1. Who We Are
This Privacy Policy applies to the AlertLinkGuard mobile application and related threat-checking services operated by AlertLinkGuard ("AlertLinkGuard", "we", "our", or "us").
Contact: glyphguard.app@gmail.com
AlertLinkGuard Privacy Policy
AlertLinkGuard is an offline-first mobile app that helps people inspect suspicious links, domains, QR content, text, and files before opening them. Core character and text analysis runs locally on the device. When a user asks for online threat intelligence or reputation checks, the app may send limited request data to AlertLinkGuard services and, when the final AI second-opinion stage is enabled, to an AI service provider selected by AlertLinkGuard so the check can complete.
Local by default
Core text, character, and most history/settings processing stays on-device.
Online only when needed
Some URL, domain, reputation, abuse-protection, and optional AI second-opinion stages use AlertLinkGuard network services or service providers.
No ad tracking
AlertLinkGuard does not include advertising SDKs or third-party analytics inside security checks.
Optional crash diagnostics
Off by default. If enabled in the app, limited sanitized JavaScript error details are sent to Sentry; checked content is excluded.
2. Data We Process
We try to minimize what leaves the device. However, AlertLinkGuard is not a zero-network app when a user runs
online threat checks, downloads threat updates, triggers abuse-protection reporting, reaches the optional
AI second-opinion stage, or triggers the IPQS fallback after an uncertain AI result.
| Category | Examples | Where it is processed |
|---|---|---|
| Local content | Text you paste, files you open, QR payloads, local history, settings | Mainly on your device |
| Online check requests | Domain or URL submitted for a reputation or threat lookup, plus redacted URL metadata and selected explanation language tag used for AI second-opinion review | Sent to AlertLinkGuard threat services and, when needed, to configured providers such as Google Web Risk, VirusTotal, an AI provider, or IPQS acting on our behalf |
| App-scoped identifier | A random app-generated device identifier stored by the app | Sent with online lookup and abuse-protection requests |
| Request context | Input source such as manual, QR, clipboard, file, or incoming share | Sent with online lookup and threat-report requests |
| Security telemetry | Abuse or repeated over-limit attempt signals, threat reports for confirmed dangerous URLs | Sent to AlertLinkGuard security endpoints when needed to protect the service |
| Network metadata | Standard request metadata such as IP address and timing seen by hosting or security infrastructure | Processed as part of delivering and securing network services |
| App integrity | Short-lived app-attestation tokens and app identity used to reject modified or automated clients | Generated and verified through Firebase App Check and the device platform's integrity service |
| Purchases and entitlements | Product identifier, transaction or purchase token, subscription state, and remaining purchased checks | Processed by Apple, Google, or Huawei and verified only as needed to unlock paid features and prevent duplicate credits |
| Crash reports | When explicitly enabled in the app: sanitized JavaScript error type and stack location, app version, and OS version | Sent to Sentry to help diagnose and fix app errors. This is off by default; enabling takes effect after restarting the app. Checked links, pasted text, and file contents are excluded. Sentry receives the IP address associated with the connection. Turning the setting off stops future captures, but reports already sent cannot be recalled. |
3. How We Use Data
- To perform local text, character, file, and QR analysis on the device.
- To run online threat intelligence, domain reputation, and URL safety checks when requested by the app flow.
- To ask a configured AI provider for a final second opinion on borderline URL or domain cases.
- To download and refresh threat data used by the app.
- To enforce quotas, detect bypass attempts, investigate abuse, and keep the lookup service reliable.
- To verify purchases, restore entitlements, and credit one-time check packs exactly once.
- To accept confirmed dangerous URL reports that help improve future protections.
- To answer support or privacy requests sent to us by email.
4. What Stays on Your Device
AlertLinkGuard stores certain data locally so the app can work and remember your preferences. This may include:
- App settings, language, and visual preferences.
- Local analysis history and saved results on eligible plans, which may include the content and results you choose to save.
- A random app-scoped identifier used for service protection and quota enforcement.
- Locally cached threat data and locally cached dangerous verdicts.
History is kept on this device by default until you clear it or remove the app. In the History screen you can choose automatic deletion after 1, 7, 30, or 90 days, or choose never. Expired entries are removed the next time History or recent history is accessed, or a new history entry is saved; if none of those actions occur after an entry expires, that entry can remain stored locally until the next history cleanup.
5. When Data Leaves the Device
Data may leave the device in the following situations:
- You run an online URL, domain, or reputation check.
- The app reaches the optional AI second-opinion stage for a borderline online check.
- The app refreshes required threat snapshots or manifests.
- The app sends abuse-prevention or over-limit telemetry.
- The app reports a confirmed dangerous URL or domain to AlertLinkGuard services.
- The app verifies app integrity, a subscription, or a one-time purchase with the relevant platform service.
- If you generate a PDF report and choose to share it, the report can include up to the first 1,000 characters of analyzed content and derived findings such as a verdict, detected domain, threat indicators, character statistics, date, and app version. The PDF is written temporarily to the app cache. On iOS the app attempts to delete it after the system share sheet closes; after the Android share flow returns, the PDF remains in the app cache so a receiving app can finish importing it if you selected one, and may remain until the operating system clears the cache or the app is removed. The operating system and the app you select to receive the report process the copy you share under their own terms; sharing does not send that copy to AlertLinkGuard.
In these cases, the app sends only the information needed to complete the security action. AlertLinkGuard does not use ad SDKs and does not sell personal data.
6. Sharing and Service Providers
We may use hosting, storage, app-integrity, payment-platform, security, infrastructure, and AI service providers to run AlertLinkGuard services. Those providers may process limited data on our behalf to deliver, secure, and maintain the service.
A report you choose to share is handed to the destination selected in the system share sheet. AlertLinkGuard does not receive a copy through that share action, and the receiving app or service may handle it under its own policy.
We may also disclose information if required by law or if reasonably necessary to prevent fraud, abuse, or security harm.
We do not use third-party advertising SDKs in the app and we do not sell personal data.
7. Retention
Local settings, history, and cached data remain on your device until deleted, reset, or removed with the app. If you select a history auto-delete period, expired history is removed the next time History is accessed or a new entry is saved; it is not a background process while the app is closed. A temporary report PDF is deleted after the iOS share flow completes when cleanup succeeds. After the Android share flow returns, the PDF remains in the app cache to protect a receiving app's import if you selected one; it may remain until the operating system clears the cache or the app is removed. A PDF is deleted after a failed or unavailable share when cleanup succeeds.
Server-side lookup, abuse-prevention, and security records are kept only for as long as reasonably needed to operate the service, investigate abuse, maintain reliability, and meet legal obligations.
8. Your Choices
- You can avoid optional online checks by not using flows that require them.
- You can clear local history or app data through app and device settings.
- You can choose a history auto-delete period in the History screen or clear history immediately.
- You decide whether to share a generated report and which destination receives it.
- You can uninstall the app to stop further local storage and app-based processing.
- You can email us about privacy questions or requests at glyphguard.app@gmail.com.
9. Children
AlertLinkGuard is not designed to knowingly collect personal data from children. If you believe a child has sent us personal information directly, contact us and we will review the request.
10. Security
We use reasonable technical and organizational measures to protect the services we operate. No method of transmission or storage is perfectly secure, but we work to limit data exposure and to process as much as possible on-device.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date on this page.
12. Contact
Privacy questions and requests: glyphguard.app@gmail.com