Entwurf – vorläufige Fassung, vor dem Start juristisch zu prüfen.
Scamora is an app by Kunz Systems that protects against spam and scam calls and messages. It is designed to process as little personal data as possible: whatever can be decided on your phone is decided on your phone.
Controller
Kunz Systems. Privacy contact: contact@kunzsystems.com.
What never leaves your phone
Your contacts, your call log and your SMS inbox. The app uses them on the device only (for example, to always let your contacts ring) and never uploads them to our servers.
Data we process
Anonymous account: a random identifier is created when you open the app. We do not ask for your name, phone number or e-mail.
Number lookups: when a number that is not on your phone calls you, the app may send that number to check its reputation. We process it to answer and do not store it linked to you.
Reports: when you report a number we store the reported number, your verdict (e.g. “spam”), the category, the date and, if you write one, a private note for moderators (deleted after 180 days). The report is linked to your anonymous identifier to prevent abuse.
E-mail (optional): only if you want to use the web dashboard, for sign-in links.
Sync (optional, off by default): your trusted and block lists and the log of blocked or suspicious calls (90 days), to see them in the dashboard or on another device.
No Llame log: incidents you record (caller number, date, time, category, notes) stay on your phone and, if you are signed in, in your account.
SMS checks: text you choose to check is analysed in memory and not stored. On iPhone, Apple may send us sender and text of messages from unknown senders without any data identifying you; we do not store them either.
Statistics: aggregated daily counters (e.g. “app installed”, “spam blocked”) without personal identifiers.
Security and abuse prevention: temporary counters using an irreversible fingerprint of the IP address or device, deleted after 2 days.
Why we use data
To provide the service (identify and block spam), maintain the community reputation database, prevent abuse of the reporting system and improve detection quality. We do not sell data, show ads or build marketing profiles.
Community data
A number’s reputation is computed from many people’s reports. We never show who reported a number. Reported numbers belong to callers, not to your contacts.
Service providers
We use infrastructure providers that process data on our behalf: Supabase (database and authentication) and Vercel (web hosting). They may be located outside your country; we require appropriate contractual safeguards.
Retention
Account and lists: until you delete your account. Synced activity: 90 days. Report notes: 180 days. Abuse counters: 2 days. Reports: kept while useful for the community; when you delete your account they are detached from you and become anonymous.
Your rights
You can access, correct, export and delete your data. Account deletion is available directly in the app and in the dashboard. For any request write to contact@kunzsystems.com.
If you are in Uruguay you may also contact the data protection authority (URCDP) under Law 18.331. If you are in the EU/EEA, you have the rights granted by the GDPR, including the right to lodge a complaint with your supervisory authority.
Children
Scamora is not directed at children under 13.
Security
Encryption in transit (HTTPS), row-level access control in the database, device keys stored only as hashes, audit logs for moderation and least privilege.
Changes
If we change this policy we will tell you in the app before the change takes effect.