Privacy Policy
Effective 4 November 2026
TrustCheck helps you check whether links, sellers and messages might be scams. This policy explains what information the app handles, why, and what choices you have. TrustCheck is published by Muhammad ("we", "us").
The short version
- No accounts. We never ask for your name, email or phone number.
- Links and screenshots you check are analysed, then not stored by us.
- Your check history stays on your phone only.
- Ads are shown by Google AdMob. Your checks are never shared with advertisers.
- We don't sell your data.
1. Information we handle
Links you check
When you check a link, it is sent to our server so it can be analysed. To do this our server may:
- visit the link to follow redirects and read the page (scripts on the page are never run);
- look up the link in security databases: Google Web Risk and URLhaus (run by abuse.ch);
- look up the website's domain name in public domain registries (RDAP) to see when it was registered.
We do not store the links you check after the result is returned to you.
Screenshots you analyse
If you choose to analyse a screenshot, the app first shrinks it and removes hidden photo data such as location on your phone. It is then sent to our server and passed to Anthropic, our AI provider, which reads the text and looks for scam warning signs. We do not store the screenshot. Anthropic does not use this data to train its models and may keep it for a limited period under its commercial terms for safety and abuse monitoring. Screenshots can contain private messages, so please cover bank details, ID numbers and other sensitive information before uploading where you can.
Scam reports
If you submit a report, we store what you send: the link, number or seller name, the type of scam, your description and, if you add one, a screenshot. Reports are anonymous and are kept so we can review them. Reports that our moderators confirm may be used to warn other users about the same link, number or seller. A single unreviewed report never marks anyone as a scammer.
Abuse prevention
To stop spam and misuse, our server keeps a one-way, salted hash of your IP address (not the address itself). For rate limiting this hash is deleted within 24 hours. If you submit a report, the hash is kept with the report so we can detect duplicate or abusive reports.
Technical logs
Our hosting provider, Supabase, may keep standard technical logs (such as request times and IP addresses) for a short period to operate and secure the service.
Information that stays on your phone
Your check history and settings are saved only on your device. You can turn history off or clear it at any time in Settings & privacy. Uninstalling the app deletes them.
What we don't collect
TrustCheck has no user accounts and no analytics tracking. It does not access your contacts, location, camera or microphone. It only accesses photos you choose to pick.
2. Advertising
TrustCheck is free and supported by ads from Google AdMob. Ads appear only below results and are clearly labelled. AdMob may collect device information such as your advertising ID, IP address and general device details to show and measure ads. By default the app requests non-personalised ads. Where the law requires it (for example in the EEA and UK), you are asked for consent first, and you can change your choice any time in Settings → Ad privacy choices. You can also reset or delete your advertising ID in your phone's settings.
Learn how Google uses information: policies.google.com/technologies/partner-sites.
3. Who we share information with
Only the service providers needed to run TrustCheck, and only for that purpose:
- Supabase: hosting, database and file storage
- Google: Web Risk link checks and AdMob advertising
- abuse.ch (URLhaus): malware link checks
- Anthropic: screenshot analysis
- Public domain registries: domain registration dates
We may also disclose information if required by law. We do not sell personal information.
4. How long we keep information
- Checked links and screenshots: not stored by us after analysis
- Rate-limiting IP hashes: deleted within 24 hours
- Reports: kept while needed to protect users. Rejected and spam reports may be deleted.
- History on your device: until you clear it or uninstall the app
5. Security
All communication with our server uses encrypted HTTPS. Our database is locked so the app cannot read it directly, and secret keys are never stored in the app. No system is perfectly secure, but we work to protect the information we handle.
6. International use
TrustCheck is available worldwide. Our service providers may process information in countries other than yours, including the United States and the European Union.
7. Your choices and rights
You can turn off history, clear it, and change your ad choices in the app. Depending on where you live, you may have rights to access, correct or delete personal information about you. Because we don't use accounts, we usually can't link stored information to a specific person, but contact us and we'll help where we can.
8. Children
TrustCheck is not directed at children under 13, and we do not knowingly collect personal information from them.
9. Changes
If we change this policy we will update the date above. Significant changes will also be noted in the app.
10. Contact
Questions or requests about privacy: m0ha.codez@gmail.com