ScamGuard is a free Android app that helps prevent phone fraud. This policy explains what data the app processes, where it's stored, and what is sent outside the device. In short: the content of your SMS never leaves your device.
This Privacy Policy (hereinafter β the "Policy") describes how information is processed when using the ScamGuard mobile application (hereinafter β the "Application").
The Developer respects the User's right to privacy and adheres to the principles of Privacy by Design, Data Minimization, and local data processing.
By using the Application, the User confirms that they have read this Policy.
The Developer of the Application is an individual carrying out software development and maintenance in the Republic of Moldova.
Within the meaning of EU Regulation 2016/679 (GDPR) and Law No. 133/2011 of the Republic of Moldova on the protection of personal data, the data controller within this Application is the Developer.
The Developer's contact information is published on the official page of the Application in the app store and/or on the official website of the Application.
ScamGuard is designed to exclude, to the greatest extent possible, the transmission of the User's information to the Developer.
Most analysis operations are performed exclusively on the User's device.
The Developer does not have remote access to the User's device.
While the Application is running, the following may be processed locally:
This data is used exclusively for the operation of the Application's functions and is not transmitted to the Developer.
ScamGuard does not transmit to the Developer, in plain form:
For the technical identification of an instance of the Application, only an irreversible pseudonymized hash of the Android identifier (Android ID) may be transmitted to the server, computed using a modern cryptographic hash function (as of the date of publication β SHA-256). Such a hash does not allow the original Android ID to be recovered.
Under strict GDPR terminology, this hash constitutes pseudonymized data rather than fully anonymous data: it is deterministic (the same device always produces the same hash value), which theoretically allows separate events from the same device to be linked together, but does not allow the User's identity to be established β it is impossible to recover your name, phone number, email, or any other personal information from this hash.
The Android identifier itself, as well as any information that would allow the User's identity to be established, is not transmitted to the Developer.
A separate explanation regarding the IP address β see section 11 (Cloudflare) below: this relates to the operation of the network infrastructure, not to something the Application itself sends.
The irreversible pseudonymized hash of the Android ID is used exclusively to:
The hash is not used to track the User's actions, build profiles, or for advertising.
ScamGuard deliberately does not collect:
Information is processed exclusively to the extent necessary for the Application to function.
The legal bases for processing are:
RECEIVE_SMS β used exclusively for the local analysis of incoming SMS for signs of phone fraud (detection of one-time confirmation codes correlated with a phone call). This is the core function of the Application.
READ_PHONE_STATE β used only to determine whether a phone call is currently active.
POST_NOTIFICATIONS β used to display warnings to the User.
SYSTEM_ALERT_WINDOW β used to display warnings over other applications.
INTERNET β used exclusively to transmit the pseudonymized Android ID hash and obtain technical information necessary for the Application to function.
The Developer does not sell, transfer, or disclose Users' personal data to third parties.
Transfer of information is permitted only in cases expressly provided for by the legislation of the Republic of Moldova.
Cloudflare infrastructure (Cloudflare Workers, Cloudflare KV) is used to secure the network connection.
As with any network connection, at the moment a request is sent to the server, the User's device IP address is inevitably processed at the network infrastructure level (Cloudflare) β this is a standard technical aspect of any internet connection, not specific to this Application, and the Application itself does not read or send the IP address separately.
Cloudflare is used as a network infrastructure provider. For data processing carried out on the Developer's instructions (storing confirmations of acceptance of the terms), Cloudflare acts as a data processor. Separately from this, Cloudflare may independently process some network-level technical data (including IP addresses) for its own security and infrastructure protection purposes β in this respect, Cloudflare acts in accordance with its own Privacy Policy. Cloudflare's current Privacy Policy is available on the official Cloudflare website.
Data is transmitted over the secure HTTPS protocol.
The Developer takes reasonable organizational and technical measures to protect information against unauthorized access, alteration, or destruction.
The pseudonymized hash of the Android ID is stored on Cloudflare servers (KV Storage) for the period necessary to establish, exercise, or defend legal claims related to the use of the Application, in accordance with the applicable statute of limitations, unless a different period is required by law.
Local warning history is stored exclusively on the User's device until deleted by the User.
Under GDPR (for EU residents) and the legislation of the Republic of Moldova (Law No. 133/2011), the User has the right to:
The Application is not intended for use by persons under 16 years of age.
If the Developer becomes aware that data has been obtained from a person who has not reached the established age, reasonable measures will be taken to delete it in accordance with the law.
The Developer has the right to modify this Policy.
The current version is always published at the permanent address specified in the Application.
In the event of significant changes, the User will be notified via the Application's interface or another available method.
This Policy is governed by the legislation of the Republic of Moldova, and, with respect to the processing of personal data of European Union residents, also by EU Regulation 2016/679 (GDPR).
For any questions related to this Policy or the processing of information, the User may contact:
Email: scamguardrm@gmail.com
