Skip to content
Scam Verifier
HomePrivacyTermsAccessibility

Scam Verifier Privacy Policy

Last updated: Oct 7, 2026 | Effective: October 6, 2026

Read the terms of service
Contents1. Introduction and Scope2. Who Is Responsible for Your Personal Data3. Personal Data We Collect4. Information That Stays on Your Device5. How We Use Personal Data and Our Legal Bases6. Automated Assessments and Artificial Intelligence7. How We Disclose Personal Data8. International Data Transfers9. Data Retention10. Data Security11. Your Choices and Controls12. Your Privacy Rights13. Additional Information for Residents of Specific Jurisdictions14. Children15. Website Cookies and Third-Party Services16. Changes to This Privacy Policy17. Contact Us

KEY POINTS

(1) Photos and screenshots are read on your device. We do not upload them.

(2) For a Cloud Check, only the text you review and approve is sent through our servers to the configured AI service providers to produce an Assessment. We do not store it as a Cloud Check message record in our application database or application logs. If you separately include a copy in a Shared Case, feedback report or support message, that copy is handled as described in this Policy.

(3) We do not sell your Personal Data, we do not share it for targeted advertising, and we do not use your messages to train AI models.

(4) History is off by default. If you turn it on, it is stored only on your device.

(5) Family sharing happens only when you choose to share a specific item, and you can revoke it.

(6) You can delete your Account in the App at any time.

1. Introduction and Scope

1.1 This Privacy Policy explains how Schultz Corp Ltd. ("Company", "we", "us" or "our") collects, uses, discloses and protects Personal Data in connection with the Scam Verifier mobile application, the website at scamverifier.app, our support channels, and all related services (together, the "Service"). It also explains the choices and rights available to you.

1.2 This Privacy Policy applies to users of the Service in all countries where we make it available. Section 13 contains additional information for residents of the United States, the United Kingdom, Canada, Australia and Israel.

1.3 This Privacy Policy does not apply to third-party services, websites or apps, even if you access them through the Service (for example, a government reporting website listed in the Resources, or the messaging app that you use to share a summary). Those services are governed by their own privacy policies.

1.4 Capitalized terms that are used but not defined in this Privacy Policy have the meanings given to them in our Terms of Service, available at https://scamverifier.app/terms. In this Privacy Policy, "Personal Data" means any information relating to an identified or identifiable individual, and includes "personal information" and "personal data" as defined under applicable law. If this Privacy Policy and the Terms of Service address the same subject matter differently, this Privacy Policy prevails with respect to the processing of Personal Data.

2. Who Is Responsible for Your Personal Data

2.1 The Company is the controller (sometimes called the "data controller", "business" or "database owner") responsible for the Personal Data processed in connection with the Service, as described in this Privacy Policy.

2.2 Where you use the Service to share a Shared Case with a Family Member, or to share a summary through another app, the recipient independently controls any copy that they make or keep.

2.3 Our contact details, and those of our representatives and privacy officer where applicable, are set out in Section 17.

3. Personal Data We Collect

3.1 Information you provide to us.

(a) Account information. Your email address; your password, if you choose to create one (passwords are managed by our authentication service provider and are not visible to our staff); the one-time codes sent to you for sign-in and verification; and, if you use Family Features, the contact name or label that you choose to display.

(b) Reviewed Text. When you request a Cloud Check, the text that you have reviewed and approved in the App, after any details that you chose to hide have been replaced. Reviewed Text may include Personal Data about you or other people, such as names, phone numbers, email addresses, links, account references or amounts of money, and may include information that the law treats as sensitive, such as the contents of your communications. See Section 3.5.

(c) Family Features information. The email address of each person you invite; invitation and connection status; the Shared Cases that you choose to share, as previewed by you; acknowledgments and updates exchanged between you and your Family Members; and, for Family Plans, the members of the plan and each member's usage of the shared Allowance.

(d) Support communications. The subject and content of messages that you send to our support team, and our replies.

(e) Detection feedback. If you choose to submit a report about an Assessment, the outcome and verification method you select, any explanation you write, the original verdict and date, whether the Assessment was a Cloud Check or an On-Device Check, and any edited excerpt of the message that you explicitly choose to include.

(f) Purchase information. If you purchase a Paid Plan, the plan, price, currency, billing period, trial status, purchase and renewal dates, transaction identifiers and subscription status. Payment card details are collected and processed by the App Store or our payment processor, not by us.

3.2 Information we collect automatically.

(a) Account and authentication records. Your account identifier, email verification status, account creation and sign-in dates, and the sign-in methods you use.

(b) Allowance and usage records. For each Cloud Check, your account identifier, a check reference, the date and time, the status of the request (for example, completed or pending), and a small result record. To recognize a repeated request for the same text, we store a keyed cryptographic fingerprint of the Reviewed Text. The fingerprint is designed so that the text cannot practically be reconstructed from it. These records do not contain the Reviewed Text.

(c) Security and service records. Request counters used to apply rate limits, and records of service capacity and cost that do not identify you.

(d) Technical information. When your device connects to our servers, our hosting and network providers automatically process technical information such as your IP address, device type, operating system, app version, request timestamps and error codes. We use this information to deliver, secure and troubleshoot the Service.

(e) Administrative records. Records of actions taken by our authorized staff in relation to your Account, such as support replies and Allowance adjustments, which we keep for accountability and security.

3.3 Information we receive from third parties.

(a) Sign-in services. If you sign in with a third-party service, such as Google, we receive your verified email address and account identifier from that service, and may receive your name and profile image, depending on your settings with that service. Your name from that service may be used as your default contact label in the Family Features, which connected Family Members can see.

(b) App Stores and payment providers. We receive information about your purchases and subscription status from the App Stores, our subscription management provider and our payment processor, as described in Section 3.1(f).

(c) Other users. If another user invites you to connect or to join a Family Plan, we receive your email address and the label that user gives you. If a Family Member shares a Shared Case with you, we process it in order to make it available to you.

3.4 What we do not collect. We do not collect your contacts list, your messages or call logs (other than the text you choose to submit), or your biometric data. We do not use advertising identifiers in the App. The App includes the software development kit of our subscription management provider, which processes technical information needed to manage purchases.

3.5 Personal Data of other people and sensitive information. Messages you check may contain information about other people, such as the sender. We process information you submit for the feature you request, including an Assessment or a Shared Case, and for the support, security and other purposes described in Section 5. We do not seek to collect unnecessary sensitive information, such as health information, financial account numbers, government identifiers or passwords. Use the App's tools and remove sensitive details that are not needed before submitting or sharing text. Automatic detection may miss details. Approval to submit a message does not by itself provide another person's consent or remove our obligations under applicable law.

3.6 If you do not provide Personal Data. You are not legally required to provide any Personal Data to us. However, certain features, including Cloud Checks, Family Features and Paid Plans, require an Account and cannot be provided without the relevant information.

4. Information That Stays on Your Device

4.1 The App processes the following information locally. Text or other information that you separately choose to submit through a Cloud Check, Shared Case, feedback report or support message is handled under the corresponding sections of this Policy:

(a) Photos and screenshots. The App extracts text from images on your device. The images themselves are not sent to us or to our AI Model service providers.

(b) History. History is off by default. If you turn it on, up to 100 Reviewed Texts, Assessments and any optional context notes are stored on your device. You can delete individual items or clear your history in Settings.

(c) Context notes, local contacts and preferences. Optional context notes, contacts that you add to the App, your country selection for Resources, and your display and accessibility preferences.

(d) Imported drafts. Content that you share into the App from another app is stored temporarily in protected storage on your device until you use or discard it. Drafts older than 24 hours are removed the next time the App accesses its shared inbox.

(e) Biometric sign-in. If you enable Face ID or Touch ID, a session token is stored in your device's secure storage and unlocked by your device. The App does not receive your face or fingerprint data.

4.2 Anyone with access to your unlocked device may be able to view information stored on it. Local data stored in the App is protected by your device's operating system and is not separately encrypted by us.

5. How We Use Personal Data and Our Legal Bases

5.1 We use Personal Data for the purposes described below. Where the UK GDPR or similar laws apply, we rely on the legal bases stated for each purpose.

Purpose

Personal Data used

Legal basis (UK GDPR)

To create and manage your Account, authenticate you and provide sign-in, including biometric sign-in

Account information; account and authentication records; technical information

Performance of our contract with you

To provide Cloud Checks and display Assessments

Reviewed Text; account identifier; technical information

Performance of our contract with you. For Personal Data of other people in Reviewed Text: our legitimate interests, and those of our users, in detecting and preventing fraud and protecting individuals from scams, where those interests are not overridden by the affected person's rights. Processing special category data also requires a separate condition under applicable law; approval to submit a message does not by itself provide another person's consent. Please remove unnecessary sensitive information before submission.

To provide Family Features, including invitations, Shared Cases, acknowledgments, updates and Family Plans

Account information; Family Features information

Performance of our contract with you; for invitees who do not yet have an Account, our legitimate interest in enabling you to invite the person you chose

To manage Allowances, prevent duplicate charges and recover interrupted checks

Allowance and usage records

Performance of our contract with you; our legitimate interest in operating a fair and sustainable service

To process purchases and manage subscriptions

Purchase information; account identifier

Performance of our contract with you; compliance with legal obligations, such as tax and accounting obligations

To respond to support requests and detection feedback

Support communications; detection feedback; account information

Performance of our contract with you; our legitimate interest in responding to user reports; your consent where you choose to include a message excerpt

To send service communications, such as sign-in codes, invitations, security notices, purchase confirmations, renewal reminders and changes to our terms

Account information; purchase information

Performance of our contract with you; compliance with legal obligations

To keep the Service secure, apply rate limits, and detect, prevent and investigate fraud, abuse, security incidents and breaches of our Terms of Service

Account and authentication records; security and service records; technical information; administrative records

Our legitimate interests in protecting the Service, our users and third parties; compliance with legal obligations

To monitor the performance, reliability and cost of the Service and to improve it, using aggregated or de-identified information that does not include message content

Allowance and usage records; security and service records; technical information

Our legitimate interest in maintaining and improving the Service

To comply with law, respond to lawful requests, and establish, exercise or defend legal claims

Any relevant Personal Data

Compliance with legal obligations; our legitimate interest in protecting our rights

5.2 Consent. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before withdrawal. Before each Cloud Check, you decide whether to approve that particular submission. Approval for one check does not authorize a later submission. You can decline further Cloud Checks. When you are offline, not signed in, have used your Allowance, or a Cloud Check is unavailable, the App may provide an On-Device Check, as described in Section 3.4 of the Terms of Service. The applicable legal bases are described in Section 5.1; approval to send a message does not by itself establish consent from any other person mentioned in it. For withdrawal requests concerning information already submitted or other consent-based processing, contact us as described in Section 17.

5.3 Marketing. We do not currently send marketing communications. If we do so in the future, we will obtain your consent where required by law, and you will be able to opt out at any time.

5.4 No AI training. We do not use Reviewed Text, Shared Cases, feedback reports or support messages to train or fine-tune AI Models. Detection feedback is not automatically used to evaluate or change the Service.

5.5 Aggregated and de-identified information. We may create aggregated statistics, such as the number of checks completed or average response time, and take steps to reduce the identifiability of data used for service monitoring. Data that can still be linked to an individual remains Personal Data and is subject to this Policy. We treat information as anonymous only where individuals can no longer reasonably be identified. We do not attempt to re-identify information that we have anonymized.

6. Automated Assessments and Artificial Intelligence

6.1 How Assessments are made. For a Cloud Check, the Reviewed Text is sent to the AI services configured for that check, as described in Section 7. The AI Model evaluates the text for warning signs such as urgency, requests for payment or codes, impersonation and suspicious links, and assigns an Assessment category. The reasons, suggested next steps and checklists displayed with an Assessment are selected from guidance that we have prepared and reviewed, and may include warning signs identified by the App's built-in rules. On-Device Checks use built-in rules on your device without sending message text to us.

6.2 What information is used. Assessments are based only on the Reviewed Text that you submit. We do not use your profile, history, location or other information about you to generate an Assessment.

6.3 Nature and effect of Assessments. An Assessment is an automated evaluation of a message, not a decision about you. It does not determine your legal rights, your eligibility for any service, or any other matter with a legal or similarly significant effect on you. You decide what to do with an Assessment. Assessments may be inaccurate, as explained in our Terms of Service.

6.4 Feedback about Assessments. If you disagree with an Assessment, you can submit detection feedback in the App or contact us as described in Section 17. Authorized staff may review the information you choose to send to investigate possible errors and improve the Service. Cloud Checks themselves are automated; submitting feedback does not guarantee a changed Assessment or an individual response. This does not limit any right to information, review or a response that applicable law gives you, including where Section 13 applies.

7. How We Disclose Personal Data

7.1 Service providers. We use third-party services for the purposes described below. The Personal Data they receive depends on the feature you use and the provider configured for that feature. Where a provider processes Personal Data on our behalf, applicable data-protection terms govern that processing; some providers also process information under their own terms for their own lawful purposes. We remain responsible for our obligations under applicable law.

Service provider

Purpose

Personal Data involved

Supabase, Inc.

Hosting, database, authentication and server functions

Account information; Family Features information; support and feedback records; Allowance, usage, security and technical records; Reviewed Text in transit

OpenRouter, Inc.

Routing Cloud Check requests to the configured AI Model provider

Reviewed Text; technical request information

TypeSafe

AI Models for Cloud Checks routed through OpenRouter

Reviewed Text; technical request information

OpenAI (if the direct route is enabled)

AI Models for Cloud Checks sent directly to OpenAI

Reviewed Text; technical request information

Resend, Inc.

Delivery of sign-in and service emails

Email address; email content

Cloudflare, Inc.

Website hosting, domain services, security and email forwarding

Website and request technical information; email addresses and support email content

Google LLC

Hosting the mailbox used for email correspondence

Sender and recipient addresses; email content and attachments you choose to send; technical email information

RevenueCat, Inc.

App Store subscription management

Account identifier; purchase information; technical information collected through its software development kit

Other AI model providers, such as Google or Anthropic, may be introduced in the future. They do not receive Cloud Check text merely because they are mentioned here. Before introducing a new provider, we will update this Policy and provide any notice or seek any consent required by applicable law. Section 8 addresses international transfers.

7.2 App Stores and sign-in services. When you purchase a Paid Plan through an App Store or sign in with a third-party service, the App Store or sign-in provider processes your information as an independent controller under its own privacy policy. We receive only the information described in Section 3.3.

7.3 AI provider data practices. Cloud Check requests may be routed through OpenRouter to the configured AI Model provider or sent directly to OpenAI if that route is enabled. We do not store Reviewed Text as a Cloud Check message record in our application database or application logs. A copy that you separately include in a Shared Case, feedback report or support message is handled under the relevant provisions of this Policy. We do not use Reviewed Text or those separately submitted copies to train or fine-tune AI Models. Each provider's processing, retention and model-training practices depend on the applicable agreements and account or request settings. Our own no-training practice does not establish that every provider retains no data or has the same settings. For information about the current or conditional AI services, see OpenRouter's Privacy Policy and provider logging guide, TypeSafe's Privacy Policy, and OpenAI's API data controls. For possible future services, see Google Cloud's data-processing terms and Anthropic's commercial data-retention information. These public pages do not confirm the settings applied to our account or to a particular Cloud Check.

7.4 Family Members. When you share a Shared Case, we disclose it to the Family Member you select. When you connect with a Family Member, each of you can see the other's contact label and Account email address. Members of a Family Plan can see the plan's total Allowance usage, and the Plan Owner can see the email addresses of the people invited to the plan.

7.5 Legal and safety reasons. We may disclose Personal Data where we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process or an enforceable request from a public authority; (b) enforce our Terms of Service or investigate potential breaches; (c) detect, prevent or address fraud, security or technical issues; or (d) protect the rights, property or safety of us, our users or the public.

7.6 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of all or part of our business or assets, Personal Data may be disclosed to the relevant counterparties and their advisers, and transferred as part of that transaction, subject to confidentiality obligations. We will require any successor to honor this Privacy Policy with respect to the Personal Data transferred, or will notify you of any change.

7.7 With your consent or at your direction. We may disclose Personal Data to other parties with your consent or at your direction, for example when you use the App to share a summary through another app.

7.8 No sale or targeted advertising. We do not sell Personal Data, we do not share Personal Data for cross-context behavioral advertising or targeted advertising, and we do not allow third parties to collect Personal Data through the Service for those purposes.

8. International Data Transfers

8.1 We are based in Israel. Our providers may process Personal Data in the United States, Europe and other countries, depending on the service and its configuration. Personal Data may therefore be transferred to and processed in a country other than the one in which you live, whose data-protection laws may differ from those of your country. Section 7 identifies the relevant services; Section 8.2 describes applicable transfer safeguards.

8.2 Where we transfer Personal Data internationally, we take steps required by applicable law to protect it, including:

(a) for Personal Data from the United Kingdom: transfers to Israel rely on the adequacy regulations that recognize Israel as providing adequate protection; transfers to the United States rely on the UK Extension to the EU-U.S. Data Privacy Framework where the recipient is certified, or otherwise on the International Data Transfer Agreement or the International Data Transfer Addendum to the European Commission's Standard Contractual Clauses;

(b) for Personal Data from Canada: contractual and other measures that provide a comparable level of protection, and, for residents of Quebec, an assessment of the transfer in accordance with Quebec law;

(c) for Personal Data from Australia: reasonable steps to ensure that overseas recipients handle the information in a manner consistent with the Australian Privacy Principles; and

(d) for Personal Data transferred from Israel: compliance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

8.3 You may request more information about the safeguards we use by contacting us as described in Section 17.

9. Data Retention

9.1 We retain Personal Data only for as long as necessary for the purposes described in this Policy, subject to applicable local laws and regulations. The table describes retention periods or the criteria used to determine them. An invitation or sharing link becoming unavailable is an access expiry, and does not by itself mean that every underlying record or backup has been physically deleted. Unless stated otherwise, deletion from active systems remains subject to Section 9.2 and the backup criteria below.

Category

Retention period or criteria

Reviewed Text sent for a Cloud Check

Processed to generate the Assessment and not stored as a Cloud Check message record in our application database or application logs. A copy that you separately include in a Shared Case, feedback report or support message is retained under the relevant category below. AI providers may retain request data under the applicable agreements and settings described in Section 7.3.

Account information and authentication records

Kept while your Account is active. Account deletion removes records from active account systems, subject to Section 9.2 and the backup criteria below. We may delete Accounts inactive for more than 12 consecutive months with no active Paid Plan, as described in our Terms of Service.

Family sharing invitations

Pending invitations currently expire after 48 hours. Acceptance creates a connection record. Expired invitation records are removed through cleanup; any limited record retained for security or dispute resolution is kept only while necessary.

Family Plan invitations

Invitations currently expire after 7 days if not accepted, and may be withdrawn sooner. Invitation records may remain afterward while needed for account management, security or dispute resolution.

Shared Cases and related updates

Access currently expires 30 days after sharing and may end sooner if you revoke the case or delete your Account. Removing a case from a recipient's list does not necessarily delete the underlying record. Records are removed through cleanup or account deletion, subject to Section 9.2 and backups. Copies already saved by recipients are outside our control.

Family connections and Family Plan membership records

Kept while the connection or membership exists. After disconnection, leaving the plan or account deletion, only records still needed for account administration, security, disputes or legal obligations are retained.

In-app support tickets and detection feedback

Kept while your Account is active and deleted with your Account, subject to Section 9.2 and backups. You may also request deletion under Section 12. Email correspondence is handled separately under Section 9.4.

Allowance and usage records

Kept while needed to manage your Account's usage limits, recognize duplicate requests, recover interrupted checks and investigate relevant billing or security issues. Account deletion is subject to Section 9.2 and backups.

Purchase and subscription records

Kept while needed to manage and verify subscriptions, resolve billing or refund disputes and meet legal obligations. Account deletion is subject to Section 9.2 and backups. App Stores and subscription or payment providers retain their own records under their applicable policies.

Rate-limit counters

Kept for the relevant rate-limit window and operational cleanup period, only while needed to apply limits and prevent abuse.

Administrative audit records

Kept while needed for security, accountability, dispute resolution or legal compliance, then deleted or anonymized. These records contain account identifiers and administrative actions, rather than the text submitted for a Cloud Check.

Technical information processed by hosting and network providers

Retention varies by provider and log type and follows the applicable operational and security purposes and provider schedules.

Backups

Deleted records may remain in backups until the applicable backup cycle expires or the data is overwritten. Backup copies remain subject to applicable security and retention requirements.

Information stored on your device

Managed through the App's available controls and your device settings. Uninstalling the App may not remove operating-system backups, secure-storage credentials, or copies you have exported or shared; those are managed through the relevant device, backup or other service.

9.2 After account deletion, we may retain limited Personal Data where necessary to meet legal obligations, establish, exercise or defend legal claims, resolve disputes, enforce our agreements or prevent fraud and abuse, and only for as long as necessary for those purposes. We limit retained information to what is needed. Deleting your Account does not cancel a Paid Plan purchased through an App Store; you must cancel it through the App Store.

9.3 The periods and criteria above describe our standard approach. A different period applies where required by applicable law. Where the law permits continued retention, we retain information only for a lawful purpose and no longer than necessary. When that purpose no longer applies, we delete the data or anonymize it so that it is no longer Personal Data. Merely removing a name or account identifier does not necessarily make data anonymous.

9.4 Email correspondence. Emails sent to support@scamverifier.app are forwarded to a separate Google-hosted mailbox. Deleting your Account removes related in-app support records, subject to Section 9.2 and backups, but does not automatically delete email correspondence already in that mailbox. We keep those emails while needed to respond and follow up, maintain a reasonable support record, resolve disputes, prevent abuse or meet legal obligations. When those purposes no longer apply, we delete the emails or anonymize relevant records. You may request deletion under Section 12, subject to applicable legal exceptions.

10. Data Security

10.1 We use technical and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse and alteration. These measures include encryption of data in transit, access controls that restrict each user's data to that user and the people they choose to share with, hashed and time-limited invitation codes, restricted and audited staff access, secure storage of session tokens on your device, and minimization of the data we collect and keep.

10.2 No method of transmission or storage is completely secure, and we cannot guarantee the security of Personal Data. You are responsible for keeping your device and sign-in credentials secure. If we become aware of a security incident affecting your Personal Data, we will notify you and the relevant authorities where required by law.

11. Your Choices and Controls

11.1 You can control your Personal Data through the App, including by:

(a) reviewing and editing text, and hiding detected details, before a Cloud Check;

(b) using On-Device Checks, which do not send text to us;

(c) keeping History off, or deleting individual items or all History;

(d) deciding whether to share each Shared Case, and revoking Shared Cases or disconnecting Family Members;

(e) turning biometric sign-in on or off; and

(f) deleting your Account through Settings in the App. For deletion requests concerning other information, contact us under Section 12.

11.2 Service communications, such as sign-in codes and security notices, are necessary to provide the Service and cannot be switched off while you have an Account.

12. Your Privacy Rights

12.1 Your rights. Depending on where you live, you may have some or all of the following rights in relation to your Personal Data: to know whether we process it and to access a copy of it; to correct inaccurate data; to delete it; to receive it in a portable format; to object to or restrict certain processing; to withdraw consent; to receive information about the third parties to which we have disclosed it; to opt out of the sale of Personal Data, targeted advertising or certain profiling (although we do not engage in these activities); and to lodge a complaint with a data protection authority. These rights are subject to exceptions and limitations under applicable law.

12.2 How to exercise your rights. You can exercise many of these rights directly in the App. You may also submit a request by emailing support@scamverifier.app or through Contact Support in the App. We will respond within the period required by applicable law.

12.3 Verification. To protect your Personal Data, we will verify your identity before responding to a request, usually by asking you to confirm control of the email address associated with your Account. We will not ask you for your password.

12.4 Authorized agents. Where permitted by law, you may authorize an agent to submit a request on your behalf. We may require proof of the agent's authority and may ask you to verify your identity directly with us.

12.5 Appeals and complaints. If we decline your request, we will explain why, and you may appeal our decision by replying to our response or emailing support@scamverifier.app with the subject line "Privacy Appeal". If you are not satisfied, you may complain to the data protection authority where you live (see Section 13).

12.6 No discrimination. We will not discriminate against you for exercising your privacy rights.

13. Additional Information for Residents of Specific Jurisdictions

13.1 United States.

(a) Scope. This Section 13.1 applies to residents of U.S. states with comprehensive consumer privacy laws, including California, Colorado, Connecticut, Virginia, Texas and others, to the extent those laws apply to us.

(b) Categories of Personal Data. In the preceding 12 months, we have collected the following categories of Personal Data, from the sources described in Section 3, for the purposes described in Section 5, and have disclosed them for business purposes to the categories of recipients described in Section 7:

Category

Examples

Disclosed to

Identifiers

Email address; account identifier; IP address

Service providers; Family Members you connect with

Customer records

Contact label; email address; purchase records

Service providers; Family Members you connect with

Commercial information

Plan, trial and subscription status; purchase history

Service providers; App Stores

Internet or other electronic network activity information

Allowance and usage records; technical information; security records

Service providers

Sensitive personal information

Account sign-in credentials; the contents of messages contained in Reviewed Text

Service providers (for the purpose of providing the Service only)

Other information you choose to provide

Support communications; detection feedback; Shared Cases

Service providers; Family Members you choose to share with

(c) Sensitive personal information. We use and disclose sensitive personal information for the purposes described in this Policy and permitted by applicable law, and do not use it to infer characteristics about you. Before each Cloud Check, you can review and edit the message, hide detected details and see the Reviewed Text that will be sent. Message text is sent for that check only when you approve that submission. Approval for one check does not authorize future submissions. When you are offline, not signed in, have used your Allowance, or a Cloud Check is unavailable, the App may provide an On-Device Check, which does not send message text to us. These tools may miss sensitive details, so review the text carefully and remove unnecessary information.

(d) Sale, sharing and targeted advertising. We do not sell Personal Data, share it for cross-context behavioral advertising or process it for targeted advertising. If we introduce processing that requires an opt-out under applicable law, we will provide the required notice and controls, including recognition of applicable opt-out preference signals, before starting that processing.

(e) AI training. We do not use Personal Data to train large language models or other AI Models (see Section 5.4).

(f) Profiling. We do not engage in profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.

(g) Retention. Our retention periods for each category are described in Section 9.

(h) Consumer health data. We do not seek to collect consumer health data. Please remove unnecessary health information before submitting or sharing a message. If you choose to include it, it is handled for the relevant purposes described in this Policy, subject to applicable legal requirements. Copies separately included in Shared Cases, feedback or support records are subject to Section 9.

(i) California "Shine the Light". We do not disclose Personal Data to third parties for their own direct marketing purposes.

(j) Exercising your rights. You may exercise your rights as described in Section 12, including through an authorized agent.

13.2 United Kingdom.

(a) Controller. The controller is identified in Section 2.

(b) Legal bases. Our legal bases for processing are described in Section 5.1. Where we rely on legitimate interests, you may request information about the interests relied on and how your rights are considered.

(c) Automated decision-making. We do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you. Section 6 explains how Assessments are generated and how you can express your views.

(d) Complaints. If you have a concern about how we handle your Personal Data, please contact us first at support@scamverifier.app or through Contact Support in the App. We will acknowledge your complaint within 30 days and respond without undue delay. You also have the right to complain to the Information Commissioner's Office (www.ico.org.uk).

13.3 Canada.

(a) Consent. By using the Service, you consent to the collection, use and disclosure of your Personal Data as described in this Privacy Policy, including its transfer outside your province and outside Canada as described in Section 8. You may withdraw your consent, subject to legal and contractual restrictions and reasonable notice, although this may mean that we cannot provide some or all of the Service.

(b) Person in charge of the protection of Personal Data. Our person in charge of the protection of personal information is our DPO, Adv Ben Schultz, who may be contacted at support@scamverifier.app.

(c) Quebec. Where Quebec law applies, you have the applicable rights of access, rectification and complaint. Section 6 describes how Assessments are generated. If processing is subject to Quebec's requirements for decisions based exclusively on automated processing, you may request the information required by law and submit observations to a staff member able to review the decision, as required by that law. Section 6.4 does not limit these rights. You may complain to the Commission d'accès à l'information du Québec.

(d) Complaints. You may also file a complaint with the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or the privacy regulator of your province.

13.4 Australia.

(a) Australian Privacy Principles. We handle Personal Data in accordance with the Australian Privacy Principles, to the extent they apply to us.

(b) Anonymity. You can use certain features of the Service, including On-Device Checks and the Resources, without an Account and without identifying yourself.

(c) Overseas disclosure. Our providers may process Personal Data in Israel, the United States, Europe and other countries, depending on the service and its configuration. Section 8 describes international transfers and applicable safeguards.

(d) Automated decisions. Section 6 describes the kinds of Personal Data used in the computer programs that generate Assessments and the kinds of outputs they produce. Assessments are not decisions about you and are not intended to significantly affect your rights or interests.

(e) Access, correction and complaints. You may request access to or correction of your Personal Data as described in Section 12. If you have a complaint, please contact us first at support@scamverifier.app. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (www.oaic.gov.au).

13.5 Israel.

(a) Applicable law. We process Personal Data in accordance with the Privacy Protection Law, 5741-1981, and the regulations under it, including the Privacy Protection (Data Security) Regulations, 5777-2017.

(b) Notice. You are not under a legal obligation to provide Personal Data to us. The provision of Personal Data depends on your will and consent, but certain features cannot be provided without it (see Section 3.6). The purposes for which your Personal Data will be used, and the recipients to whom it will be disclosed and the purposes of disclosure, are described in Sections 5 and 7.

(c) Review and correction. You are entitled to review Personal Data about you held by us, and to request that we correct or delete Personal Data that is incorrect, incomplete, unclear or not up to date, in accordance with sections 13 and 14 of the Privacy Protection Law, by contacting us at support@scamverifier.app.

14. Children

14.1 The Service is intended for adults aged 18 or over and is not directed to children. We do not knowingly register users under 18. If we learn that a person under 18 has an Account, we take steps to close it and delete the related Personal Data, subject to applicable legal requirements. Messages submitted by adult users may incidentally contain information about children; users should remove unnecessary information about them before submission. If you believe a child has an Account or that we hold unnecessary information about a child, contact us as described in Section 17.

15. Website Cookies and Third-Party Services

15.1 Website cookies and analytics. Our website may use cookies and similar technologies needed for basic operation and security. We may introduce Google Analytics or another analytics tool to understand website usage and improve performance. Before enabling non-essential analytics, we will update this Policy or a linked cookie notice to identify the provider, describe the information collected, purposes, retention and available choices, and obtain consent where required by applicable law.

15.2 The Service contains links to third-party websites and services, including government and support organizations listed in the Resources. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies.

16. Changes to This Privacy Policy

16.1 We may update this Privacy Policy from time to time. An updated version takes effect when published, unless applicable law requires advance notice or consent. We will provide any notice or seek any consent required by law. The "Last updated" date at the top of this Privacy Policy shows when it was last revised. Previous versions are available on request.

17. Contact Us

17.1 If you have any questions, requests or complaints about this Privacy Policy or our handling of Personal Data, please contact us:

Company: Schultz Corp Ltd.

Business address: Simta Almonit 7, Tel Aviv, Israel; mailing address: P.O. Box 3261, Tel Aviv 6103201, Israel

Privacy inquiries and requests: support@scamverifier.app or through Contact Support in the App

Account deletion: through Settings in the App.

Person in charge of the protection of personal information Adv Ben Schultz

Scam Verifier · Schultz Corp Ltd.

HomePrivacy policyTerms of serviceAccessibility