Privacy Policy

What we collect

Only what you give us:

• Your email address, when you create an account.
• Content you explicitly submit for checking — a screenshot, a link, or text you paste or share into the app.
• Basic device information needed for the app to function, such as your platform and app version.
• A push notification token, if you allow notifications.

Vishion does not read your messages in the background. There is no inbox monitoring, no SMS scraping, and no access to anything you have not deliberately sent to it.

Where your content is processed

On your device first. When you scan a screenshot, the text in it is read on your phone using Apple's Vision framework, and the image itself is not uploaded — it stays on your device, where your scan history displays it from. If the on-device check is confident the message is a scam, the verdict is produced entirely on your phone with no network involved. Only when the local check is unsure is the extracted text sent to Anthropic's Claude — the AI service that performs Vishion's cloud analysis — and the result returned to your phone. This happens only with your permission: the app asks before anything is sent the first time, and cloud AI can be turned off in the app's settings at any time. Links and text you paste or share for checking are handled the same way. On iPhones with Apple Intelligence, Apple's on-device model performs the analysis instead and nothing is sent at all.

The optional Messages filter for scam texts runs entirely on your phone. Apple's design prevents it from accessing the internet, so nothing about your text messages — sender, content, or the fact that a text arrived — ever reaches Vishion or any server. It only applies to texts from senders not in your contacts, and never to iMessages.

The family verification feature also works offline. The two words are calculated on your own device from a secret shared only within your family group. That secret is not used to identify you, and verification keeps working with no internet connection.

How we use it

• To analyse the content you submit and return a result.
• To operate your family group and its verification codes.
• To send security alerts and notifications you have opted into.
• To respond to support requests.

We do not sell your data, and we do not use the content you submit for advertising.

Who else sees it

Content you allow to be sent for cloud analysis is processed by Anthropic (the maker of Claude, the AI service that performs Vishion's analysis) solely to produce your result — Anthropic does not use it to train AI models. Your account and scan history are stored with Supabase, our hosting and database provider. Both act on our behalf under agreements that protect your data to the same standard as this policy. We do not share your data with anyone else except where the law requires it.

How long we keep it

Your scan history is kept so you can look back at it. The images belonging to your scans are stored on your own device, not on our servers (screenshots submitted before version 2.0 were stored with your history and remain until you delete them). You can delete your account, and the data associated with it, at any time from the app's Profile tab. Deleting your account removes your scans, your family group membership, and your account record.

Your rights

• See the personal data we hold about you.
• Ask us to delete it, or delete your account yourself in the app.
• Export your data.
• Turn off notifications at any time, in the app or in your device settings.

Children

Vishion is not directed at children under 13, and we do not knowingly collect their personal information.

Changes

If we change this policy in a way that materially affects how your information is handled, we will update the date at the top of this page and, where appropriate, tell you in the app.