Privacy Policy

1. Data we collect

• Account information: email address, sign-in identity, and profile information you provide. Our authentication service handles passwords and sign-in credentials.
• Scan submissions: text, images, audio, video, links, filenames, and profile details you choose to submit. These may contain personal information about you or other people.
• Usage and subscription information: account-linked scan types and timestamps, quota usage, subscription status, and payment-service identifiers.
• Operational information: request and error details used to run and troubleshoot the service. Hosting and connected providers may receive technical information such as IP addresses and browser details. Pro document and email scans extract text and selected email headers on your device before sending them for analysis; email attachments are excluded. TikTok download diagnostics include the user ID, link host, resolver provider, outcome, and timing.
• Support communications: information you send when asking for help or making a privacy request.

2. How we use your scans

When you request a scan, we process the submitted content to estimate AI involvement or assess scam and profile-risk indicators. Scanning is not entirely on your device: content is sent to our servers and to AI services through the Lovable AI Gateway, using Google Gemini and, for some text analysis, OpenAI models.

• Text analysis sends the text being analysed. Media analysis sends media content or extracted samples and may include its filename and media type.
• Scam checks may send messages, URLs, and media. Profile checks may send the handle, profile URL, biography, posts, counts, and other details you supply.
• When you ask us to fetch a link or TikTok video, the requested URL is shared with the destination or download-resolution services needed to retrieve it. TikTok resolver services can include TikWM, TiklyDown, and TikMate.
• The app records scan usage to enforce plan limits and show service activity. Its scan-usage records can include the scan category, estimated score, confidence and verdict for your private Pro dashboard. They do not contain submitted content, filenames or full analysis reports. Older records may contain only scan type and time.

We do not provide a public gallery of your submissions. This is not a promise that no copy exists in processing systems or provider logs. AI and download providers have their own processing, logging, and retention practices; we cannot guarantee that submissions are never retained or used for model improvement by those providers.

Only submit content you are entitled to share. Avoid passwords, financial credentials, medical records, confidential documents, or other sensitive information. Detection results are estimates, not proof about a person or the authenticity of content.

3. Cookies and storage on your device

The website and Android app use browser or WebView storage for sign-in sessions, saved preferences, and local scan history. Cookies may also be used by connected sign-in and payment services. Local storage is different from cookies, but can also keep information on your device between visits.

• Sign-in and essential storage: keeps your session and necessary app state. Blocking or clearing it can sign you out or prevent features from working.
• Preferences and offline support: stores detector position, settings, your last selected scan tab, and cached app resources.
• Local scan history: stores up to 50 recent detector results, timestamps, and short labels. A label can include the beginning of submitted text, a filename, or a page title/link. Results can contain information derived from your submission.

Remove individual entries or clear history in the detector's History view. You can also clear this site's browser storage or the Android app's data through your device settings. Anyone with access to the same browser or app storage may be able to see saved history; deleting your online account does not itself erase every device's local storage.

There are no advertising-cookie controls in the app. Hosting and connected providers may collect operational or usage telemetry under their own policies. This notice does not claim that every provider uses only essential cookies.

4. Why we use information

• To create and manage accounts, analyse submissions, and deliver results.
• To apply scan limits, manage subscriptions, and process billing updates.
• To protect the service, investigate abuse, and diagnose failures.
• To understand service usage and respond to support and privacy requests.
• To comply with applicable legal, tax, and accounting obligations.

Where applicable data-protection law requires a legal basis, we rely on performance of our agreement with you for requested services, legitimate interests for proportionate security and operations, and legal obligations for required records. Where consent is required for an optional use, it must be obtained before that use.

5. Who receives information

Information is shared as needed with hosting, authentication, AI-processing, download-resolution, and support providers. Paddle, our Merchant of Record, handles checkout, payment details, invoices, taxes, and subscription billing; the app keeps subscription status and identifiers rather than full card details.

Authorised administrators can access account and service-usage information to operate the service. Information may also be disclosed to professional advisers or authorities when legally required or necessary to protect rights and security. Connected services process information under their own policies.

6. Retention and deletion

Account, profile, subscription, and usage records are kept to operate your account and meet relevant obligations. The account-deletion process removes the app's profile, scan-usage, subscription, and sign-in records. Local history must be cleared separately on each device.

Payment records held by Paddle, diagnostic records (including TikTok download events), processing logs, and backups may remain separately. We do not state a fixed deletion deadline for every such system: retention depends on the provider, operational needs, and legal requirements. Contact us for information about a specific record or deletion request.

Deleting your account and cancelling billing are related but distinct. Check your billing portal to confirm cancellation and its effective date; account deletion does not guarantee an immediate refund or immediate end to the current billing period.

7. Your privacy choices and rights

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of personal information, restrict or object to processing, and withdraw consent where processing relies on it. We may need to verify account ownership before acting on a request. You may also contact your local data-protection authority.

You can clear local history in the app, manage browser storage on your device, and request account deletion through your account settings. See our account and data deletion page for how to start a request.

8. Security and international processing

We use encrypted connections and account-based access controls to protect information, but no service can guarantee complete security. Our hosting and connected providers may process data outside your country, where privacy laws can differ. Contact us for information about applicable transfer arrangements or safeguards; this notice does not certify a particular provider's transfer mechanism.

9. Changes to this policy

We will update this page and its date when our privacy practices change. Where required by law, material changes will be communicated or consent requested before a new use begins.