MailShield Guardian — Privacy Policy
MailShield Guardian is built by Glippin Toys, LLC. We respect your privacy. This policy covers the App's core scanning features and its community social features (Scam Radar, Community Feed, Confession Booth, comments, reactions, and badges).
Summary
- No account, no email, no password. MailShield signs you in anonymously.
- Suspicious content you submit (photos of mail, pasted texts, emails, phone numbers) is processed for AI analysis. The raw content is not stored long-term.
- Anonymized scam fingerprints (the pattern of the scam, not your personal data) contribute to the community database so the next person who gets the same scam gets a fast verdict.
- Community features are optional and anonymous. Posts, comments, and reactions are never shown with your name or email.
- Pro and Family plans include a 7-day free trial for eligible new subscribers — see Billing below.
- No advertising. No third-party ad trackers.
What we collect
| Data | Why | Retention |
|---|---|---|
| Anonymous user ID | Tie scans, premium status, family to one identifier | Until account deleted |
| Scan result (verdict + summary) | Your scan history | Until you delete |
| Anonymized scam fingerprint | Community scam database | Indefinitely (de-identified) |
| ZIP code (community features only) | Local threat display, Weekly Area Digest — not a precise address or GPS location | Until you delete or leave community features |
| Community report / Confession Booth post text | Community Feed (BlockBrief) and Confession Booth | Until removed by moderation or account deletion |
| Comments and reactions | Community discussion on reports | Until you delete them or your account |
| Gamification stats and badges | Fraud Resilience Score, Community Defender Badges | Until account deleted |
| Phone number you look up (Pro "Who's Calling") | Sent to our caller-ID provider (Twilio) for name/line-type lookup | Cached 90 days, shared across users, not tied to your account |
| Push token (optional) | Send local scam alerts and community notifications you opt into | Until you uninstall |
| Crash reports | Diagnose bugs | 90 days |
What we never collect
- Names, emails (yours), phone numbers (yours), mailing addresses
- The raw content of the suspicious mail, texts, or emails you scan (used in-memory only, not persisted)
- Precise GPS or device location (community features use a user-entered ZIP code only)
- Anything from advertising or tracking SDKs
Community features
Scam Radar, the Community Feed (BlockBrief), and Confession Booth let you see and share scam activity in your area. Posts, comments, and reactions are always anonymous — displayed with no name, email, or account identifier, only an internal ID never shown publicly. All community content passes automated profanity filtering and PII redaction; reports that draw 3 or more user flags are marked for internal review, and 5 or more hides the report from the public feed pending manual review.
Billing and free trial
Pro and Family subscriptions include a 7-day free trial for eligible new subscribers. Your payment method is not charged during the trial; it is billed automatically for the plan price shown at signup when the trial ends, unless you cancel before then. Manage or cancel anytime in your App Store or Google Play account settings.
The fingerprint engine collective
The asset that makes MailShield smarter than a single AI scan is the proprietary anonymous scam fingerprint database that every user contributes to. When you scan a suspicious item, MailShield extracts a fingerprint — the scam signature (phone number, sender pattern, URL, claim DNA) — strips out your personal context, and adds it to the shared collective. Future users who encounter that fingerprint get a faster, more confident verdict.
AI models in MailShield learn from the aggregated fingerprint collective, not from your individual scans. The verdict you see is the collective intelligence of every prior anonymous contributor.
When you delete your account, your scan history is removed. Past fingerprints contributed to the collective were de-identified at the moment of contribution and remain in the shared dataset — they were never linkable to you in the first place.
Third parties
- Firebase — backend, authentication, community data storage
- Google Cloud Vision — OCR for mail photos (in-flight only)
- Google Vertex AI — numeric embeddings of anonymized scam-pattern metadata (never your raw message text) to match similar threats
- Anthropic (Claude) — scam analysis (paid API, no training on customer data)
- Twilio — caller-name lookup for the Pro "Who's Calling" feature (only when you use it)
- RevenueCat — subscription processing
Your rights
- Delete account + all data: Settings → Delete Account (includes community posts, comments, reactions, and gamification data)
- Request your data: email support@glippintoys.com
- California residents (CCPA) and EEA residents (GDPR) have the right to know, correct, delete, and object to processing of their data; we do not sell personal information. Contact us to exercise these rights.
Children
MailShield Guardian is not designed for or marketed to children under 13, and community features are not available to users under 13.