Last updated: May 22, 2026
ScamKat · LocalArq Inc. (DBA MobileArq)This Privacy Policy describes how ScamKat ("we", "our", or "the app") collects, uses, and protects your information when you use our iOS app, Android app, or web application.
We collect the following information to provide spam and scam protection:
Account information: Your email address and name when you register, or your Apple ID (name and email) when you sign in with Apple.
Phone numbers: Incoming call numbers are checked against our spam database to identify known spam callers.
Message content: SMS and email content you submit for analysis is processed locally and on our servers to determine whether it is spam. Personal identifiers are automatically removed before any content is stored.
Email account credentials: If you connect an email account (Gmail, Yahoo, AOL), only an App Password is stored — your primary email password is never collected or stored.
Camera / photo library: Accessed only when you choose to scan an image or screenshot for spam analysis. Images are not stored after analysis.
Usage statistics: Blocked call counts, messages screened, and quiz activity to display your personal protection statistics.
We use collected information to:
• Screen calls and messages for spam and scams in real time
• Improve our AI detection model through anonymized training data
• Display your personal protection statistics within the app
• Authenticate your account securely
We never sell your personal data to third parties.
Account data is stored securely on our servers hosted on Railway (PostgreSQL). SMS and email content analyzed for spam is kept in anonymized form — personal identifiers are automatically stripped before storage. You may request deletion of your data at any time by contacting us.
When you submit a scam report or label a message through the training feature, all personal information is automatically stripped before the report is stored or used to improve detection for other users.
If you use Sign in with Apple, we receive only the information Apple provides: a unique user identifier and, optionally, your name and email address. We use this solely to create and authenticate your account. We do not use Apple-provided data for marketing or share it with third parties.
• Firebase Authentication (Google) — used to send and verify the one-time SMS code when you sign in with a phone number. Firebase processes your phone number to deliver the verification code. The Firebase Authentication SDK may, as part of its standard sign-in capabilities, access device account or contact information; ScamKat uses only the phone verification feature and does not read your address book.
• Apple TestFlight — used to distribute beta versions of the iOS app
• Google Play Services — used for Android app distribution
• Railway — cloud hosting for our backend API and database
• Vercel — hosting for the web application
These services have their own privacy policies and data practices.
ScamKat is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Continued use of the app after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy or want to request data deletion, contact us at:
nirupamam@gmail.com