Everyday controls
Manage reference media, scanner use, profile details, and ordinary account settings without presenting them as a formal legal request.
Open Everyday controlsFree invited beta
Beta Privacy Policy
This best-effort policy describes the invited beta as it operates now. It is not a claim of counsel, certification, or public-launch approval.
We minimize customer-visible data, keep sensitive media behind authenticated controls, and expose ordinary management plus tracked privacy requests. Retention is category- and case-specific, not a universal fixed period.
Effective October 3, 2026No data saleNo active browser analytics SDKTracked privacy controls
Information in the controlled service
We use data needed to authenticate, scan, review, support, and audit
The exact records depend on the beta workflows a tester uses.
- Firebase account identifiers, authentication state, profile details, roles, preferences, and account history.
- Reference images or videos, labels, generated derivatives, scanner visibility, and lifecycle status.
- Scan inputs, possible matches, source URLs, review decisions, evidence descriptors, reports, and activity updates.
- Support messages, linked-object context, concierge assignments and recommendations, and customer replies.
- Removal-preparation facts, declarations, approvals, status, audit history, and recipient-safety records.
- Stripe test-mode customer, checkout, entitlement, and billing-event metadata; Guard My Image does not receive full payment-card details.
- Mobile/API session, idempotency, revision, security, error, and operational log data needed to protect and diagnose the service.
How data is used and hosted
Service operation, safety, Support, and beta improvement
We use account and media data to provide authentication, reference management, scanning, finding review, reports, Support, concierge, privacy controls, and controlled notice processing. We also use bounded audit and operational records for security, debugging, replay safety, and beta evaluation.
The service uses Firebase hosting, authentication, Functions, Firestore, and configured object storage, together with private scanner and storage adapters that may use AWS-backed resources. Authorized internal operators and those service providers process data only to operate these workflows.
No browser analytics SDK is active in the current product, and no advertising or affiliate tracking is claimed as active. We do not sell customer data. Reference media or misuse evidence is not used for public marketing without separate permission.
- Firebase-backed identity and portal records
- Private scanner and object-storage processing
- Stripe test-mode metadata only
- No active advertising or browser analytics integration
- No sale of customer data
Retention and removal
Controls are real, but deletion is not instantaneous or absolute
The authenticated workbench shows available actions, consequences, verification, timing, and retained-record explanations.
Formal requests
Authenticated export, erasure, and retention requests are tracked and may require identity verification or more information.
Open Formal requestsRetention limits
There is no single promised retention period. Active service data remains while needed for controlled operation; notice, audit, security, billing, dispute, or legal-hold records may be retained when deletion is blocked or under review.
Removal processing
Removal packages and their audit history are kept internally under the current recipient-restricted posture. A workflow status does not prove third-party delivery or takedown.
Scope, safety, and contact
Additional limits for sensitive and international use
This beta policy does not claim coverage of every privacy regime or replace professional advice.
Security
Access controls, tenant checks, expiring media access, revision checks, and audit records reduce risk, but no system can promise absolute security. Report concerns through Support or contact.
International use
The controlled service may process data in the United States through the providers described above. No representation is made that this internal evaluation satisfies every geographic transfer or localization rule.
Age boundary
The service is not directed to children. Do not create an account or submit another person's sensitive media without the authority required for the controlled test.
Privacy contact
Use authenticated Support for account-specific questions or the durable contact route if you cannot sign in.
Open Privacy contactReview or exercise your data controls
Sign in to manage ordinary choices or create a tracked privacy request. Contact us if you cannot access your account.