Important privacy information
To provide our services we may ask for basic information such as your email address, device preferences, and how you use individual protection features. Some of this is optional and can be skipped during onboarding.
We also process technical data such as device model, language, operating system version, and app diagnostics. This helps us keep protection accurate and improve the product. You can control most processing directly from the privacy settings inside the app.
Questions or privacy requests: [email protected].
Overview
By using WebSafe you confirm that (i) you have read, understood, and agreed to this Privacy Policy, and (ii) you are at least 18 years old. If you disagree with any part of this policy, please stop using the app and contact us to request deletion of your data. The English version of this policy is the official and legally binding version.
Data controller
Qvornyx Data Ltd, registered at Pygmalionos 51, 8046 Paphos, Cyprus, acts as the data controller for personal data processed through WebSafe. As controller, Qvornyx Data Ltd determines the purposes and means of processing in accordance with applicable data protection law. Contact: [email protected].
Personal data we collect
- Directly from you: the email address you submit to Identity Monitoring, support messages, and feature preferences.
- From your device, with your permission: App Privacy Report data you choose to share (app activity, contacted network domains, permission access), device security status such as whether a passcode is set and whether iOS is up to date.
- Automatically: device model, OS version, language, app version, and anonymous usage or crash diagnostics.
- Feature-specific processing: domain names checked by WebShield DNS filtering, and SMS content from unknown senders scanned locally by the iOS message-filter extension. This applies to regular SMS only and never to iMessage.
- Payment information: purchases are processed by Apple through the App Store. We never receive or store your card details; we may receive limited transaction status information.
A domain appearing in a report means a connection occurred — it does not, by itself, establish what information was exchanged.
How we use your data
- To deliver and improve the protection features you enable, and to explain security and privacy signals in plain language.
- To communicate important service updates and respond to customer support requests.
- For security, abuse and fraud prevention, legal compliance, and aggregated analytics.
We do not sell personal information and we do not use it for cross-context behavioral advertising.
Data sharing
We share data only with trusted providers needed to operate the service: Have I Been Pwned for breach lookups, security-data providers for domain reputation, GPT-based tooling used to generate scam trigger phrases, Apple for App Store distribution and system frameworks, and infrastructure or analytics providers. Each processes limited information under its own terms and only on our instructions.
Legal bases
Where the GDPR or similar law applies, processing is based on performance of the service you request, your consent where required, our legitimate interest in operating and securing WebSafe, and compliance with legal obligations. Consent can be withdrawn at any time without affecting earlier lawful processing.
Your rights
- Access, correction, deletion: request a copy of your personal data, correct inaccuracies, or ask for erasure.
- Restriction, portability, objection: available where provided by applicable law.
- Communication preferences: opt out of non-essential emails at any time.
- Tracking: manage tracking, notifications, and feature permissions from iOS settings or in-app privacy settings.
Send requests to [email protected]. You may also lodge a complaint with your local data-protection authority.
International data transfers
Your personal data may be processed in countries other than your own. We use industry-standard safeguards, such as Standard Contractual Clauses or adequacy decisions, to ensure appropriate protection for international transfers.
Data retention and security
We retain information only as long as necessary to provide the service, comply with legal obligations, or resolve disputes. We apply reasonable administrative, technical, and organizational safeguards, though no system can guarantee absolute security. You can stop optional processing at any time by disabling a feature, removing the DNS profile or Safari extension, or deleting the app.
Children
WebSafe is intended for users aged 18 and over. We do not knowingly collect personal data from children. Contact us if you believe a child has provided information to us.
Changes and contact
We may update this policy as the app or legal requirements change; the effective date above will be revised and material changes will be notified where required. For any privacy question, write to Qvornyx Data Ltd, Pygmalionos 51, 8046 Paphos, Cyprus, or [email protected].