Privacy Policy for Is This a Scam?

1. How the App Works

Is This a Scam? allows you to submit messages, links, or explicitly selected screenshots/images for automated analysis to help identify potential scam, phishing, fraud, or suspicious characteristics.

The app provides informational guidance only. Results are generated using automated analysis and should not be treated as a guarantee that content is safe or fraudulent.

2. Information You Submit for Analysis

When you choose to analyze a message, link, or screenshot, the content you submit is transmitted to Soukai's backend infrastructure and to OpenAI, a third-party artificial intelligence provider, for analysis.

Before the first analysis under the current disclosure version, the app informs you of this processing and asks you to explicitly choose whether to continue. The disclosure covers message, link, and screenshot analysis.

We recommend that you avoid submitting highly sensitive personal information unless it is necessary for the analysis.

3. OpenAI Processing

Submitted message, link, or screenshot content may be processed using OpenAI's artificial intelligence services to generate a risk assessment, explanation, category, and recommended action.

The app does not send your anonymous device identifier to OpenAI.

Provider-side storage, logging, and retention practices are governed by the applicable service provider's own policies and contractual arrangements.

4. Anonymous Device Identifier

The app creates a random anonymous device identifier that is stored locally on your device.

This identifier is sent to Soukai's backend and is used for rate limiting and abuse prevention.

For rate limiting, a cryptographically derived identifier is sent to our rate-limit infrastructure rather than the raw device identifier.

The anonymous device identifier is not used for advertising or cross-app tracking.

5. Recent Scans

Recent Scans are stored locally on your device.

Each Recent Scan may contain:

• the message or link you submitted;
• the risk level;
• the reasons for the result;
• the recommended action;
• the result category; and
• the date and time of the scan.

The app keeps up to the 20 most recent scans.

For message and link checks, Recent Scans may retain the submitted text locally. For screenshot checks, Recent Scans do not retain the screenshot, image URI, thumbnail, or base64. They retain only a local screenshot-analysis label, result, and timestamp sufficient to reopen the result.

Recent Scans do not automatically expire based on time.

You may delete all Recent Scans at any time using the Clear option in the app.

Clearing Recent Scans does not delete the app's anonymous device identifier.

6. Service Metadata

For completed analyses, Soukai may retain limited metadata about the check.

This metadata may include:

• a server-generated check identifier;
• timestamp;
• content type; and
• risk level.

Soukai does not intentionally store submitted messages, links, or screenshot/image data in its application database or analytics system. Completed screenshot checks may use content_type=image alongside the check identifier, timestamp, and risk level.

The reasons, recommended action, and result category are also not intentionally stored in those systems.

7. Analytics

We use limited analytics to understand whether analyses are completing successfully and to operate and improve the service.

Our analytics events use server-generated check identifiers and limited metadata such as content type and risk level. Screenshot/image content itself is not sent to analytics.

We do not use these analytics for advertising or cross-app tracking.

8. Rate Limiting and Abuse Prevention

We use rate-limiting infrastructure to protect the service from abuse and excessive automated usage.

A cryptographic representation derived from the anonymous device identifier is used for this purpose.

Rate-limit information may be retained temporarily as necessary to enforce usage limits.

9. Infrastructure and Service Providers

We use third-party service providers to operate Is This a Scam?, including providers for:

• cloud hosting;
• artificial intelligence analysis;
• database services;
• analytics; and
• rate limiting.

These providers may process information as needed to provide their respective services, subject to their applicable policies and agreements.

Our current infrastructure may include Vercel, OpenAI, Supabase, PostHog, and Upstash.

10. Network Information

Like most online services, infrastructure providers may process technical network information such as IP addresses, request metadata, or device/network information as part of operating, securing, and delivering their services.

The Is This a Scam? application does not use this information for advertising or cross-app tracking.

11. Sharing a Result

The app includes a native Share Result feature.

Sharing occurs only when you choose to use it.

The shared result may include the risk level, reasons, and recommended action.

The original message, link, or screenshot/image you submitted is not automatically included in the shared result.

The destination of a shared result is selected by you through your device's native sharing interface.

12. Information We Do Not Collect Through V0.1

The current version of Is This a Scam? does not require you to create an account or provide your name or email address to use the scam-analysis feature.

The app does not use advertising identifiers or Apple's App Tracking Transparency framework for cross-app advertising tracking.

The app does not request access to your contacts, location, microphone, or camera. It may request photo-library access solely so you can explicitly choose one screenshot/image for analysis.

13. Data Retention

Recent Scans remain locally on your device until they are cleared, displaced by newer scans beyond the 20-item limit, or removed when application storage is deleted. The app does not intentionally retain selected screenshots in Recent Scans or Soukai application metadata stores after analysis; platform image-processing components may manage temporary files according to device behavior.

Limited check metadata stored by Soukai may be retained for service operation, reliability, security, analytics, and troubleshooting.

Third-party service providers may maintain their own retention schedules according to their applicable policies and agreements.

14. Data Security

We use reasonable technical and organizational safeguards designed to protect information processed through the service.

However, no internet transmission or storage system can be guaranteed to be completely secure.

15. Children's Privacy

Is This a Scam? is not designed to knowingly collect personal information from children for advertising or profiling purposes.

If you believe a child has provided personal information that should be removed, contact us at the address below.

16. Your Choices

You can:

• choose not to submit content for analysis;
• cancel the AI-processing disclosure before the first analysis;
• clear Recent Scans stored on your device;
• avoid submitting highly sensitive information; and
• contact us with privacy questions or requests.

17. Changes to This Privacy Policy

We may update this Privacy Policy when the app, our service providers, or our data practices change.

The updated version will be published on this page with a revised "Last Updated" date.

18. Contact

For privacy questions, support requests, or concerns regarding Is This a Scam?, contact: