Scambook is operated by Webair AI LLC("Webair AI," "we," "us," or "our"), a limited liability company located in New York, United States. This Privacy Policy describes what information we collect through the Scambook website and the Scambook iOS application (together, the "Service"), how we collect it, how we use it, who we share it with, how long we keep it, and the choices and rights you have — including how to request deletion of your data or revoke consent at any time.
The short version: we designed Scambook so that checking a message requires as little personal information as possible. The messages and screenshots you check are analyzed and discarded — they are not stored, sold, or used to identify you.
1. Information we collect and how we collect it
We collect only the information needed to operate the Service:
- Content you submit for analysis. When you paste a message, phone number, email address, or link, or upload or share a screenshot, that content is transmitted to our servers so our AI can analyze it. This content may incidentally contain personal information (for example, a phone number inside a text message). We treat all submitted content as sensitive.
- Waitlist and contact information. If you join our waitlist or contact us, we collect your email address and any information you choose to include in your message.
- Account information (app). If you create a Scambook account in the app, we collect your email address and basic account settings.
- Subscription information. Purchases of Scambook Pro are processed by Apple through your Apple Account. We receive confirmation of your subscription status from Apple, but we never receive or store your payment card details.
- Usage and device data. Standard technical information such as device type, operating system version, app version, crash logs, and anonymous usage events (for example, that a check was performed), used to keep the Service reliable and secure.
- Anonymized scam signals.When a check identifies scam indicators, we retain anonymized signals — such as a sender's phone number or email address that was flagged, a malicious link, or the structural pattern of a scam script. These signals are disassociated from you and from the surrounding message content.
2. How we use your information
- To analyze the content you submit and return a scam verdict — the core function of the Service.
- To maintain and improve our scam-detection database using anonymized scam signals, which helps protect all users.
- To operate, secure, debug, and improve the Service.
- To manage your waitlist spot, account, and subscription, and to respond when you contact us.
- To send you service communications (such as launch notifications you signed up for). Marketing emails always include an unsubscribe link.
- To comply with legal obligations.
We do not sell your personal information, and we do not use the content of your checked messages for advertising. We do not use your submitted content to train third-party AI models.
3. What happens to messages and screenshots you check
Submitted content is processed in memory to produce your verdict and is then discarded. We do not build a profile of you from the messages you check. What we keep is limited to anonymized scam indicators (Section 1) — for example, that a particular phone number sent a known scam script. These indicators cannot reasonably be used to identify you and are retained because they protect other users from the same scammer.
4. Third-party service providers
We share data only with service providers that help us operate the Service, and only to the extent necessary. We confirm that these providers offer the same or equal protection of user data as described in this policy, and we require this contractually:
- OpenAI (analysis).Submitted content is sent to OpenAI's API to generate the scam analysis. Per OpenAI's API data-usage terms, API content is not used to train OpenAI's models.
- Vercel (hosting). Our website and API are hosted on Vercel infrastructure in the United States.
- Apple (payments).In-app purchases and subscriptions are processed by Apple. Apple's handling of your payment information is governed by Apple's own privacy policy.
We may also disclose information if required by law, to protect the rights and safety of our users, or as part of a corporate transaction (in which case this policy will continue to apply to previously collected data).
5. Data retention
- Checked messages and screenshots: processed and discarded; not retained after analysis completes.
- Anonymized scam signals: retained indefinitely, as they contain no personal information linked to you and serve the safety of all users.
- Waitlist and account data: retained until you delete your account or ask us to remove you, after which it is deleted within 30 days.
- Usage and crash data: retained for up to 12 months, then deleted or aggregated.
6. Your rights: deletion, access, and revoking consent
You are in control of your data. At any time, you may:
- Delete your account. If the app supports account creation, it also supports account deletion from within the app (Settings → Account → Delete Account). Deleting your account removes your personal information from our systems within 30 days.
- Request deletion or a copy of your data. Email us at hello@webairai.com and we will respond within 30 days.
- Revoke consent. You may withdraw consent to processing at any time by deleting your account or contacting us. Revoking consent does not affect processing that occurred before revocation.
- Unsubscribe. Every marketing email includes a one-click unsubscribe link.
Depending on where you live (including under the New York SHIELD Act, the California Consumer Privacy Act, and the EU/UK GDPR where applicable), you may have additional rights such as access, correction, portability, and non-discrimination for exercising your rights. We honor these requests regardless of where you live.
7. Tracking and advertising
Scambook does not track you across apps and websites owned by other companies, does not serve third-party advertising, and does not use your data for targeted advertising. Because we do not track, the iOS app does not need to request App Tracking Transparency permission.
8. Security
All data is encrypted in transit using TLS. Access to production systems is restricted and logged. No method of transmission or storage is 100% secure, but we design for the minimum possible data footprint — the most sensitive thing you give us, the message you check, is not stored at all.
9. Children's privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at hello@webairai.com and we will delete it promptly.
10. International users
The Service is operated from the United States. If you use it from outside the U.S., your information will be processed in the U.S. under this policy.
11. Changes to this policy
We may update this policy from time to time. Material changes will be announced on this page with an updated effective date, and — where required — through the app or by email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
12. Contact us
Webair AI LLC
New York, United States
Email: hello@webairai.com
See also our Terms & Conditions.
