Anti-Scam Circle
Privacy Policy
Last updated 22 September 2026
Anti-Scam Circle checks only content you choose to submit. It does not listen to calls or read your inbox, contacts, call logs, email, or other apps' notifications. Optional voice input for a report requires microphone permission and a separate action from you.
1. Content you submit
Submitted text or image content is sent over an encrypted connection to our analysis service and Google Gemini after you confirm processing. A normal check does not save the original content in Anti-Scam Circle's database, application logs, or analytics. A separate, optional AI-output report can retain the checked context and evidence that you confirm sending, as explained below.
Google's Gemini API documentation states that prompts and responses may be retained for up to 55 days for abuse monitoring. Google states that paid-service prompts and responses are not used to improve its products. An approved Zero Data Retention request sanitizes content and identifiable metadata before abuse-monitoring logs are written.
Anti-Scam Circle's active Gemini key is on Paid Tier 1 and optional project logging is disabled. Anti-Scam Circle does not use Gemini Search or Maps grounding, the stateful Interactions API, the Live API, File API storage, explicit context caching, saved datasets, or feedback sharing. We do not claim Zero Data Retention because project approval has not been verified. See Google's Zero Data Retention documentation, abuse-monitoring policy, logging and dataset documentation, and Gemini API terms.
2. Account and service data
You may sign in with Google or create an email-and-password account. Supabase Auth handles account email, authentication and recovery; Anti-Scam Circle cannot read your password. We process account IDs, installation credentials stored as hashes on the server, usage counts, and purchase/entitlement information supplied by RevenueCat and the stores to operate accounts, allowances and subscriptions. Store payment-card details are not supplied to Anti-Scam Circle.
Private scan history contains at most 12 compact result summaries encrypted on your device, not the submitted message or screenshot. You can clear that history in the app.
Circle content
Circle members have authenticated accounts. We retain membership, invitation and QR-join request records, display names, account IDs and dates. Email invitations use the address provided for delivery. Circle alerts and replies are private in-app messages, not SMS. Sanitized AI-result summaries and short replies are retained for up to 30 days; the original checked message or screenshot is not automatically included in a Circle alert. Circle membership does not give anyone access to another person's inbox or contacts.
AI-output reports and optional evidence
A report includes the displayed AI result and the reason you provide. With your confirmation, it can also include checked text screened for common secrets and a screenshot or photo you choose to attach. Some app versions offer an optional recorded voice note, which is uploaded only when you send the report; versions that show reviewed on-device dictation send the confirmed transcript instead of an audio recording. Microphone access is used only when you start the optional voice feature. Denying microphone permission does not prevent text reporting or scam checks.
Reports and confirmed evidence are stored privately for moderation until resolved and are removed through linked data/account deletion. They are not ephemeral processing. Review all text and attachments before sending: automatic screening cannot guarantee removal of every secret. Do not include passwords, PINs, verification codes, recovery phrases or unnecessary financial details. Nothing is submitted merely by opening the report form.
3. Optional Safety Alerts and Community Signals
These features apply when available in your app version. They are optional; you can use the scam checker without enabling notifications or submitting a community report.
Safety Alerts
If you turn on Safety Alerts, we store an installation-linked push token, your selected alert region and device language/locale in Supabase. Expo and Google Firebase Cloud Messaging deliver source-linked educational updates. Notification content contains a reviewed title, summary and alert identifier, never the suspicious messages or screenshots you submit for analysis. The region is selected by you; we do not collect GPS location.
Turn alerts off in Scam safety alerts to delete this installation's push subscription. It is also removed with the associated installation/account deletion or when the notification provider reports an unregistered token. Alerts are not real-time monitoring and are not a guarantee that a communication is safe.
Community Signals
You may share an enumerated scam pattern, contact channel and broad region. The report is linked to your random installation ID for abuse prevention and deletion, so it is not anonymous. This form accepts no message content, personal story, names, phone numbers, account details or links.
Reports require moderation. Only combined totals from the last 30 days with at least five approved matching reports are shown; no individual report is published. Rejected reports are removed after 30 days and all reports after 90 days. You can remove linked reports through Settings → Delete my data or the verified external deletion process.
4. Providers
| Provider | Purpose | Data involved |
|---|---|---|
| Google Gemini | Analysis | Submitted content and request metadata under Google's terms |
| RevenueCat and Google Play / Apple | Subscriptions and billing | Account, installation, purchase identifiers, and store transaction data |
| Expo and Google Firebase Cloud Messaging | Optional Safety Alert delivery | Push token, reviewed notification title/body, alert identifier and delivery metadata; no submitted scam messages or Community Signal reports |
| Supabase and hosting | Service operation | Account, installation, usage, deletion, Circle, analysis-output reports, opted-in push subscriptions, curated alerts and structured Community Signal records |
5. Access and permissions
Anti-Scam Circle does not listen to calls, view video chats, monitor conversations in real time, or read your SMS or email inbox, contacts, call logs, other apps' notifications, or unselected device files. Optional report voice input uses microphone permission only when you start it; optional photo capture uses camera permission only when you choose it. Permission to deliver our alerts does not let us read other apps' notifications. We do not collect GPS location, advertising identifiers, or payment-card details, and we do not sell submitted data.
6. Deletion and contact
You can request deletion of your account and associated service data in the app after confirmation. Linked service data includes installation records, reports and private evidence, Circle records, push subscriptions and Community Signal reports. If the app cannot complete deletion, use the external account-deletion process or email support@limocontech.com; do not assume a failed request has removed the account. Deleting Anti-Scam Circle data does not cancel an app-store subscription or erase records held independently by billing or analysis providers under their policies.