App privacy policy
ScamurAI checks suspicious messages, links and screenshots. This page explains what we process and why. The principle is simple: whatever can stay on your phone, stays there.
Who processes your data
Data controller: Scamurai, Italy. For any request write to info@scamurai.tech.
What we process
| Data | Why | Legal basis |
|---|---|---|
| Email and name you give at signup | Create and run your account | Performance of a contract |
| App language and preferences | Show the app in the right language | Performance of a contract |
| Text you submit for in-depth analysis | Produce the verdict you asked for | Consent, revocable |
| Domains you report | Improve the dangerous-site lists | Legitimate interest in security |
| Usage events (screens opened, analysis outcome, purchases) | Understand what works | Legitimate interest in improvement |
| Subscription status | Unlock paid features | Performance of a contract |
We never see your photos
When you analyse a photo or screenshot, text recognition runs on your device, with Apple Vision on iPhone and ML Kit on Android. The image is never uploaded: only the extracted text leaves the phone, and only if you enabled in-depth analysis.
Site blocking is local
Dangerous-domain lists are downloaded and matched on your device. Your browsing history never reaches us and is not collected.
In-depth analysis, only if you turn it on
It is off until you enable it. When on, the text you submit is sent to our servers in the European Union and analysed by a language model provided by Mistral AI through its European endpoints. Verdicts are cached so the same content is not analysed twice. You can turn it off at any time in your Profile; nothing is sent from that moment on.
Who we rely on
| Provider | Role | Where |
|---|---|---|
| Supabase | Accounts, database | European Union |
| Mistral AI | Text analysis | European Union |
| PostHog | Usage statistics | European Union |
| RevenueCat | Subscription status | United States |
| Apple, Google | Payments | Per their own policies |
Card details never pass through us: the App Store and Google Play handle them, and we only learn whether your subscription is active.
How long we keep it
Account data stays while the account exists. Deleting it (Profile, Delete account) removes it along with everything attached to it. Usage statistics are aggregated and cannot be traced back to you.
Your rights
You may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. Write to info@scamurai.tech. You may also lodge a complaint with your data protection authority.
Children
ScamurAI is not intended for children under 14.
Changes
If we change anything material we will tell you in the app before it takes effect.