Privacy policy

Last updated 25 October 2026. Draft — have it reviewed before launch.

Summary

ScamGuard is built to collect as little as possible. Message text is analysed on your phone. We never ask for passwords, OTPs or recovery codes and never sell data.

Android app

Shared or pasted text is analysed on the device.
Auto-protect (optional) reads incoming notifications from messaging apps on the device only to detect scams. Text is not uploaded or stored; only a masked preview of flagged messages is kept in local history.
Cloud check (optional) sends only the link to our server, with a random install ID (no phone number, IMEI or advertising ID).
Safety Radar reads the list of installed apps and their permissions on the device to find risky apps. This list is not uploaded.
APK check computes the file hash on the device. With your consent only the hash, package name and signer hash are sent.
Local history is excluded from backups and can be deleted any time.

Website

The URL checker sends the link you enter. Server logs do not store IP addresses or query strings. No cookies or trackers.

Retention

Scan records: 30 days. Feedback: 180 days. Delete your cloud data from the app (Settings → Delete my cloud data).

Your rights

Under India's Digital Personal Data Protection Act, 2023 you may request access, correction or deletion. Contact us below.

Contact

[add grievance officer name and email]