Legal

Privacy Policy

Last updated: 2 July 2026

ScamChecker is an independent Australian service operated by Wyse Holdings Pty Ltd (“ScamChecker”, “we”, “us”). We take your privacy seriously and handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, and the choices you have. It is written in plain English on purpose.

What we collect

Your email address — to create your account and send you sign-in codes and service messages.
Your first name — only if you choose to give it, so your family can recognise you.
The message you ask us to check — the text you paste in. If you check a photo, the image is read on your own device and is not uploaded to us — only the text we read from it is checked.
Your check history — the result (safe / careful / scam), a short excerpt of the message (up to 140 characters), who it appeared to imitate, and the date.
Family information — who is in your family group and any invites you create.
Subscription details — your plan and a payment reference from Stripe. We never see or store your full card number — Stripe handles that.
Basic technical information — such as your IP address, used to keep the service secure and prevent abuse.

How we use it

To run the scam check and show you a result.
To save your history so you can look back on it.
To power family features and send in-app alerts when a family member checks something risky.
To manage your account, subscription and sign-in.
To keep the service secure and prevent misuse.

We do not sell your personal information, and we do not use it for third-party advertising.

Checking with AI (and information sent overseas)

When our built-in checks are not confident, the text of your message is sent to our AI provider, Anthropic (the makers of Claude), to help assess it. Anthropic processes this in the United States. We only send the message text needed to run the check. By using ScamChecker you consent to this overseas disclosure for the purpose of checking your message.

Who we share information with

We use trusted service providers to run ScamChecker:

Supabase — our database and accounts, hosted in Sydney, Australia.
Anthropic — AI message checking (United States), as described above.
Stripe — secure payment processing.
Resend — sending your emails (such as sign-in codes).
Vercel — hosting the website.

These providers only handle your information to provide their service to us. Some of them may process data outside Australia. We may also disclose information if required by law.

Where your information is stored

Your account and history are stored in Australia (Supabase, Sydney). Some of the providers above (AI checking, payments, email and hosting) may process information overseas.

How long we keep it

We keep your information while your account is active. You can delete individual checks at any time, and you can ask us to delete your whole account and its data by emailing us.

Your choices and rights

You can ask to access, correct or delete your personal information at any time. Just email privacy@scamchecker.au. If you have a concern we can't resolve, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Security

We protect your information with encryption in transit and strict access controls, so you can only ever see your own data. No online service can be 100% secure, but we take reasonable steps to keep your information safe.

Cookies and staying signed in

We use your browser's local storage to keep you signed in. We do not use third-party advertising or analytics tracking cookies.

Children

ScamChecker is intended for adults and is not directed at children under 16.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top shows when it last changed.

Contact us

Wyse Holdings Pty Ltd (trading as ScamChecker) — privacy@scamchecker.au.