and notify users via an in-app notice on the next launch. Continued use of ScamCheck after any changes constitutes your acceptance of the updated policy.

This Privacy Policy is publicly accessible at www.scamcheck-ai.com/privacy-policy as required by Apple App Store and Google Play Store submission guidelines.