Last updated: 10 June 2026
ScamWarden ("the app", "we", "us") helps you spot scam and social‑engineering messages. This policy explains what the app does with your information.
The short version: ScamWarden analyses your messages on your device. Your message content is never sent anywhere unless you explicitly choose to submit a report.
ScamWarden uses Android's notification access to read incoming messages from your messaging apps and SMS, and analyses them on your device using an on‑device AI model. That analysis — including the message text — stays on your phone. ScamWarden does not operate a server that receives your messages.
1. Scam reports you choose to send (optional). When you tap "Send feedback", or report an alert as correct or incorrect, ScamWarden sends that report to our database (Google Firebase Firestore) to improve detection. A report may include your scam / not‑scam assessment, any comment you type, the detected scam type, the sender name, and which app the message came from. The message or conversation text is included only if you explicitly opt in on the report screen. If you turn off "Help improve ScamWarden" in Settings, no reports are sent at all.
2. App analytics. We use Google Firebase Analytics to understand how the app is used and to detect problems, so we can improve it. This includes app‑usage events and identifiers such as a Firebase installation ID and your device's advertising ID.
3. Advertising. ScamWarden shows ads through Google AdMob. AdMob collects your device's advertising ID and standard ad‑related information (device data, ad interactions) to serve and measure ads. See Google's advertising policy: https://policies.google.com/technologies/ads
Notification access — to read incoming messages so they can be analysed on your device. This is the app's core function.
Post notifications — to warn you about a suspicious message.
Foreground service / run at startup — to keep monitoring running reliably.
Detecting your messaging apps — the app checks whether a small list of known messaging apps is installed, so it can offer to monitor them.
Contacts (optional) — only if you choose the "Unknown & recently-added" guard mode, ScamWarden reads your phone's contacts on your device to tell senders you've saved from strangers, so it can skip scanning your established contacts. Senders saved only inside another app (not your phone), and username-based apps, are treated as unknown. Your contacts are never uploaded and never leave your phone. ScamWarden works fully without this — it scans all chats instead.
We use Google services: Firebase (Firestore, Analytics) and Google AdMob. Information handled by these services is governed by Google's Privacy Policy: https://policies.google.com/privacy
Reports you submit are retained to train and evaluate the scam‑detection model. You can stop sending reports at any time in Settings.
To delete reports you've already submitted, email brandon.wkm@gmail.com with your request.
Turn off "Help improve ScamWarden" in Settings to stop all report submissions.
Reset or delete your advertising ID in Android Settings → Privacy → Ads.
Revoke notification access at any time in Android Settings.
ScamWarden is not directed to children under 13 and we do not knowingly collect data from them.
We may update this policy from time to time; the "last updated" date above will change.
Questions about this policy: brandon.wkm@gmail.com