Privacy Policy

Effective: September 30, 2026

TrustCheck Radar is operated by AndMoreThings Labs LLC. This policy describes the app's account, analysis and related support services. The initial offering is for adults aged 18 or older in the United States. US availability does not mean that all processing takes place only in the US.

1. Accounts and information you provide

An account is required to use the app, including built-in checks and recovery guidance. We process your name, sign-in email, phone number, account identifier, age confirmation, account status and device-binding information to authenticate you and enforce one active device. We process subscription verification, usage and security records to protect access and prevent abuse. Sign-up credentials are processed by our authentication provider. We do not need your full birth date for the adult confirmation.

You choose the messages or URLs to check. When you select a screenshot, text recognition runs on your device. QR images are also decoded on your device. These analysis paths do not upload the screenshot or QR image to our backend or AI provider. Temporary app copies may exist while you review the content; copies in your photo library or another app remain under your control.

Before online analysis, review the extracted or entered content. The app masks some identifiers, and our service applies additional validation. Masking can miss identifying context and is not anonymization. Reviewed message text, its language and speaker role, or a URL may leave your device when you submit the check. URL paths and query strings can contain personal information. Do not submit passwords, verification codes, payment details, government identification numbers or other unnecessary sensitive information.

2. How online checks work

Our AWS-hosted services authenticate requests, enforce access and usage limits, perform analysis, and maintain the account and operational records described below. When message analysis is used, reviewed message text, language and speaker role are sent to OpenAI. Optional AI recovery clarification sends your reviewed recovery description, language and predefined exposure/action identifiers and policy version. We do not opt customer submissions into OpenAI model-training sharing. Our OpenAI API data-sharing controls are disabled. The configured project uses Standard Retention and Global residency. Our modern AI requests disable stored Responses objects, but that setting does not eliminate separate provider security, abuse-monitoring or applicable caching retention. We do not promise zero provider retention or US-only processing.

URL reputation checks send the checked URL to Google Web Risk. To expand a shortened link or inspect redirects, our service may make limited requests to the linked websites. Those websites can observe the requested URL and ordinary request/network metadata. This is not invisible browsing. A failed expansion or no reputation match does not prove that a link is safe.

Google Play processes Android purchases and supplies purchase/subscription information for verification. We do not receive your full payment card number. Google maintains its own account, transaction and payment records under its policies. We do not currently use VirusTotal for these checks.

Automated and AI assessments can be wrong or incomplete. They provide information, not a guarantee of safety, detection or recovery. Built-in functions and online/provider functions can have different availability.

3. Results, device data and operational records

We may keep minimized assessment summaries, usage receipts, structured feedback, History and recognition/progress information associated with your account. The modern server receipt and History formats do not store your submitted message text, screenshot or original URL as the result record. This does not mean the submitted information was never processed or that all other records have the same lifetime.

Protected local drafts, queued submissions and cached results can remain on your device according to the relevant app flow. Account/device identifiers, authentication tokens, request times, error codes and network metadata support authentication, reliability and abuse prevention. The reviewed app does not automatically read your SMS inbox, contacts, call logs or notifications. Choosing content or using the QR camera is a user action.

4. Optional research is separate

You can receive an assessment without contributing to campaign research. Where research enrollment is offered, it requires a separate optional choice. Refusing or withdrawing does not change your subscription, check allowance or access to protection. General research enrollment and publication are not currently available in the reviewed release configuration.

If you opt in when available, a minimized contribution may be used to study scam campaigns. Withdrawal stops future eligible contributions and initiates removal of still-linkable contributions under their retention rules. Previously finalized aggregates that no longer contain individual contributions may remain for their disclosed lifetime. Pseudonymous source records are not the same as anonymous aggregates.

Demographic research and commercial intelligence use require their own additional optional choices before collection or use; ordinary research permission does not grant them. We do not currently collect age ranges, sexual orientation or state/ZIP for these future research features. We do not sell personal information or provide identifiable victim lists or individual victim risk scores.

5. Retention

Different records have different purposes and deadlines. Logical expiry, active cleanup, backup expiry and a provider's retention are separate. These are the service's approved limits and implemented controls; an expired record is not necessarily physically removed at that exact second.

• Account/profile and active device information: while your account exists, subject to account deletion and necessary security records.
• Modern minimized analysis/usage receipts and attached structured feedback: seven days; feedback does not extend the original receipt deadline. Trial eligibility is retained until account deletion.
• Backend History assessment content: up to 90 days. Minimal duplicate-prevention records can last 120 days; mutation/retry receipts seven days.
• Device recovery: retry receipts seven days, rate-control information 24 hours and minimal security audit information 90 days.
• Operational service logs: 14 days in the reviewed configuration.
• Encrypted Google Play verification tokens: while linked to an existing account, and no later than the latest verified subscription access end plus seven days. Account deletion removes this service's retained token.
• Minimal purchase-linked usage: through the verified access end plus seven days, including after account deletion, to prevent the same paid period from receiving a fresh allowance. This record excludes the deleted account ID, original purchase token, messages and URLs.
• When research is available: contribution outbox content has a 72-hour bound; associated cleanup references can last an additional 24 hours. Transient processing is bounded by the earlier applicable deadline, with a maximum of 21 days. Minimal consent evidence and approved aggregate publications can last up to 400 days.
• Minimal deletion evidence: the approved receipt interval is 120 days. Security barriers that prevent deleted data from reappearing can remain longer until backup/replay safety is established; we do not promise automatic removal of every deletion record after 120 days.

Configured recovery copies can retain earlier data for up to 35 additional days; History and device-recovery recovery windows are seven days. Some stores have these recovery copies disabled. Restoration requires deletion suppression before restored data can be served. These limits do not describe files you saved outside the app, support email archives, store records or independent provider retention.

Support and privacy correspondence is used to handle your request and verify ownership where necessary. Do not attach sensitive submitted content or credentials. Our approved policy requires correspondence and the minimal verification record to be deleted together no later than 30 calendar days after the case is resolved. That record contains only the case/operation reference, verifier, confirmation time and outcome, kept with the case rather than in a separate permanent audit archive. The procedure covers received and sent correspondence and working copies under our control. Mailbox archive, trash and provider backup behavior must be verified; removing a message does not prove immediate erasure of every provider copy.

6. Sharing, security and service providers

We use AWS for hosting and account/backend services, OpenAI for enabled AI analysis, and Google for enabled URL reputation and Android purchases. Necessary service information is processed for those purposes. Our retention controls cannot erase another provider's independent records or establish zero retention. We may disclose information when legally required or to address fraud, abuse and threats to the service or people.

We use access controls, encryption in transit and protected storage appropriate to the data. No system guarantees absolute security. Minimization, encryption and pseudonymous identifiers do not make all service data anonymous.

7. Access, export and deletion

See Account and data deletion for a request path that does not require the app to remain installed. Where enabled, in-app account controls require authentication. Export also requires completed onboarding and the active device; it does not require a paid subscription.

An export contains supported user-visible data and a scope description, not every internal record or original submission. It is read during the download rather than captured as one frozen snapshot. Continuation access expires 15 minutes after starting. Canceling discards the local incomplete download but does not separately revoke its continuation before expiry; authentication and deletion checks still apply. Deletion blocks unfinished exports.

Acceptance of account deletion starts server cleanup. The Android app clears the matching account’s local data when it receives and validates that acceptance; an email or server request does not immediately erase files in an offline or uninstalled app. Acceptance is not confirmation that every server, backup or provider record has already been erased. Necessary minimal suppression, usage and audit records can remain as described above. A file you saved outside the app is not removed by account deletion. Deleting an account does not cancel a Google Play subscription.

8. Website and contact

Visiting the website sends ordinary request/network information to its hosting providers. Other existing site pages load fonts from Google; those font requests contact Google. These replacement policy pages use system fonts and do not add analytics, trackers or forms.

Contact privacy@andmorethings.com for privacy, access or deletion questions, including concerns about a child using the service. We may need proportionate ownership verification before releasing or deleting data. Changes will be identified by a new effective date and appropriate notice; a policy update does not automatically enroll you in optional research or commercial use.