ScamCheck Privacy Policy

Effective date: October 1, 2026

ScamCheck is developed and operated under the AEyeApp brand (“AEyeApp,” “we,” “us,” or “our”).

ScamCheck is designed to help you evaluate suspicious messages and conversations for potential scam or fraud indicators. We designed the app to minimize the amount of personal information sent off your device.

1. Information You Provide

You may provide ScamCheck with message or conversation text in either of these ways:

• by pasting or typing text into the app; or
• by selecting a screenshot for ScamCheck to read.

When you select a screenshot, ScamCheck uses Apple’s on-device Vision technology to extract text from the image. ScamCheck does not upload the selected screenshot to AEyeApp’s servers or to OpenAI. The extracted text is placed into the same editable conversation field as text you enter manually and is processed by ScamCheck’s privacy filters before online AI analysis.

Before an online AI analysis is sent, ScamCheck processes the conversation on your device and attempts to redact certain personal information.

Because automated redaction cannot guarantee that every piece of personal information will be detected, you should avoid submitting highly sensitive information such as passwords, authentication codes, financial account numbers, Social Security numbers, or other information that is not necessary for scam analysis.

2. Local Analysis

Some ScamCheck features analyze messages directly on your device.

When you use a local analysis feature, the conversation does not need to be sent to AEyeApp’s servers or to an AI provider.

3. Online AI Analysis

If you choose Check with AI, ScamCheck sends the processed conversation text to our backend service so that an AI model can analyze it for scam-related patterns.

The online processing path currently uses:

• Amazon Web Services (AWS) to operate our backend infrastructure; and
• OpenAI to perform AI analysis.

Our backend is designed not to store the submitted conversation text, AI prompt, AI response, or extracted evidence in our application database after processing the request.

ScamCheck configures its OpenAI API requests not to store Chat Completions for later retrieval. OpenAI may separately retain API data for abuse monitoring under its standard API data-retention practices. OpenAI states that API data is not used to train its models by default unless the customer explicitly opts in to data sharing.

4. App Security and Anti-Abuse Information

ScamCheck uses security mechanisms to help confirm that requests come from legitimate copies of the app and to protect the service from automated abuse.

This may include processing or storing pseudonymous technical information such as:

• pseudonymous app-installation and App Attest key identifiers;
• App Attest registration information;
• cryptographic key or public-key information;
• security counters;
• request and challenge identifiers;
• usage and quota counters; and
• request status and security-validation results.

ScamCheck uses Apple App Attest to help verify that requests to our backend originate from legitimate instances of the app.

This information is used for security, fraud prevention, replay protection, service quotas, and reliability. It is not used for advertising or to build an advertising profile.

5. Network and Operational Information

Our infrastructure providers may process ordinary network and technical information required to deliver and secure the service, such as:

• IP address;
• request time;
• HTTP status and error information;
• service and infrastructure metrics; and
• information necessary for rate limiting and abuse prevention.

ScamCheck uses AWS Web Application Firewall and other backend controls to protect the service from excessive or malicious traffic.

We have configured our WAF so that request sampling is disabled. Our application logging is designed to avoid recording conversation text or sensitive App Attest proof material.

6. Information We Do Not Intentionally Collect

ScamCheck currently does not require you to create an account.

We do not intentionally collect:

• your name or email address simply to use ScamCheck;
• contacts or address-book contents;
• precise location;
• advertising identifiers;
• browsing history;
• health information; or
• payment-card or bank information.

We do not sell personal information.

ScamCheck does not use your information for cross-app advertising or tracking.

7. Data Retention

Our application backend is designed not to retain the conversation text submitted for AI analysis in our application database.

We may retain pseudonymous installation, security, quota, and request-status information for as long as reasonably necessary to:

• operate ScamCheck;
• enforce service limits;
• detect replay or abuse;
• maintain application security; and
• investigate technical problems.

Third-party service providers may retain information according to their own policies and our service configuration.

8. Third-Party Service Providers

ScamCheck currently relies on the following service providers:

Amazon Web Services (AWS)

Provides cloud hosting, API, database, security, secret-management, and related infrastructure.

OpenAI

Provides the AI models used for online scam analysis.

Apple

Provides iOS platform services including App Attest and related app-security functionality.

These providers process information as necessary to provide their respective services and are subject to their own privacy and security terms.

9. Your Choices

You can use ScamCheck’s local analysis features without sending a conversation to our AI analysis service.

ScamCheck asks for your consent before enabling online AI analysis. If online AI analysis is used, the processed conversation must be transmitted to our backend and AI provider for that feature to work.

You can also choose not to provide information that you do not want processed by ScamCheck.

10. Data Requests

Because ScamCheck does not currently require user accounts, much of the information maintained by our backend is pseudonymous and may not be directly identifiable as belonging to a particular person.

Depending on where you live, you may have legal rights relating to personal information, including rights to request access, correction, or deletion.

You may contact us regarding a privacy request at:

[email protected]

We may need information sufficient to identify records associated with your request, and in some situations we may be unable to associate a pseudonymous installation record with a particular individual.

11. Security

We use technical and organizational safeguards intended to protect information processed through ScamCheck. These include encrypted network connections, app-integrity validation, access controls, rate limiting, limited backend permissions, and measures designed to reduce sensitive information in application logs.

No electronic transmission or storage system can be guaranteed to be completely secure.

12. Children’s Privacy

ScamCheck is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If you believe a child has provided personal information through ScamCheck, please contact us at [email protected].

13. Changes to This Privacy Policy

We may update this Privacy Policy as ScamCheck changes.

When we make material changes, we will update the effective date shown at the top of this policy and make the updated policy available through our website or app.

14. Contact Us

For questions about this Privacy Policy or ScamCheck’s privacy practices:

AEyeApp
Email: [email protected]
Website: https://aeyeapp.dev