The short version
The Web Scanner analyses files inside your browser
Your files, app lists and profiles are never uploaded to us.
We do not log what you scan or what the results were.
If you submit a community report, we store the package name or file hash, your vote, your optional comment, the time, and a hashed form of your IP address used only to prevent abuse.
We do not sell personal data
We do not run advertising on the scanner.
You can ask us what we hold about you and ask us to delete it.
The rest of this page explains each point. It is the legally binding policy; the plain language is deliberate.
Who we are
This site and the GuestSpy apps are operated by [Company legal name], [Address]. You can contact us about privacy at [contact email].
Accounts and payments
You can use the Web Scanner and submit anonymous community reports without an account. If you create an account (to buy a plan or to attribute your reports), we store your email address, a hashed password, and your plan status.
Payments are processed by the Play Store, the App Store, or the payment provider named at checkout. We do not receive or store full card numbers. We receive confirmation that a payment was made and which plan it applies to.
The GuestSpy apps
The Android and iPhone apps scan on the device. The installed-app list, the APKs, the configuration profiles and the scan results stay on the phone. The apps download database updates from us; that request includes the usual technical information any HTTPS request carries (your IP address, app version) and we keep only aggregate counts for capacity planning, not individual records.
The apps do not include third-party advertising or analytics SDKs. If that ever changes, this policy will change first and we will say so.
Submitting a community report from the apps works exactly as described above.
What we do not do
We do not sell personal data to anyone, for any reason.
We do not share scan contents with anyone, because we never have them.
We do not use your data to train or build anything other than the aggregate statistics described here.
We do not track you across other websites.
Cookies and local storage
The scanner page uses browser local storage to cache the indicator database so it does not need to be downloaded on every visit, and to remember interface preferences. This is stored on your device and is not sent to us. If you have an account, a session cookie keeps you signed in. We do not use advertising or tracking cookies.
Logs
Our web servers keep standard access logs (IP address, requested page, time, browser type) for security and troubleshooting, for a limited period, after which they are deleted. These logs do not contain scan content, because scan content never reaches the server.
Data retention
Community reports are kept while they are useful to the community, which may be indefinitely for published reports about software. Account data is kept while your account exists and deleted within a reasonable period after you close it. Server logs are deleted on a rolling basis.
Your rights
Depending on where you live, you may have the right to access the personal data we hold about you, to correct it, to have it deleted, to object to or restrict its processing, and to receive a copy in a portable form. To exercise any of these, contact [contact email]. We will respond within the period the applicable law requires. You also have the right to complain to your local data protection authority.
Children
The service is not directed at children under the age at which they can consent to data processing in their jurisdiction. We do not knowingly collect personal data from children.
Changes to this policy
If we change this policy, we will update the date below and, for material changes, note the change on this page for a period after it takes effect. We will not make changes that weaken the "nothing uploaded" design of the scanner without saying so prominently.
Contact
[Company legal name]
[Address]
[contact email]
Last updated: [date]