Privacy Policy

Legit? is an iOS app made by Outloud US LLC (“we”, “us”). Outloud US LLC is the controller of the personal data described in this policy, which explains what data the app handles and why.

In short

• No accounts, no ads, no tracking.
• No third-party analytics or advertising SDKs.
• Message text is sent only to produce a verdict. We don’t store it on our server unless you turn on message sharing.
• Your history stays on your phone.

Checking a message

When you check a message, the app extracts the text on your device. Screenshots, photos and PDFs are read on your phone, and only the extracted text is sent.

The text goes to our server, which sends it to our AI analysis provider, Typesafe AI, Inc. (“Typesafe”), to produce the verdict. Typesafe does not use the text to train AI models, but may keep it as described in its privacy policy. Its services are hosted in the United States. We do not store the message text, unless you have turned on message sharing (see below).

Per-check analytics

For each check, our server stores the verdict, confidence, detected signal scores, message length, source type (screenshot, picture, PDF or text), plan, app version, language, and your optional 👍/👎 rating.

This is linked only to a random device ID, never to your name or email. We use it to improve detection accuracy. We keep it for 90 days, after which it is deleted.

Random device ID

The app generates a random device ID and keeps it in the iOS Keychain. Our server stores it only in hashed form. We use it to:

• count your free allowance (5 free checks),
• apply rate limits,
• link a subscription to your device,
• link the per-check analytics described above.

Optional message sharing

Message sharing is off by default and is on only if you turn it on in Settings. Its purpose is to help us recognise new scam patterns and improve detection accuracy.

While it is on, the text of the messages you scan is stored, with personal details (phone numbers, email addresses, account numbers and codes) removed automatically. Shared messages are deleted after 90 days.

If you turn sharing off or tap “Delete shared messages”, everything your device has shared is deleted.

Subscriptions (Legit Pro)

Legit Pro includes 200 checks per month. Apple handles payment, and we never see your payment details.

Our server stores the subscription’s original transaction ID, product, environment, expiry, grace-period end and revocation time, the hashed device IDs linked to it, and monthly usage counters. Apple sends us notifications about renewals and refunds.

We keep these records while the subscription is active and for 90 days after it ends.

History

Your check history is stored only on your device. You can turn it off or delete it in Settings, and it is removed when you delete the app.

Photos permission

The app uses photo access only to read your latest screenshot when you tap “Latest screenshot”.

Server logs

Our server logs contain only the hashed device ID, status, latency and decision. They never contain message text. Logs are kept for 90 days.

This website

This website uses no cookies, analytics or trackers, and loads nothing from third parties.

Legal bases (GDPR)

We process personal data on these legal bases:

• Legitimate interest: performing checks, analytics, and rate limiting and abuse prevention.
• Contract: providing your Legit Pro subscription.
• Consent: optional message sharing. You can withdraw consent at any time by turning sharing off in Settings.

Your rights

You have the right to access, rectify or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time.

You also have the right to lodge a complaint with a supervisory authority, for example the Slovak Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky).

Your choices and data requests

• Turn history off, or delete it, in Settings.
• Turn message sharing off, or tap “Delete shared messages”, in Settings.
• To exercise your rights or ask about deleting data stored on our server, open Settings → Privacy in the app, tap Copy next to your Device ID, and email it to adamcik.ssimon@gmail.com. Because we don’t know who you are, this ID is how we find your data.

Children

Legit? is meant for a general audience and is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this policy

If we change this policy, we will update the effective date at the top. For material changes, we will also let you know in the app.

Contact

Outloud US LLC
614 N Dupont Hwy, Suite 210
Dover, DE 19901
United States

EU representative (Art. 27 GDPR):
Outloud s.r.o.
Mlynské nivy 80B
821 05 Bratislava
Slovakia

Email: adamcik.ssimon@gmail.com