Senior Fraud Alert

Privacy Policy

Last updated: May 26, 2026

The short version

  • The iOS SMS filter and call blocker run on the phone. Messages and call history never leave the device.
  • If you tap the Share Sheet to check a specific text or link, that one piece of content is sent for analysis. Nothing else.
  • If you connect Gmail on the web dashboard, I see sender, subject, and snippet of new emails only — not full bodies, never the rest of your inbox.
  • I don’t sell, share, or train AI on your data. No ad networks, no analytics SDKs, no trackers.
  • Delete everything anytime. Details below.

What I collect

Just from using the iOS app: nothing leaves the phone. iOS hands unknown-sender texts to a sandboxed extension, the extension returns a verdict, and the message stays on your device. Known scam phone numbers are loaded into iOS itself; I don’t see who calls you.

If you tap the Share Sheet check: that one text or link is sent to my server, analyzed, returned with a verdict, and discarded.

If you create an account: your email address, a Supabase user ID, and (if you subscribe) your subscription status from Stripe. I never see your card number.

If you connect Gmail on the web dashboard: read-only access to the subject, sender address, and short snippet of new incoming emails. Not full bodies. Not attachments. Not contacts. Not your existing inbox — only emails that arrive after you connect.

What I never do

  • Read your contacts or call history.
  • See messages from people already in your contacts.
  • Sell, rent, or share your data with anyone for marketing.
  • Use third-party analytics, ad networks, or tracking pixels.
  • Train any AI model on your content (and neither does Anthropic, the provider behind Share Sheet checks).

Who else sees anything

A few outside services act as processors on my behalf, each seeing the smallest possible piece:

Supabase — stores email, user ID, subscription status. SOC 2 Type II certified.
Stripe — handles payments. Sees billing email and card; I never see the card.
Anthropic (Claude) — analyzes Share Sheet content and Gmail snippets you opt into. Doesn’t train on your data.
Google (Gmail API) — only if you connect Gmail. Provides read-only metadata access I’ve been granted, nothing more.
Vercel — hosts the website and API. No analytics added on my end.

Your rights

  • See, correct, export, or delete everything I have on you.
  • Disconnect Gmail anytime in the dashboard.
  • Delete on-device data via Settings → Privacy & Your Data inside the iOS app.
  • I respond to requests within 45 days.

Email seniorfraudalertsupport@gmail.com for any privacy request.

Children, cookies, security

Not for kids under 13. Not knowingly collecting from anyone under 13.

One session cookie keeps you signed in. No tracking or advertising cookies.

All traffic uses HTTPS; the database is encrypted at rest. If anything affecting your account ever happens, I’ll tell you.

Changes

Material changes get an email 14 days before they take effect. Small fixes update the “last updated” date.