MessageShield AI — Privacy Policy

Effective 20 October 2026 · Developer: Jaydeo Sawale

MessageShield AI helps you assess messages you choose to submit. This policy covers the Android app and its connected service. Contact: jaydeep.sawale97@gmail.com.

Data used by the service

When you register or sign in, we process your email address, authentication provider, account identifier and verification status. Firebase Authentication handles Google and email sign-in. The service uses authentication tokens; legacy email accounts may have a password hash stored on the backend.

Text you submit, including text extracted from a selected image, is sent over HTTPS to our backend for classification and risk analysis. Analysis history is associated with your account and includes the processed text, labels, confidence scores, risk signals and timestamps. The backend attempts to redact certain OTP and payment-card patterns before analysis and storage. Redaction is limited and cannot remove every sensitive detail. Remove private information before submitting text.

Camera and photos

Camera access is optional and is used when you choose to scan a message. You may also select an image for text recognition using Google ML Kit on your device. The app sends the text you submit to the analysis service; its analysis request does not upload the selected image. MessageShield AI does not request SMS or contact access or automatically read your inbox.

Purpose and service providers

Data is used to authenticate you, deliver analysis, show your history, protect the service and investigate errors. The service uses Google/Firebase for authentication, Render for the backend, and Vercel for its web interface. The backend stores account and analysis records in PostgreSQL. These providers process data needed to operate their services. Technical logs may include request information and account identifiers for troubleshooting.

Google ML Kit also collects device and app metadata, installation identifiers, performance measurements, feature-use events and error information for diagnostics and usage analytics. Firebase Authentication collects IP addresses and user-agent information to secure authentication and prevent abuse. See ML Kit data disclosures and Firebase Authentication data disclosures for provider details.

Storage and your choices

Account and analysis records remain in the service until deleted. Service-provider logs and backups may have separate retention schedules. You can decline camera access, avoid submitting a message, sign out, or request deletion of your account and associated data. Uninstalling the app does not delete your server account. We verify ownership before processing a deletion request.

Security and limitations

The app uses HTTPS for its API connection and secure device storage for its session token. No system can guarantee complete security. Never submit passwords, live OTPs or payment credentials. A safety label is an automated estimate and cannot guarantee that a message or link is safe.

Contact and changes

For access, correction, deletion or privacy questions, email the developer at the address above. Material changes to this policy will be reflected on this page with an updated effective date.