Privacy Policy

---

Last updated: March 2026

MailShield Guardian ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights as a user.

Information We Collect

Scan content you submit — mail photos, SMS text, email text, and phone numbers — used only to perform fraud analysis and not stored after your result is returned.

Email content (if you connect Gmail or Outlook) — when you use inbox scanning, individual email subjects and bodies are sent to our AI for fraud analysis only. We access your inbox read-only via OAuth; we cannot send, delete, or modify emails. Email content is not stored after your result is returned.

Anonymous device identifier — a random ID assigned at first launch, never linked to your name or email address.

Purchase and subscription status — managed by RevenueCat to verify your subscription tier (Free, Pro, or Family).

We do not collect your name, phone number, location, or contact list. Your Gmail or Outlook email address is used solely to authenticate your OAuth connection and is not stored or shared.

How We Use Your Information

Fraud analysis — your submitted text or images are sent to our AI service (Claude by Anthropic) to detect scam patterns. Content is not stored by Anthropic after analysis.

Community protection — high-risk scan patterns (never your personal details) may be stored anonymously to warn other users of similar threats.

Subscription management — to verify your access to Pro or Family features.

Third-Party Services

Firebase (Google) — cloud infrastructure for anonymous authentication and scan storage.

RevenueCat — subscription management and payment processing.

Anthropic (Claude AI) — AI-powered fraud classification.

Google (Gmail API) — read-only inbox access when you connect Gmail for email monitoring.

Microsoft (Graph API) — read-only inbox access when you connect Outlook/Microsoft 365 for email monitoring.

Apple processes payments via the App Store. We never see your payment card details.

Data Retention

Scan content is processed in real-time and not stored beyond what is needed to return your result. Anonymous scan metadata (risk level, category, timestamp) may be retained for up to 12 months to support community fraud detection. You may request deletion at any time by contacting us.

Your Rights

You may request access to, correction of, or deletion of any data associated with your anonymous device ID. California residents have additional rights under CCPA. EU/UK residents have rights under GDPR. We do not sell your data to third parties.

Children

MailShield Guardian is not directed at children under 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this policy from time to time. Continued use of the app after changes constitutes acceptance.

Contact Us

For privacy questions, contact: privacy@mailshieldguardian.com