Privacy Policy

• You send us a picture. Crystal, our AI reader, tells you what it wants from you.
• We keep the picture for 90 days. We keep what Crystal found in it, so we can warn the next person who gets the same scam.
• What we remember is what helps warn others: every link, who sent it, and anything Crystal flags as a scam. Other numbers and e-mail addresses in your picture, like yours, aren't part of it.
• A person on our team checks every picture before it goes on our public feed, and we take personal details out of the reports we publish. Pictures sent on a paid plan are never published.
• We don't sell your personal information, show ads, or use analytics trackers.

• Pictures you send. The picture, its file name, and anything stored inside the file. A photo can carry the exact place it was taken. Until we start removing it, that location goes to Anthropic with the picture and stays in our storage for 90 days, so send a screenshot if you'd rather not share it. Screenshots usually don't carry one.
• What Crystal finds. The verdict, who the picture claims to be, what it asks for, and every link, address and phone number in it, exactly as written.
• Your account. Your e-mail address, and your password, which our sign-in service stores only in scrambled form. If you sign in with Google, Google gives us your name and e-mail address. Your plan, and how many reads you've used.
• If you don't have an account. A scrambled form of your IP address, to hold you to the free daily limit and let you open your own report. We scramble it with a key we replace every day, so after two days it can't be traced back to your IP, even by us.
• Request logs. Our servers log each request's IP address and browser type. Some logs also hold what we read in a picture, its file name, or the e-mail address you signed up with. Our cloud provider's security log also records each sign-in, with its IP address.
• Payments. If you buy a plan, Stripe handles your card. We get your e-mail address and whether you've paid, never your card number.
• Texts, once texting launches. Your phone number and the pictures you text us. See "Texting with Crystal" below.

We don't see your other messages, contacts or photos, except what shows in the pictures you choose to send.

• To read your picture and show you the result.
• To remember scams. Each picture adds what Crystal found to our memory, so when someone else gets the same scam or looks up the same link or number, we can tell them we've seen it.
• To run your account: sign-in, limits, plans and billing.
• To e-mail you about your account, and now and then about what's new. Every news e-mail has a link to stop them.
• To keep TryClear working and safe: stopping abuse, fixing problems, and testing Crystal on real pictures.
• To show approved pictures on our public feed, as described below.
• To do what the law requires of us.

We don't train AI models on your pictures, and neither does Anthropic.

Memory is how TryClear warns the next person. From each picture, it keeps:

• every link in it, the number or address that sent it, and any other number or address Crystal flags as part of a scam;
• who the picture claimed to be, and whether Crystal judged it a scam, suspicious or clear;
• a code made from the picture's pixels, so we know when the same picture comes back.

It doesn't keep any other phone number or e-mail address in the picture, such as yours. If a scam was faked to look like it came from you, tell us and we'll take your address out. Your own report is different: it keeps everything Crystal found, your details included, until you ask us to delete it.

Memory keeps each link's site and path, without anything after a ? or #, so we can match it for the next person. Some scam links carry a code made for the person who got them. We blank those codes in every report we publish and in anything we share with security companies. A published picture can still show a link the way it appeared on screen.

A link, number or address in a picture counts for 90 days if Crystal flagged it as part of a scam, 30 days if it was a company's own link in a picture that looked fine, and 60 days otherwise. Who sent the picture counts for 60 days. After that it no longer changes our answer, but we keep it, and it still counts in how many pictures we say we've seen.

Anyone can look up a link or number and see how many scam pictures it appeared in. A lookup counts a picture as soon as we've read it, before anyone reviews it. An answer never says who sent us a picture. It links to a picture only once that picture is on our public feed.

A person on our team may look at any picture you send. Nothing from it goes on our feed or a public report page until we approve it. A picture sent on a paid plan never enters our review queue and is never published, though it still adds to memory like everyone's. An approved picture can appear on our public feed and on its own public report page. Before that:

• a person checks that the picture doesn't show the name, e-mail address, phone number, home address or account details of the person who got it, or of anyone else who isn't part of the scam;
• we remove the hidden details that could say anything about you from the copy we publish, including any location;
• in the report, we replace any part of a link that could point back to a person with ___, and leave out every phone number and e-mail address except the sender's and any Crystal flagged.

Pictures that look explicit, and some our AI reader declines, are held for our team. A held picture is never published or added to memory, and we delete it once we've reviewed it, within 90 days at most. If one appears to show a child being sexually abused, we report it and keep it as the law requires.

Your own report shows everything Crystal found, including full links. If you have an account, only you and our team can open it. If you don't, it opens only on the internet connection you sent it from, for at least a day, so anyone on that connection who has its link could open it too. Sign up free from the same browser and connection before then, and it moves into your account. Keep its link either way: we'll need it to find your report if you ask us to delete it.

If anything public shows you or is yours, e-mail jv@tryclear.io and we'll take it down.

We keep a small set of pictures sent to us before this policy took effect, to test TryClear. We never publish them unless we've approved them, and we'll delete any on request. Apart from that, we keep something longer only when the law requires it.

Here's who, and what each one gets:

• Anthropic reads each picture for us. It gets the picture as you sent it, including anything stored inside the file, such as a photo's location, but never the file name, your account or your IP address. It does see everything in the picture, which may include your name. It doesn't train its models on it, and it deletes it within 30 days, unless its safety systems flag it, in which case it can keep it up to 2 years.
• Amazon Web Services hosts TryClear and stores everything, in the United States. If you use TryClear from another country, your information comes to the United States. Its moderation service also checks each picture for nudity before we read it.
• Stripe handles payments.
• Google handles "Sign in with Google" if you use it, runs our e-mail, and serves our fonts, so Google sees your IP address when a page loads.
• Twilio will carry our texts once texting launches.
• Security companies and researchers may license scam indicators from us: scam links, with personal codes taken out, and the numbers and addresses scams were sent from. They never get your pictures, your account, or any number or address that only appeared in your picture.

If a picture appears to show a child being sexually abused, we report it to the National Center for Missing & Exploited Children and keep it as long as the law requires, and we may share related information with law enforcement. We also share information when the law requires it, to protect people from harm, or if TryClear is sold or merged, in which case this policy still applies. Texting opt-in data and consent are excluded from all of this.

We don't sell your personal information.

When you text us, we use your number to reply to you and to keep your daily limit. We keep your number for 90 days, sealed so only our team can open it, so we can act on abuse or a legal request. After that we keep only a scrambled form of it, which runs your account and daily limit, and its area code, which helps us see where scams are spreading. Once we've replied, we delete your texts from our texting provider, unless a picture is held; then we delete them once we've reviewed it, within 90 days at most. Texted pictures are handled like any other picture. One difference: the link in our reply opens your report, picture included, without signing in, for anyone who has the link. Only share it with people you trust.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Your texting opt-in and consent are never shared with anyone.

• Delete your pictures and what Crystal found. E-mail jv@tryclear.io. We remove your pictures, your reports, and what memory learned only from your pictures. A scam also seen in someone else's picture stays in memory through their sighting. Deleting doesn't reach scam indicators already shared, anything the law requires us to keep, or copies that expire on their own: backups within 35 days and Anthropic's within 30. If you don't have an account, send us the picture or its report link so we can find it.
• Delete your account the same way.
• Take something down from the public feed the same way.
• Fix anything that's wrong the same way.
• Stop news e-mails with the link in any of them.

We answer within 30 days. Depending on where you live, you may have more rights, such as getting a copy of your data. Ask, and we'll honor them. We won't treat you differently for asking.

We don't use advertising or analytics cookies. The site keeps your sign-in and a few settings in your browser, so you stay signed in. Until you sign in, it also keeps a list of the reports you made without an account, so they can move into your account when you sign up. No other company tracks you across sites through TryClear. Google sees your IP address when it serves our fonts, and knows you signed in if you use Sign in with Google. Because nothing tracks you across sites, we don't change anything when your browser sends a Do Not Track signal.

TryClear isn't meant for children under 13, and we don't knowingly collect anything from them. If we learn we have, we delete it.

We take reasonable steps to keep what we hold safe. Everything on our site, app and API travels encrypted. Texts don't. Pictures are stored privately. Only our team and the person who sent one can open it, unless they share a texted report's link or we approve it for the feed, as "What goes public" describes. No system is perfect, so if a breach affects you, we'll tell you.

If we change this policy, we'll update the date at the top. If a change matters, we'll say so on the site, and e-mail people with accounts, before it takes effect.

Valenti Development Group, LLC, doing business as TryClear.io: jv@tryclear.io