Privacy Policy
Effective: 2026-10-02
WardOff is an iPhone app that helps you judge whether a message you received is a scam. This policy explains what information is involved, why, and what your choices are. The short version: WardOff only sees the messages you choose to check, keeps no message content on its servers, has no accounts, and doesn’t track you.
Who we are
The WardOff app and the website wardoff.tech are provided by WardOff (“WardOff”, “we”, “us”), the data controller for the personal data described in this policy. You can reach us at support@wardoff.tech.
The messages you check
WardOff never reads your messages, mail, or SMS in the background. It only analyses text you paste into the app or explicitly share to it.
To analyse a message, its text is sent over an encrypted (HTTPS) connection to WardOff’s server, which passes it on to TypeSafe, the provider of Jev, the AI model that performs the analysis. Your device identifier is not passed on to TypeSafe. TypeSafe processes the text to return the assessment; how TypeSafe handles that data is governed by TypeSafe’s own privacy policy.
WardOff’s server only relays the text: it does not store message text, links, or results, and message text is never written to logs, analytics, or crash reports.
When you use Share › WardOff, the shared text is handed to the app through a temporary storage area on your iPhone shared by the app and its share extension, and is removed as soon as the app has read it.
What stays on your iPhone
Your history of past checks (the message text and its result) is stored only on your device, encrypted with AES-256 using a key held in the iOS Keychain. Settings › Delete all history removes every saved check at any time.
The device identifier described below also stays in the Keychain, so that the usage limits keep working.
Usage limits and your device identifier
WardOff has no accounts. To apply the free and daily limits, the app creates a random identifier for your device the first time it opens and keeps it in the iOS Keychain. Keychain data can remain on the device after the app is deleted, so reinstalling doesn’t reset the free allowance.
WardOff’s server stores a one-way, keyed hash of that identifier — never the identifier itself — together with how many checks it has made, the days they were made on, when the app was last used, the app version, and whether it is an App Store or TestFlight build. This contains no message content, name, email, or Apple ID. Settings shows a short device code derived from it, which you can quote to support.
If we add free checks to a device as a support gesture, grant Premium manually, or restrict a device that abuses the service, that action is recorded against the same hashed identifier together with a short internal note.
Purchases
WardOff Premium is an auto-renewable subscription sold through Apple’s App Store. Apple handles payment; WardOff never sees your payment details. To unlock Premium, the app sends the subscription’s App Store transaction number to WardOff’s server, which checks it directly with Apple and records the product, status, renewal date, and App Store environment, linked to the hashed identifiers of the devices (up to five) that use the subscription. You can manage or cancel the subscription in your App Store account settings.
Service providers
We use these providers to run WardOff: Supabase (hosts WardOff’s server and database), TypeSafe (AI analysis of the messages you check), Apple (App Store distribution, payments, and subscription verification), and Cloudflare (hosts this website and forwards email sent to support@wardoff.tech). They process data on our behalf or as independent providers under their own terms, and may do so in countries other than yours, including outside Türkiye and the European Union.
Like most internet services, our hosting providers may automatically record technical information about requests — such as IP address and time — for security and operations. WardOff does not use it to identify you.
Why we process this data
We process the data above to provide the service you ask for — analysing your messages and running your free checks or subscription — and, for usage limits and abuse prevention, on the basis of our legitimate interest in keeping WardOff available, fair, and affordable.
How long we keep it
Your history stays on your device until you delete it. The usage and subscription records on our server are kept while the app is in use on your device, because the free allowance and Premium depend on them.
To have them deleted, email support@wardoff.tech with the device code shown in WardOff › Settings. We will delete the records for that code within 30 days. This also removes the count of free checks used and any link between that device and a subscription.
Your rights
Depending on where you live — including under Türkiye’s Personal Data Protection Law No. 6698 (KVKK) and the EU and UK GDPR — you can ask whether we process personal data about you, get access to it or a copy of it, have it corrected or deleted, object to or restrict its processing, and learn who it is shared with. You can also complain to your data protection authority; in Türkiye, that is the Personal Data Protection Authority (KVKK).
Because WardOff has no accounts, we find your records by the device code shown in Settings. Send requests to support@wardoff.tech; we will reply within 30 days.
What WardOff doesn’t do
No accounts or sign-in, no advertising, no tracking across apps or websites, and no analytics or crash-reporting SDKs. WardOff doesn’t sell your data or share it with anyone other than as described above.
Children
WardOff is not directed at children under 13 and does not knowingly collect personal information from them.
Changes to this policy
If this policy changes, we will publish the new version on this page with a new effective date before it applies. For significant changes, we will also let you know in the app.
Contact
Questions or requests about privacy: support@wardoff.tech
This website sets no cookies and uses no analytics. Cloudflare, which hosts it, processes basic request data such as IP addresses to deliver and protect the site.