Privacy policy

Effective date October 2, 2026

1. Who we are

Signlore is a scam-protection service ("Signlore", "we", "us", "our"). We are the data controller for personal data processed through our website and app.

2. What this policy covers

This policy explains how we handle personal data when you use:

  • the Website: signlore.com and its pages, including the scam check page, the "Got scammed" quiz and action plan, the family protection page and the waitlist forms;

  • the App: the Signlore app for iPhone, including its share extension.

Together we call them the "Services". Where something applies only to the Website or only to the App, we say so.

3. About Signlore

Signlore helps people recognise scam messages and know what to do if they have been targeted. In the App, you paste a message or share a screenshot, and Signlore returns a risk assessment with the warning signs it found. On the Website, you can learn about Signlore, get a step-by-step plan after a scam and join the waitlist.

Signlore's results are estimates based on the text you provide. They support your own judgement and are not legal, financial or law-enforcement advice.

4. Data we collect

4.1 On the Website

Information you give us

  • Email address, when you join the waitlist or ask to be told when we launch.

  • Your plan choice, such as individual or family protection, so we know which offer is relevant to you.

  • Quiz answers from the "Got scammed" flow, such as the type of scam and which steps you have completed. The quiz uses preset options, so please do not type card numbers, passwords or other sensitive details anywhere on the Website.

Information collected automatically

  • Device and browser type, operating system, screen size and language.

  • IP address and an approximate location derived from it (country or city level).

  • Pages viewed, buttons clicked, time spent and the order of your actions.

  • How you arrived, including the referring site and campaign parameters (UTM tags).

  • Which version of a page you saw when we test different designs.

  • Cookie and similar identifiers, described in section 6.

We do not take payments on the Website at this time.

4.2 In the App

The App works without an account. We do not ask for your name, email or phone number to use it.

Messages you check

  • Message text. The text you paste, type or share, and the sender's number or name if you add it. We send it to our servers to analyse it and return your result.

  • Screenshots. Text is read from the image on your device. The image itself never leaves your device, is not saved and is discarded as soon as the text is extracted. You can review and edit the extracted text before sending it.

  • Check details: whether the text was typed, taken from a screenshot or shared from another app, your device language and region, and the App version.

Message text may contain personal data about you or other people, such as names, numbers or links. Please remove anything you do not want analysed before you send it.

Identifiers and device data

  • A random app identifier, created when you first use the App. It links your checks, subscription and deletion requests without us knowing who you are.

  • A device token from Apple's DeviceCheck service, used to apply the free check limit to your device. It does not identify you.

  • Technical information such as device model, iOS version and how confident the on-device text recognition was.

Your feedback

  • Whether a result was helpful, and the reason you select if it was not.

Subscriptions

  • Purchases are handled by Apple. We receive your subscription status and transaction details from Apple, linked to your random app identifier. We never receive your card details or your Apple ID.

App usage

  • Events such as opening the App, starting a check, viewing a result and viewing the subscription screen. These events never include message text, sender numbers or links.

Stored only on your device

  • Your check history is stored on your iPhone, not on our servers.

What the App does not collect

  • Contacts, location, or any photos other than the ones you choose to check. The App asks for camera access only if you take a photo to check.

5. How we use your data

  • To check messages (App): to analyse the text you send, compare links, domains and numbers against known scam patterns, and return your result.

  • To provide your subscription (App): to apply the free check limit, confirm your subscription with Apple and handle renewals and refunds.

  • To run the waitlist (Website): to confirm your sign-up, tell you when Signlore launches and send you the launch offer for the plan you chose.

  • To improve detection (App, only with your permission): if you allow it in the App, we keep the text of your checks for a limited period and use it to make scam detection more accurate. You can turn this off at any time.

  • To build the right product: to understand which features and plans people want, using aggregated quiz answers and usage data.

  • To measure and improve the Services: to see how people use the Website and App, compare designs and fix problems.

  • To keep the Services safe: to detect spam sign-ups, bots and abuse of our analysis service.

  • To meet legal obligations: to respond to lawful requests and keep records the law requires.

We do not sell your personal data. We do not use your email address, your checks or your App usage to show you ads. Without your permission, we do not keep message text after your check is complete.

6. Cookies, analytics and tracking

Website. We use cookies and similar technologies to keep the Website working and to understand how it is used. Essential cookies are always on. Analytics cookies are set only with your consent where the law requires it, and you can change your choice at any time in or in your browser settings. We use Amplitude and Google Analytics (through Google Tag Manager) for Website analytics. We do not send your email address to analytics providers.

App. We use Amplitude to record App usage events, linked to your random app identifier. The App does not track you across apps and websites owned by other companies. If this ever changes, we will ask for your permission first through Apple's App Tracking Transparency prompt.

8. Who we share data with

We share personal data only with service providers that help us run the Services, and only the minimum they need. They act on our instructions and may not use the data for their own purposes.

ProviderPurposeApplies to
Google Firebase and Google CloudBackend hosting and processing of checksApp
AI model providersAI analysis of message textApp
Google Safe Browsing / Web RiskChecking links found in a message against known harmful sitesApp
AppleSubscriptions, payments and the free check limit (DeviceCheck)App
AmplitudeUsage analyticsWebsite and App
Google Analytics and Google Tag ManagerWebsite analyticsWebsite
Hosting providersHosting of the Website and waitlistWebsite
Email delivery providersWaitlist and launch emailsWebsite

To check a domain found in a message, we may also look up public registration records, such as when the domain was created. Only the domain name is used for these lookups.

We may also disclose data if required by law or a valid request from a public authority, to protect our rights or the safety of users, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

We may publish anonymised, aggregated statistics about scam trends. These never identify you.

9. International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the EEA, the UK or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

10. How long we keep data

DataHow long
Message text and sender detailsDeleted once your check is complete. If you allow us to use it to improve detection, kept for a limited period and then deleted
ScreenshotsNever stored. Discarded on your device right after the text is read
Check historyOn your device until you delete it with "Delete my data"
Check results and feedback on our serversAs long as needed to provide the Services, or until you use "Delete my data"
Subscription recordsWhile your subscription is active, then as long as tax and accounting laws require
Waitlist email and plan choiceUntil you unsubscribe or ask us to delete it, and no longer than 12 months after the App launches
Analytics dataAs set in our analytics settings, then deleted or anonymised
Security logsFor the short period needed to detect and investigate misuse

11. Security

We use encryption in transit, access controls and limited staff access to protect your data. Screenshots never leave your device, and the App stores its identifiers in the iOS Keychain. No online service is completely secure. If a breach is likely to put your rights at risk, we will notify you and the relevant authorities as the law requires.

12. Your rights

Depending on where you live, you may have the right to:

  • access the personal data we hold about you;

  • correct inaccurate data;

  • delete your data;

  • restrict or object to certain processing;

  • receive your data in a portable format;

  • withdraw consent at any time, without affecting earlier processing;

  • complain to your local data protection authority.

If you are a California resident, you also have the right to know what personal information we collect and to ask us to delete it. We do not sell personal information, and we will not treat you differently for using your rights.

How to use your rights

  • In the App: use "Delete my data" in the App settings. It erases your check history on your device and all server records linked to your app identifier. Because the App has no accounts, this is the fastest and most complete way to delete your App data.

  • For the Website or anything else: email support@signlore.com. For waitlist data, write from the address you signed up with. We will reply within 30 days.

Because we do not know who you are in the App, we may not be able to find your App data from an email request alone.

13. Children

The Services are not intended for anyone under 13, and we do not knowingly collect personal data from children under 13. If you are 13 or older but under the age of majority in your country, you may use the Services only with the permission of a parent or legal guardian. If you believe a child under 13 has given us their data, contact us at support@signlore.com and we will delete it.

14. Changes to this policy

We may update this policy as Signlore develops, for example when we add new features or start taking payments on the Website. We will change the effective date at the top. For significant changes, we will notify waitlist members by email and show a notice in the App.

15. Contact us

For any question about this policy or your data, contact us at support@signlore.com.