Privacy policy

This policy covers scamurai.app, the practice call at try.scamurai.app, the Scamurai app (on the web and, later, in app stores), and the emails we send.

If you join the waitlist on scamurai.app: your email address, the date you joined, and which link brought you (for example, a TikTok post).

If you take the practice call at try.scamurai.app: no personal information. It has no fields to type into. We record anonymous events, such as which choices were made in the call and whether it was finished, under a random ID kept in your browser.

If you use the app without an account: your progress (your belt, streak, finished lessons, saved tips and settings) stays on your device. We record anonymous usage, such as the app being opened, the track you picked, lessons started and finished, and whether you answered the sign-in prompt, under a random ID made for your device. These records contain no name, email or account ID.

If you create an account to back up your progress:

• your email address
• if you sign in with Google or Apple, the name and email address they share with us
• your progress: your track, XP, streak, streak freezes, the last day you practiced, the lessons and scenarios you finished, your saved tips, your scores by scam type, and, for each drill, whether your answer was right, how many red flags you found, and the date
• whether you chose “Email me when new lessons are ready”, and when you chose it

Practice screens never ask for personal information, and you should never type real details into one. A practice call or message that asks for your card number is teaching you to say no.

Like any website, our hosting providers keep standard server logs (IP address, browser type and time of request) for security and to keep the service running. On the web, we pass usage events through our own server, so our analytics provider doesn’t receive your IP address.

• To run the app, and to back up and restore your progress.
• To send the sign-in emails you ask for.
• To email you about Scamurai, only if you joined the waitlist or chose “Email me when new lessons are ready”. The waitlist gets one email when a new challenge is ready, nothing else.
• To understand, in counts, how Scamurai is used, so we can make it better.
• To keep the service secure and stop misuse.

We don’t sell your data, share it with advertisers, show ads, or use advertising trackers.

If you’re in the UK or the European Economic Area, our legal bases are: your consent (update emails, which you can withdraw at any time), our agreement with you (your account and sign-in), and our legitimate interest in running a secure, working service (anonymous usage counts and server logs).

These companies process data for us, only to provide their service to Scamurai:

• Supabase: our database and sign-in (account details, progress, the waitlist)
• Vercel: hosts our websites and the web app
• PostHog: anonymous usage counts
• Resend: sends our emails, and can tell us whether an email was delivered, opened or clicked
• Google or Apple: only if you choose to sign in with them

We may also share information if the law requires it, or to protect people from fraud or harm.

Our providers store data in the United States. If you use Scamurai from another country, your information is transferred to the United States and protected as this policy describes.

• Waitlist: until you ask to be removed, or the waitlist closes.
• Your account and progress: until you delete your account.
• Anonymous usage counts: they can’t be linked to you, and we keep them only as long as they help us improve Scamurai.
• Server logs: for a short time, set by our hosting providers.

• Stop update emails: use the unsubscribe link in any of them, or turn off “Email me when new lessons are ready” on the app’s Backup screen.
• See, correct, export or delete your data, or close your account: email hello@scamurai.app from the address on your account. We reply within 30 days.
• Leave the waitlist: email hello@scamurai.app.

Depending on where you live (for example the UK, the EU or California), you may have further rights, such as to object to how we use your data or to complain to your local data protection authority. Email us and we’ll help.

Scamurai isn’t for children under 13, and we don’t knowingly collect their information. If you think a child under 13 has given us their email, tell us and we’ll delete it.

Sign-in uses one-time codes and links, with no passwords to steal. Data is encrypted between your device and our servers, and our database only lets each person reach their own records. No system is perfect, so if something goes wrong, we’ll tell affected people promptly.

If we change what we collect or how we use it, we’ll update this page and the date at the top before the change happens. If a change matters, for example when paid plans arrive, we’ll also tell account holders by email.

Roger Brownell, Scamurai. Email hello@scamurai.app.