Who processes your data
Last updated 2026-09-26.
These are the companies that process data for ScamCam, what they get and why. The AI services we use right now are OpenAI and Google Gemini. We give at least 14 days' notice here before a new company starts processing your data, and the app asks for your agreement again before a new AI service sees anything you send.
Service providers
They process data only on our instructions.
| Who | What for | What they get | Where | Since |
|---|---|---|---|---|
| Cloudflare, Inc. (terms) | Hosting, the API, check storage, device records, usage analytics, crash reports, email routing | everything we hold (see the Privacy Policy) | United States (global network) | 2026-09-25 |
| OpenAI, L.L.C. | AI analysis of checks. Keeps request logs for abuse monitoring for up to 30 days, unless zero data retention is approved. Doesn't train on your data | images, text, links, on-device OCR text | United States | 2026-09-25 |
| Google LLC (Gemini API) | AI analysis of checks. Keeps request logs for abuse monitoring for up to 55 days, unless zero data retention is approved. Doesn't train on your data | images, text, links, on-device OCR text | United States | 2026-09-25 |
| Email provider (being chosen) | The inbox behind privacy@, security@ and [email protected] | emails you send us and our replies | To be confirmed | Pending |
Other companies involved
They run their own services under their own terms.
| Who | What for | What they get | Where | Since |
|---|---|---|---|---|
| Apple Inc. | Device verification (App Attest and its fraud-risk check); history sync in your own iCloud account | device attestation, your history, in your own iCloud (we can't read it) | United States | 2026-09-25 |
| Domain registries (RDAP servers, ISOC-IL WHOIS) | How old a website's domain is | domain names (never full links) | Various | 2026-09-25 |
Lists we download
We download these lists to check links. Nothing about you or your checks is sent to them.
| Who | What for | Where | Since |
|---|---|---|---|
| abuse.ch URLhaus | A list of known malicious links, downloaded on a schedule | Switzerland | 2026-09-25 |
Questions: [email protected]. See also the Privacy Policy.