← Back to Levamio Is It a Scam?

Privacy Policy “Levamio Is It a Scam?” (app for iOS and Android)

1. Controller

NEXTLEVEL CORPORATE SERVICE PROVIDER - FZCO, Building A1, IFZA Business Park, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates (DIEZ License No. 67837), represented by Tassilo Peter Seitz. Levamio is an offering of NEXTLEVEL CORPORATE SERVICE PROVIDER - FZCO (“we”, “us”). This policy covers the app “Levamio Is It a Scam?” (called “Levamio Betrugs-Check” in German).
Email for data protection questions and for exercising your rights: [email protected] (general support: [email protected])

You can always contact us directly with any data protection matter.
Data protection officer: No data protection officer is appointed at present. Your contact is the controller at the address above.

2. Key points

• You need no account. We know neither your name nor your email address.
• What you have checked (pasted text, link, screenshot or photo) is sent via our server to our AI provider Anthropic (USA) only with your explicit consent and only for the check.
• We do not store your messages – neither on our server nor in the app. Content and result exist only during the check or while you view the result. Sole exception: you report a result and separately agree that the AI assessment is included (section 7, deleted after 90 days).
• The link check (lookalike addresses, Punycode, short links) runs on your device and sends nothing.
• The “Tell someone you trust” feature only opens your phone’s share menu; we have no sending service of our own and do not learn to whom you send anything.
• No tracking, no advertising, no analytics tools.

3. Overview: what we process, why, and on what legal basis

You are not obliged to provide data. Without consent you can open the app and use the local link check, but not the AI check. We do not make automated individual decisions with legal effect (Art. 22 GDPR). The traffic light is an indication, not a decision about you or about the sender. We do not sell your data or use it for advertising.

4. AI check of your message

Consent: Before the first check the app shows a dedicated notice: which data is sent, to whom, that we store nothing, and that messages may contain particularly sensitive information. On storage at Anthropic it states: “We do not store your messages – neither on our server nor in the app. According to Anthropic, it keeps the request for up to 30 days to detect misuse (longer only if a violation of its usage policies is found) and does not use it for training.” Nothing is sent until you actively tick the consent box and the separate box “I am at least 16 years old.” and tap “Agree and continue”. Our server also rejects any check without consent and age confirmation. If the recipients or scope change, we ask again.

Special categories (Art. 9 GDPR): Messages may contain information on health, religious beliefs, origin or other special categories. For this we ask for your explicit consent under Art. 9(2)(a) GDPR. The app recommends blacking out anything not needed for the check (e.g. account numbers) before checking.

Other people’s data: Suspicious messages almost always contain information about third parties – e.g. the sender’s number or address, names, bank details (including those of fraudsters or of persons whose identity is being misused). We process this only so that you can assess whether the message might be fraudulent (Art. 6(1)(f) GDPR; legitimate interest in protection against fraud). We do not store it. Please only check messages that you received yourself or that someone showed you to have them checked.

How it works:

1. The app resizes images on your device and sends text and/or images encrypted (HTTPS) to our server, a Cloudflare Worker.
2. The server checks format, size, your consent and age confirmation, the free allowance or your subscription, the usage limits and – for free checks – the device check (section 6).
3. It forwards the content with the check instructions, your language and your country to Anthropic (Anthropic PBC, USA, “Claude” language model). If the model is overloaded or the answer is unusable, the request is sent once to another Claude model of the same provider.
4. The answer (traffic light, warning signs with short quotes, visible links, advice) is checked by the server against fixed rules (e.g. minimum traffic-light level for gift cards or imitated addresses) and returned to your app.

Links are opened neither by us nor by the AI.

No storage by us: Our server stores neither text, nor images, nor the result (exception: reported results with your separate consent, section 7). Content is processed only in memory for the duration of the request. The app does not store checks either: input and result disappear when you leave the result page or close the app.

At Anthropic: Anthropic processes the request as our processor under Anthropic’s commercial terms and Data Processing Addendum. According to Anthropic’s current information, API data is not used for training and is stored for up to 30 days for misuse detection; longer only where a violation of Anthropic’s usage policies is found (according to Anthropic then up to 2 years) or where there is a legal obligation. We have no influence on this retention. Processing takes place in the USA (section 10).

AI labelling: Every result is labelled “Created by AI” in the app (transparency within the meaning of Art. 50 EU AI Act). The assessment is generated automatically, may be wrong or incomplete and is no guarantee – neither that a message is genuine nor that it is fraudulent.

Withdrawal: You can withdraw your consent at any time in Settings (“Withdraw consent”) with effect for the future (Art. 7(3) GDPR). The app then sends nothing more. Checks already carried out remain lawful; no content of them is held on our server.

5. Data on your device

• Settings: language, font size, contrast, chosen country (pre-set from the region of your device language, no location), optionally the first name of a trusted person, time and version of your consent, counter of free checks in the current month and the random device identifier. This data stays on the device; on Android, cloud backup and device-to-device transfer are disabled for the app.
• Local link check: links and email senders from your text or from the AI answer are checked on the device for typical deceptions (e.g. imitated brands, mixed alphabets, Punycode, short links). Nothing is sent and no link is opened.
• Emergency numbers: the app shows emergency and reporting numbers for the chosen country from a list stored in the app. Calls start only when you tap a number; the call runs through your phone.
• Tell someone you trust: at your request the app creates a text with the warning signs found (without the suspicious message itself, without links) and opens your phone’s share menu. You decide where the text goes; the terms of the app you choose apply there. We receive nothing of it.
• Sharing from other apps (Android), pasting, camera and photos: content you send to the app via “Share” or paste lands only in the input field and is sent only when you tap “Check now”. Camera and photo access only after you allow it in the system dialog; when picking, the app receives only the images you select. The clipboard is read only when you tap “Paste”.

You delete this data with “Delete all local data” in Settings or by uninstalling the app. The device identifier is kept when local data is deleted and is only removed when you uninstall the app.

6. Free allowance, abuse protection and device check

On first use the app generates a random device identifier (not a hardware or advertising ID). It is sent with every check and every report. Our server does not store it in plain text, but only as a salted hash together with counters in Cloudflare’s storage (Durable Objects):

• counters for request limits (currently max. 8 checks per 10 minutes and 40 per day): between 15 minutes and 2 days, then automatically deleted;
• counter for the free allowance (currently 3 checks per calendar month): 40 days, then automatically deleted;
• one-time challenge for the device check: 15 minutes;
• cache of the last confirmed subscription status (for RevenueCat outages): 24 hours.

IP address: Free checks are available at most six times per internet connection per day. For this our server derives a daily-salted hash from your IP address (IPv6 truncated to the first 64 bits) and stores only this hash with a counter for 2 days. We do not store or log the IP address itself. There is also an overall daily cap for all free checks in total. Subscribers are not affected by these free-check limits.

Device check (attestation): Free checks are only available if the app confirms that it is the genuine app running on a genuine device. On iOS the app uses Apple App Attest; your device communicates with Apple and our server verifies the result. On Android the app uses Google Play Integrity; our server sends the token to Google for evaluation. Apple and Google process device and app data under their own terms as independent controllers; data may be transferred to the USA (section 10). We do not store the result, only that the challenge has been used.

Without your device we cannot link the hashes to you; they are nevertheless pseudonymous personal data. Legal basis: Art. 6(1)(f) GDPR; our legitimate interest is to distribute the free allowance fairly and to prevent abuse and excessive costs.

7. Reporting a result

With “Report result” you can report a wrong, offensive or dangerous assessment to us. We receive the reason, your optional comment (please no personal data) and technical details (prompt version, model, traffic-light colour, language, app version). Only if you tick the separate box (off by default) is the AI assessment included as well; it may contain content of the checked message (e.g. short quotes, links). Screenshots and your pasted original text are never sent. Without this tick our server rejects any content.

We store the report in Cloudflare Workers KV without device identifier and without IP address; it is automatically deleted after 90 days. The server uses the device identifier and IP address only in hashed form to limit reports (max. 10 per device and 30 per connection per day). The purpose is improving and securing the assessments; Google Play requires such a reporting feature for AI content. Legal basis: Art. 6(1)(f) GDPR; for included content your explicit consent (Art. 6(1)(a), Art. 9(2)(a) GDPR). As reports are not linked to a person, please give us the date and time of the report if you want to withdraw consent or have it deleted early.

8. Subscriptions and purchases

You subscribe in the Apple App Store or on Google Play. Payment, invoicing, cancellation and refunds are handled by the respective store; Apple or Google is an independent controller for this. We receive no payment data, only the information which subscription is active. The family subscription (iOS only) is shared via Apple Family Sharing; who belongs to your family is managed by Apple – we do not learn this.

We use RevenueCat (RevenueCat, Inc., USA) as our processor to manage subscriptions. RevenueCat receives the random device identifier as customer ID, receipts and subscription status from the store, product, price, store country, technical details on device, operating system and app version, and the IP address. Only when needed: The app connects to RevenueCat only when you open the subscription screen, buy a subscription or restore purchases, or when your free checks for the month have been used or a subscription is known on the device. Our server asks RevenueCat only if the free allowance of your device identifier has been used, the app explicitly requests a subscription check, or the counter is temporarily unreadable. When a request is made, a customer record may be created at RevenueCat. Legal basis: Art. 6(1)(b) GDPR; for checking whether a subscription exists at all, Art. 6(1)(f) GDPR.

9. Retention

• Messages and results: not stored, neither on our server nor in the app; exception section 7.
• At Anthropic: according to Anthropic’s current information up to 30 days, longer only where a usage-policy violation is found or there is a legal obligation (section 4).
• Hashes and counters (Durable Objects): rate limit 15 minutes to 2 days; free allowance 40 days; IP hash 2 days; challenge 15 minutes; subscription cache 24 hours. Expired entries are deleted automatically; technically, deleted entries at Cloudflare may remain recoverable for up to 30 days for restoring after errors.
• Reports on AI results: 90 days.
• Technical metrics and server logs: no longer than 7 days (Cloudflare Workers Logs).
• Subscription data at RevenueCat: while the subscription exists and thereafter per RevenueCat’s retention rules or our legal obligations.
• Settings on your device: until you delete them or uninstall the app.
• Support requests: up to 3 years after closure.

10. Recipients and international transfers

USA: Transfers to the USA rely on the adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR) where the recipient is certified. Otherwise we base the transfer on the EU Commission’s Standard Contractual Clauses (Art. 46(2)(c) GDPR) with supplementary measures (encryption in transit, no storage by us, data minimisation by resizing images). Copies of the safeguards are available on request.

United Arab Emirates: We as controller are established in the UAE; there is no adequacy decision for it. Your messages do not reach our systems in the UAE because we do not store them. We may view reported AI assessments (section 7) from the UAE via secure connections in order to handle the report. We apply the GDPR to the extent it applies to our services.

11. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw your consent in the app at any time (Art. 7(3)). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR, e.g. abuse protection, reports, operation), you may object at any time on grounds relating to your particular situation. We will then no longer process the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. An informal message to [email protected] is sufficient.

As we keep no accounts and do not store messages, we only hold the hashes with counters about you and – for subscriptions – the data at RevenueCat. For access or erasure, please give us the device identifier from “Settings → Your device ID”; without it we cannot link the data to you (Art. 11 GDPR). Requests to [email protected]; we usually respond within one month.

Persons whose data appears in checked messages (e.g. senders) have the same rights. As we do not store the content, we hold no data about them.

You may lodge a complaint with a data protection supervisory authority, in particular in the EU/EEA member state of your habitual residence, place of work or the alleged infringement; in the UK with the ICO, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

12. Children

The AI check may only be used from the age of 16 (cf. Art. 8 GDPR); before the first check you confirm with a separate box that you are at least 16 years old; without this confirmation our server rejects the check. The local link check and the advice in the app can be used without age confirmation. We do not knowingly collect data from children.

13. Security

Encrypted transmission (HTTPS), no storage of content on the server or in the app, format and size checks, instruction to the AI to treat content only as data and not as instructions, validation of the AI answer against a fixed schema and fixed rules, salted hashes instead of identifiers and IP addresses, device check for free checks, emergency shut-off of the AI check in case of security incidents, no cloud backup on Android, secret keys only on the server.

14. Changes

We update this policy when features, service providers or the law change. If a change affects your consent, the app asks again. The current version is in the app and at https://levamio.com/apps/betrugs-check/datenschutz-en/.

Last updated: 21 October 2026