Privacy Policy

Effective Date: 3rd September 2025

Last Updated: 3rd September 2025

Scamora (“App”) is developed and maintained by Leogics Solutions Sdn Bhd (“Leogics”, “we”, “us”, or “our”) under the MyHackathon Program, funded by Cradle Fund and supported by the National Anti-Financial Crime Centre (NFCC). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you use the Scamora mobile application on iOS and Android platforms.

By installing or using Scamora, you acknowledge that you have read and understood this Privacy Policy.

1. Scope and Purpose

This Privacy Policy applies to all users of the Scamora mobile application within Malaysia. The App’s purpose is to support the national fight against financial scams by enabling data-driven fraud monitoring, reporting, and awareness. All data is processed in accordance with the Personal Data Protection Act (PDPA) of Malaysia.

2. Information We Collect

We collect the following categories of data:

a) Personal Information

• Email address

• Phone number

• Age

• Gender

• Race

b) Device and Technical Information

• Device OS (Android or iOS)

c) Location Information

• Coarse location (state and district level only)

• No GPS tracking is performed

d) Content Information

• Uploaded photos and media

• Chat messages submitted by users (e.g., messages to Scamora chatbot)

e) Inferred or Aggregated Information

• Scam trend data by demographic and location (not linked to identities)

3. How We Use Your Information

Your data is used solely to:

• Support Malaysia’s national anti-scam strategy

• Understand and analyze scam trends across demographics and locations

• Alert users about scam patterns or verified warnings

• Support reporting and recovery efforts by authorized government agencies

• Improve Scamora’s functionality, usability, and coverage

4. Legal Basis for Processing

Under the PDPA (Malaysia), our legal bases for collecting and processing your data include:

• Your consent when you use the app and submit data

• Legitimate interest in supporting national fraud prevention

• Legal obligation to cooperate with authorities like NFCC

• Vital interests in preventing economic harm to individuals and institutions

5. Message Data Use

When you interact with the Scamora chatbot, your messages are:

• Stored securely for analysis and reporting

• Not accessible to Leogics staff

• May be processed by authorized agencies (e.g. NFCC) to detect scam patterns

• Always anonymized before analysis—messages are not linked to your identity

Messages are not used for training AI models, personalization, or any automated decision-making processes.

6. Data Sharing and Disclosure

We do not sell your data.

We may share aggregated or anonymized data with the following:

• National Anti-Financial Crime Centre (NFCC)

• Other authorized Malaysian government agencies for enforcement, recovery, or prevention of scams

Personal identifiers (email, phone, etc.) are never shared unless required by law or user consent is explicitly obtained.

7. Data Storage and Security

• All data is stored on Amazon Web Services (AWS) infrastructure, hosted in the Malaysia Region

• We implement strict security controls:

  • JWT Bearer Authentication

  • Encrypted transmission of all data (HTTPS/TLS)

  • Access control policies and role-based security

8. Data Retention

We retain user data for five (5) years, in line with national anti-fraud efforts. This ensures long-term scam pattern tracking. After this period, data may be archived or anonymized for analytical purposes.

9. Your Rights and Choices

You have the following rights:

• Access your data upon request.

• Update or correct certain profile information.

• Opt-out of non-essential data collection (note: this may limit app functionality).

• Account Deletion is not currently supported due to integration with national reporting infrastructure.

Requests can be made via email (see Section 11).

10. Children’s Privacy

Scamora is intended for general public use and does not restrict access by age. However, we do not knowingly collect personal data from children under 13. If we become aware that such data has been collected, it will be removed.

11. Contacting Us

If you have privacy concerns, data access requests, or wish to exercise your rights, please contact:

Mark

Leogics Solutions

📧 markmak@leogics.com

12. Changes to This Privacy Policy

We may revise this Privacy Policy periodically. When we do, we will:

• Update the “Last Updated” date at the top of this policy

• Notify users through the app or official Scamora communication channels

• Continued use of Scamora constitutes your acceptance of any revised policy