Safe to Tap
Privacy Policy
Effective November 2, 2026. Safe to Tap was called Scam Lens until October 2026; nothing about how we handle data changed with the name.
Safe to Tap is operated by Prodevy LLC, a company registered in the United States (“we”, “us”). We are responsible for the data described in this policy.
- Apart from the optional Scam Text Filter, we only see what you choose to check. We analyze it, return a verdict, and don't keep it.
- If you turn on the Scam Text Filter, texts from numbers that aren't in your contacts are checked automatically as they arrive. They aren't stored or linked to you; only the phone numbers in clear scams are kept, as reports toward our list of scam numbers.
- If you turn on Spam Call Labels, your iPhone checks incoming calls against a list of reported numbers that it downloads. Your calls, and any number you look up, never reach us.
- Your scan history stays on your iPhone.
- Screenshots are read on your iPhone. Only the extracted text is sent, never the image.
- We don't ask for your name or email, show ads, track you, or sell data.
- You can delete your account in the app at any time, which deletes everything we hold.
What happens when you check something
When you paste or share a message, email, link or screenshot into Safe to Tap and tap check:
- For screenshots, your iPhone reads the text itself. The image never leaves your device.
- The text (and any details the app knows, such as the sender, subject, or which app you shared from) is sent over an encrypted connection to the Safe to Tap server.
- Our server checks any links it finds (see “Who else is involved” below) and sends the text, together with the link check results, to our AI provider, Anthropic, for analysis. Your account details are not sent to Anthropic.
- The verdict comes back to your iPhone and is saved in your on-device history.
- If it's clearly a scam, any phone numbers in it (including the sender's) count as a report toward our list of reported numbers. We keep only the number and how many times it was reported that day, never the message or who checked it.
We ask for your permission in the app before the first check, and you can withdraw it at any time in the app's Account screen. Without it, Safe to Tap can't analyze anything.
Scam Text Filter (optional, Premium)
The filter is part of Premium, and is off until you allow it in the app (Account → Scam Text Filter) and choose Safe to Tap in your iPhone's Settings (Apps → Messages → Screen Unknown Senders, then Text Message Filter). When it's on:
- When a text arrives from a number that isn't in your contacts, your iPhone sends the text and the sender's number to the Safe to Tap server. Only regular text messages (SMS and MMS) are checked, not iMessages. Texts from your contacts are never sent, and Safe to Tap on your iPhone skips verification codes.
- Our server checks any links and asks our AI provider, Anthropic, whether it's a scam. The request carries no account information, so we can't tell whose phone it came from.
- If it's clearly a scam, your iPhone moves it to the Junk folder in Messages. Otherwise it arrives as usual.
We don't store filtered texts or the result. If a text is clearly a scam, its sender's number and any phone numbers in it count as a report toward our list of reported numbers: we keep only the number and how many times it was reported that day, never the text or who received it. Turn the filter off at any time in the app (Account → Scam Text Filter → Stop Checking Texts), or by choosing None under Text Message Filter in Settings.
Spam Call Labels (optional, Premium)
Call labels are part of Premium, and are off until you choose Safe to Tap in your iPhone's Settings (Apps → Phone → Call Blocking & Identification). When they're on:
- The app downloads a list of phone numbers that people have reported as spam or scam calls, from the Safe to Tap server. We build the list from public reports to the US Federal Trade Commission (FTC) and the Federal Communications Commission (FCC), and from phone numbers in messages Safe to Tap found to be clear scams. A number is included only after more than one report. The list is the same for everyone and contains no information about you.
- The app hands the list to iOS. When a call comes in, your iPhone itself checks the number against the list and, if it's there, shows “Suspected Spam”, or “Possible Spam” for numbers with fewer reports. Safe to Tap doesn't see the call or who's calling, and calls are never blocked.
- The app checks for a new list from time to time, including in the background. These downloads are signed in like any other request, so our server logs show that your account downloaded the list, but nothing about your calls.
Check a number, in the app's Calls tab, and sharing a contact to Safe to Tap, look the number up in the list on your iPhone when you have Premium, so the numbers aren't sent anywhere. On the free plan, which doesn't download the list, the numbers are sent to our server to be looked up there. We count how many lookups you made that day, for the free plan's limit, but don't store or log the numbers. To turn call labels off, tap Stop Labeling Calls under Account → Spam Call Labels, or switch Safe to Tap off under Call Blocking & Identification in Settings.
Premium subscriptions
Premium is bought through the App Store. Apple handles the payment, and we never see your card or Apple Account details. When you subscribe or restore a purchase, the app passes Apple's signed record of the subscription to our server, which links it to your Safe to Tap account; Apple also tells our server directly when it renews, is cancelled or is refunded. Manage or cancel your subscription in your iPhone's Settings (your name → Subscriptions) or from Account in the app. Deleting your Safe to Tap account doesn't cancel the subscription with Apple; cancel it in Settings.
News notifications (optional)
Notifications are off until you turn on News & New Features (offered once when you close your first result, and in Account) and allow notifications for Safe to Tap. When they're on, the app gives our server the push token Apple assigns to the app on your iPhone, so we can send occasional news about Safe to Tap, such as new features, through Apple's push service. We don't use it for anything else. Turning news off, signing out or deleting your account removes the token from our server, and we also remove it when Apple tells us it no longer works.
What we store
| Data | Why | How long |
|---|---|---|
| An account ID, and the anonymous identifier Sign in with Apple gives us for this app | To recognise your account and apply your plan's limits | Until you delete your account |
| An encrypted token from Apple | Only to disconnect Safe to Tap from your Apple Account when you delete your account | Until you delete your account |
| For each check: a one-way fingerprint (hash) of the text, the type of item, the score and verdict, which AI model produced it, the time, and your answer if you tell us whether the verdict was right and why it was wrong | To count your daily checks, to investigate abuse of the service, and to measure and improve accuracy | Deleted automatically after 30 days, or immediately when you delete your account |
| If you subscribe to Premium: Apple's ID for the subscription, which plan it is, when it renews or ends, whether it will renew, and whether it was refunded | To give your account Premium for as long as you've paid for it | Until you delete your account |
| On the free plan: how many numbers you looked up today (not the numbers) | To apply the free plan's daily number lookups | Until the next day you look one up |
| If you turned on news: the push token for the app on your iPhone, the app version, and when it was last updated | To send you news notifications | Until you turn news off, sign out or delete your account |
| Phone numbers from messages found to be clear scams (the sender and any number in the text), with how many times each was reported per day. Not linked to you or to the message. | To label calls from scam numbers and answer number checks | 90 days |
| Server logs with IP addresses and request times | Security and keeping the service running | A short period, then deleted by routine log rotation |
We do not store the text you check, apart from the phone numbers in clear scams described above. A fingerprint can't be turned back into the text. We also don't receive or store anything about your phone calls.
Who else is involved
| Provider | What they receive | Why |
|---|---|---|
| Anthropic (Claude AI) | The text you check and the link check results. With the Scam Text Filter on, also texts from unknown numbers and their sender's number. No account details. | To analyze the item for signs of a scam. Under Anthropic's commercial terms, this data isn't used to train its models. Anthropic may keep it for a limited period (currently up to 30 days) for safety and abuse monitoring. See Anthropic's privacy policy. |
| Google (Web Risk) | Only the links found in what you check or in filtered texts, never the rest of the message | To check whether Google lists the website as dangerous (phishing or harmful software). See Google's privacy policy. |
| Domain registries (via rdap.org) | Only website names, such as example.com | To look up how old a website is. New websites are a common scam sign. |
| Apple | Sign-in requests, news notifications if you turned them on, and Premium purchases | To sign you in with your Apple Account (we don't request your name or email), to deliver notifications to your iPhone, and to take payment for Premium. See Apple's privacy policy. |
We don't sell or rent any data, use it for advertising, or share it with anyone else, except where the law requires it.
On your iPhone
Your scan history, including a copy of each item you checked (for screenshots, a smaller copy of the image), is stored only on your iPhone, inside the Safe to Tap app. You can delete individual entries or the whole history in the app. Deleting the app removes it too.
Your choices and rights
- Delete your account: Account → Privacy → Delete Account. This deletes your account and all records we hold about you (including any push token), disconnects Sign in with Apple, clears your on-device history and the downloaded list of reported numbers, and turns off the Scam Text Filter.
- Withdraw AI consent: Account → Privacy. Safe to Tap stops sending anything for analysis, including texts from the Scam Text Filter, until you agree again.
- Turn off the Scam Text Filter: Account → Scam Text Filter → Stop Checking Texts, or choose None under Text Message Filter in iOS Settings.
- Turn off Spam Call Labels: Account → Spam Call Labels → Stop Labeling Calls, or switch Safe to Tap off under Settings → Apps → Phone → Call Blocking & Identification.
- Turn off news notifications: switch off Account → News & New Features, or turn off notifications for Safe to Tap in iOS Settings.
- Stop using Sign in with Apple: in iOS Settings → your name → Sign in with Apple. We then delete your account automatically.
- Questions or requests about your data (including access or deletion under laws such as the GDPR): contact us at the address below.
Children
Safe to Tap isn't designed for children under 13, and we don't knowingly collect data from them.
Security
All communication between the app and our servers is encrypted. Access to our servers is restricted, and the Apple token we keep is encrypted at rest.
Changes
If we change how Safe to Tap handles data, we'll update this page and its effective date. Significant changes will also be shown in the app.
Contact
Prodevy LLC, United States
Email: privacy@safetotap.com