Privacy Policy

Effective date: June 10, 2026

ScamShield ("the App") is a personal fraud-protection application. This policy explains what data the App accesses, how it is used, and what never leaves your device. Our core principle: scam detection happens on your device, and your personal communications are never collected by us.

1. Data We Do NOT Collect

We do not collect, store or transmit your SMS messages, call history, contacts or notifications to our servers.
We do not require an account. No name, e-mail or identifier is collected.
We do not show ads and we do not use advertising or tracking SDKs.
We never sell or share personal data with third parties for marketing.

2. How Each Permission Is Used

Permission	Purpose	Where processing happens
Notification access	With Live Protection on, notifications from your SMS app and messaging/mail apps are scanned for scam patterns. ScamShield does not use the SMS permission. Content is discarded immediately unless a risk is detected.	100% on-device
Call screening role	Incoming numbers are checked against known fraud number patterns. Calls are never blocked, recorded or answered.	100% on-device
Camera	QR code scanning only. No images are captured or saved.	100% on-device
Storage / All-files access	Optional, only for virus scans you start manually.	Only file hashes leave the device (see §3)
Installed app list	Shown only inside the App so you can pick apps to virus-scan.	On-device; hashes only if you scan
Notifications (post)	To alert you when a risky message or call is detected.	On-device

3. Data Sent to Third-Party Services (Only on Your Request)

Some optional features query external security services. These are used only when you actively start a scan, never automatically on your private messages:

VirusTotal (Google): when you scan a link or file, the URL or the file's cryptographic hash (fingerprint) is sent for reputation lookup. See VirusTotal's privacy policy.
OpenAI: when you use the AI Assistant, the text you paste is sent for analysis. Do not paste content you don't want analyzed. See OpenAI's privacy policy.

Real-time Live Protection (SMS, calls, notifications) does not use these services — it runs entirely offline.

4. Data Stored on Your Device

Scan results and history are stored in a local database on your device only. You can delete them at any time via Settings → Clear Scan History, or by uninstalling the App. We have no access to this data.

5. Children

The App is not directed at children under 13 and does not knowingly collect data from them.

6. Security

All network requests use HTTPS. Analysis results never include more data than necessary for the lookup (URL or file hash).

7. Changes to This Policy

We may update this policy. Material changes will be reflected on this page with a new effective date.

8. Contact

Questions or requests: mrtckr.developer@gmail.com