Last updated: 25 July 2026
1. Who we are
SafeScan AI (“SafeScan”, “we”, “our”) helps you check whether a message, email, chat, screenshot or website looks like a scam. This policy explains what personal data we handle when you use the app at safescancheck.com.
2. What we collect
- Account data when you sign in: your email address and, for Google sign-in, the basic profile fields Google returns (name, avatar URL).
- Scan content you submit for analysis: the message text, email, chat, URL or screenshot you paste or upload.
- Scan results we generate: verdict, risk score, explanation, red flags, recommended actions and detected category.
- Usage counters: the number of scans you have run per day, used to enforce free-tier limits.
- Subscription records if you upgrade: your Stripe customer and subscription IDs, plan, status and billing period. We do not store card numbers — Stripe handles all card data.
- On-device data: if you use the app without signing in, your recent scans and plan/usage counters are stored in your browser’s localStorage on that device only.
3. How we use it
- To run the scan you requested and return a result.
- To keep your scan history and let you re-run past scans.
- To enforce free-tier daily scan limits and, for paid plans, unlock unlimited scans.
- To process payments and manage your subscription.
- To keep the service secure and diagnose errors.
4. AI processing
To generate a verdict we send the content you submit, plus a short system prompt, to a third-party large-language-model provider via our AI gateway. The provider processes the text (and, for screenshot scans, the image) to produce the result and does not receive your account identifier. Do not paste content you are not comfortable sharing with an AI model — remove obvious personal details such as bank account numbers before scanning where you can.
5. Where your data is stored
Account data, scan history, daily usage counters and subscription records are stored in our managed backend database. Payment records are stored by Stripe. On-device history is only in your browser’s localStorage.
6. Sharing
We do not sell your data. We share it only with the processors we need to run the service: our backend/database host, our AI gateway provider, and Stripe for payments. We may disclose data if required by law.
7. Retention
We keep your scan history, usage counters, profile and subscription records for as long as your account exists. When you delete your account (see below) we remove them.
8. Your rights — export & deletion
Under UK GDPR / EU GDPR you can request a copy of your data and ask us to delete it. Both are self-service from the Data & privacy page when you are signed in:
- Download your data gives you a JSON file containing your profile, full scan history, daily usage records and subscription records, plus any scans stored on the device you are using.
- Permanently delete my account wipes your profile, scan history, daily usage and subscription records from our database and deletes your sign-in credentials. It also clears the scan history and plan/usage counters stored on the device you confirm deletion from. This cannot be undone.
Cancel any active paid subscription from the Pricing page before deleting your account.
If you scanned anonymously, your history only lives in your browser. Clear it any time from the History page.
9. Cookies & local storage
We use a small number of cookies and localStorage entries that are strictly necessary to keep you signed in, remember your plan/usage counters and store your on-device scan history. We do not use advertising cookies.
10. Children
SafeScan is not intended for children under 13.
11. Changes
We’ll update this page and the “Last updated” date if this policy changes.
12. Contact
Questions or privacy requests: contact us at the email listed on the Pricing page.