Privacy Policy

Effective date: March 19, 2026  ·  SCMR2 — Scam Message Reporter & Radar

1. Who We Are

SCMR2 (Scam Message Reporter & Radar) is a free anti-scam detection app for Filipino users, available at app.scmr2.help and on Google Play. The app uses AI to analyze messages for scam patterns in Tagalog, Taglish, and English.

2. Data We Collect

When you scan a message, the following data is stored on our servers:

• Message text — the text you submitted for scanning
• Sender label — the optional name or number you typed in the "Who sent this?" field (if provided)
• Scan result — risk score, risk level, AI explanation, detected patterns, recommended action
• Anonymous session ID — a random UUID generated in your browser; not linked to your identity
• Timestamp — date and time of the scan (UTC)

If you submit a scam report (optional), we additionally store the suspect phone number or account you provide, linked to the scan result.

3. Data We Do NOT Collect

• Your name, email address, or phone number
• Your Google account or any login credentials
• Your location or IP address (beyond what our hosting infrastructure logs transiently)
• Device identifiers (IMEI, advertising ID, etc.)
• Photos, contacts, or any other device data

4. How We Use Your Data

• Scam detection — your message text is sent to an AI API (Anthropic Claude and/or Google Gemini) to produce a risk analysis. The AI providers process the text under their own privacy policies.
• Community alerts — when a scan returns a high-risk result (score ≥ 0.6), an anonymized alert is broadcast to other connected users in real time. No message text is included in the broadcast.
• Admin review — submitted reports may be reviewed by the app administrator to improve scam pattern detection.
• Service improvement — aggregate, anonymous scan statistics are used to monitor app health and improve detection accuracy.

5. Data Retention

All scan records (message text, results, session IDs) are automatically deleted after 90 days. A scheduled cleanup runs daily and permanently removes records older than 90 days. There is no manual backup of individual scan content beyond this window.

Scan history visible to you on-device is stored in your browser's localStorage and is never uploaded to our servers. You can clear it at any time by clearing your browser data.

6. Data Sharing

We do not sell, rent, or share your data with advertisers or data brokers. Data is shared only in these limited cases:

• AI providers — message text is sent to Anthropic and/or Google for analysis. See their privacy policies for details on how they handle API inputs.
• Legal obligations — we may disclose data if required by Philippine law or court order.

7. Security

Our servers run on AWS (ap-southeast-1 region) with encrypted storage, HTTPS-only access, and restricted administrative access. Rate limiting and bot protection are in place to prevent abuse.

8. Children's Privacy

SCMR2 is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has submitted data, please contact us and we will delete it promptly.

9. Your Rights

Because we do not collect personally identifiable information, most data subject rights (access, correction, deletion) are satisfied by the 90-day automatic purge. If you submitted a report with a specific suspect number or account and wish it removed, contact us below.

10. Changes to This Policy

We may update this policy as the app evolves. The effective date at the top of this page will reflect the latest revision. Continued use of the app after changes constitutes acceptance.

11. Contact