Privacy Policy
Last updated: 3 May 2026
SniffCheck — independent job-scam detection tool. This policy mirrors the in-app version exactly.
Introduction
SniffCheck ("we", "our", or "the app") is a job scam detection tool that helps users identify potentially fraudulent job postings. We are committed to protecting your privacy and being transparent about our data practices. SniffCheck does not require an account or login.
Data We Collect
The job title, source, and description you paste into the scanner are sent to Google's Gemini AI for analysis. We do not collect your name, email, or any personal contact details unless you voluntarily submit them through the contact, bug-report, feature-request, or scam-report forms.
Data We Do NOT Collect
We do not collect your name, email address, or phone number unless voluntarily submitted via a form. We do not require account creation or login. We do not collect device identifiers or advertising IDs. We do not track your location. We do not use third-party tracking technologies. We do not collect financial or payment information.
How We Use Your Data
Job description text is sent to the Google Gemini AI model solely to identify potential scams and red flags. Results are returned to your device and shown in the app. We do not sell your data to third parties or use it to build advertising profiles.
Data Storage
Your recent scans are stored locally on your device only. SniffCheck does not maintain a personal cloud account for you. The "Common Scam Patterns" section is a curated educational list maintained by the SniffCheck team — it does not display user-submitted scans or any personal data.
Submitted Scam Reports
If you use the in-app "Report a Scam" form, submitted ad text is sent through web3forms (a third-party form-submission relay) to the developer's inbox. Submissions are reviewed personally by the developer, typically within 7 days.
Submitted ad text may be used in aggregated, redacted form to improve detection patterns. We never republish submissions verbatim, and recruiter/company names are removed before any pattern is added to the educational database.
Retention: raw submissions are retained for up to 90 days for review, then deleted. Aggregated, anonymised pattern data extracted from submissions is retained indefinitely as part of the detection ruleset.
Deletion: to request deletion of a specific submission, contact bophut007@gmail.com within 90 days of submission with the approximate submission date.
False or malicious submissions: each submission is reviewed for plausibility before any pattern is added. Submissions that appear designed to harm specific individuals or companies are discarded, not actioned.
Third-Party Processors
We rely on two processors:
Google (Gemini AI for scan analysis) — see policies.google.com/privacy
web3forms (form-submission relay for bug, feature, contact, and scam-report inboxes) — see web3forms.com/privacy
Children's Privacy
SniffCheck is not directed at children under the age of 13 (or 16 where local law sets a higher age, e.g. parts of the EU). We do not knowingly collect personal information from children.
International Transfers
Pasted job-ad text is transmitted to Google (Gemini AI) which may process it on US infrastructure. The UK and EU recognise standard contractual clauses and US data-privacy frameworks for such transfers; review Google's data-processing addendum for the safeguards relied on.
Data Security
All data transmitted between the app and our analysis services is encrypted using industry-standard HTTPS/TLS protocols.
Your Rights — United Kingdom (UK GDPR)
Under the UK GDPR and the Data Protection Act 2018, you have the following rights:
• Right to be informed (this notice fulfils that requirement)
• Right of access — request a copy of any personal data we hold
• Right to rectification — correct inaccurate personal data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making and profiling
Lodge a complaint: If you believe SniffCheck has mishandled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint or by phone on 0303 123 1113.
Data controller: Michael Worden (sole proprietor, United Kingdom). Contact via bophut007@gmail.com.
Your Rights — European Union (EU GDPR)
Under Regulation (EU) 2016/679 (GDPR), you have the following rights:
• Right to be informed (Art. 13–14)
• Right of access (Art. 15)
• Right to rectification (Art. 16)
• Right to erasure (Art. 17)
• Right to restriction of processing (Art. 18)
• Right to data portability (Art. 20)
• Right to object (Art. 21)
• Rights related to automated individual decision-making (Art. 22)
Lawful basis: Processing of pasted job-ad text is based on the user's explicit request for analysis (Art. 6(1)(b) — performance of a service requested by the data subject). No special-category data (Art. 9) is processed.
Lodge a complaint: You may complain to your national Data Protection Authority. A directory is maintained by the European Data Protection Board at edpb.europa.eu/about-edpb/about-edpb/members.
Data controller: Michael Worden (sole proprietor, established in the United Kingdom; UK adequacy decision in force). Contact via bophut007@gmail.com. We do not have an EU representative under Art. 27 because no large-scale or special-category processing occurs.
Your Rights — United States (CCPA / CPRA + COPPA)
For California residents, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you:
• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information collected from you
• Right to correct inaccurate personal information
• Right to opt-out of the sale or sharing of personal information
• Right to limit use and disclosure of sensitive personal information
• Right to non-discrimination for exercising your CCPA rights
Categories collected: Identifiers (only if you submit an email through a form). Internet activity (only the job-ad text you paste). No sensitive categories. We do not sell or share personal information for cross-context behavioural advertising.
COPPA (Children Under 13): SniffCheck is not directed at children under 13 and we do not knowingly collect personal information from children under 13. If you believe we have, contact bophut007@gmail.com and we will delete it.
Lodge a complaint: California residents may complain to the California Privacy Protection Agency at cppa.ca.gov or the Office of the California Attorney General at oag.ca.gov. Other US residents may contact the FTC at reportfraud.ftc.gov.
Operator: Michael Worden (sole proprietor, United Kingdom). Contact via bophut007@gmail.com.
Your Rights — Global Baseline
Under most data-protection regimes you have the right to know what personal data is being processed, request a copy or deletion of any personal data we hold about you, and object to processing. Because SniffCheck operates without accounts and does not retain pasted job-ad text or scan results on a server, in practice there is normally nothing on file to access or delete.
If your jurisdiction grants additional rights (e.g. Brazil's LGPD, Canada's PIPEDA, Australia's Privacy Act, India's DPDP Act), those rights apply and you can exercise them by contacting us at bophut007@gmail.com.
Operator: Michael Worden (sole proprietor, United Kingdom).
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date. The in-app version (Privacy Policy modal in SniffCheck) mirrors the same content.
Contact
Questions about this notice or how SniffCheck handles your data:
Michael Worden (sole proprietor, United Kingdom)
bophut007@gmail.com