Privacy Policy

The Short Version

• ShooFly exists to give you control over what apps know about you. We don't sell, rent or share your data for advertising, and ShooFly has no ads or ad trackers.
• Almost everything happens on your phone. We keep as little as we can, you can download all of it, and you can delete it.
• AI apps only see your profile when you connect them, only the parts you choose, and every read is shown to you.

What We Keep

• Your account (optional): your email address, and your name if you sign in with Apple or Google. Passwords are never involved. Much of ShooFly works without an account.
• Your AI profile: what you choose to add (interests, how you like answers, work, accessibility needs), split into the profiles you create, plus which AI apps you connected, what each may see and a log of what they read.
• Cleanup history: which services you cleaned up, and what each cleanup removed or turned off (for example the ad topics cleared), so you have a receipt. It's tied to a random ID for this install, and to your account if you're signed in.
• App check-ins: so we can count how many phones ShooFly protects, the app sends a short check-in: a random ID it made for this install (not your phone's identifier), the kind of device (for example Apple iPhone 15 Pro), iOS and app version, your region setting (for example US), your privacy score, which protections are on, which services you've cleaned up, running totals of trackers blocked and ad guesses cleared, and whether you have ShooFly Plus. Never what was blocked, your browsing, calls, messages or contacts.
• Notifications: if you allow notifications, the check-in also includes your phone's notification address, so we can send AI Policy Alerts and family alerts. Turn notifications off in Settings to stop them.
• Shoo! leaderboard: if you post a score, we keep the score, the level reached and the name you picked from ShooFly's list of made-up names (like “Swift Falcon”), tied to this install's random ID. Only the name and score are shown to other players.
• Mabel (her own add-on): if you turn her on, calls you decline or ShooFly blocks (and calls you miss, if you choose) are forwarded by your carrier to a ShooFly phone number, where an AI character answers. To set her up, you call that number once from your phone, so we keep your phone number (to know which calls are yours) and your carrier choice. For each call Mabel takes, we keep the caller's number, the time and length, the transcript and the recording, so you can read and listen back, like voicemail. Callers are told the call is recorded at the start. Recordings are deleted after 30 days unless you archive the call; you can delete any call at any time, and deleting your account deletes them all. We never share them. A number Mabel finds is a scam counts toward ShooFly's own spam list (as explained under Calls and texts). If you tap Share Clip on a scam call, we make a short video from that call's recording and transcript (with numbers masked) and send it to your phone to share as you choose; we don't keep the video. Friends you add to play with her are kept as a name and number. On days Mabel takes calls, she can send you a short spoken diary written by AI from that day's calls: the scammers she kept busy and who else rang and why (never their numbers); we keep it for you and you can turn it off. If you turn on Recognize My Contacts, the app sends a one-way scrambled code of each contact's phone number (never names or anything else) so Mabel knows when someone you know calls; turning it off deletes them. Extra minutes you buy go through Apple or Google, which tell us the purchase so we can add them.
• ShooFly Plus and Mabel: purchases go through Apple or Google. They tell us the subscription's status (active, renewed, cancelled), linked to the random install ID. We never see your payment details.
• Family: a family has up to two managers: the person who sets it up, and a partner they invite, who signs in with their own account. A manager links a protected family member's phone (a child or parent) with a one-time code; that phone needs no account. Both managers see only that phone's check-in: the name they gave it, the kind of device, which protections are on, its privacy score and running totals. Never what that person does, which apps they use or where they go. Managers see each other's name, nothing else about each other's phones. Anyone can unlink or leave at any time. When one family phone asks another “Is it really you calling?”, we pass on the question and the yes or no answer. We never see the call. If ShooFly Plus Family was bought by one manager, we note that on their phone's check-in so it covers the other manager too. If the person on a linked phone chooses to tell the managers when ShooFly finds a scam there, we pass on only the kind of scam (for example “a scam message”) and when, never the message, and keep it for a week. For a Family Scam Drill, we keep the name you gave the person, which practice text you sent and whether its link was opened, so the app can show you how it went.
• Character Calls: a family manager can have one of Mabel's characters call a linked phone, or the family's other manager, inside the app, for up to two minutes. The manager may add a short note for the character (like a first name or a good deed); we use it only to set up that call. The call uses the phone's microphone only while it's answered, and nothing the child says is recorded or kept: the conversation passes through ElevenLabs and is deleted there when it ends. We keep only who called which phone, when, whether it was answered and how long it lasted, which the managers can see.

What Stays on Your Phone

• First open: ShooFly shows what any app can read about your phone without asking (model, battery, storage, language, when it last restarted). It reads these on the phone and doesn't save or send them. To show your city, it asks our server where your internet address points; the server only echoes that back and doesn't log or keep it.
• Ad cleanups run in ShooFly's browser or in Safari on your phone. Your sign-ins to TikTok, Facebook and other services stay on the phone; we never see those passwords or cookies.
• Lockdown uses the same on-phone tracker blocker to take every app offline (calls and Apple's messaging keep working) until you turn it off. Nothing is inspected or sent anywhere. On a phone linked to a family, it checks with ShooFly about once a minute, using the phone's random ID, whether a family manager turned Lockdown on or off; we keep only that on/off choice and who made it.
• Tracker blocking happens on your phone. Other lookups go to an encrypted public resolver that doesn't link them to you. If you're signed in, each day's total by tracking company (for example Google 180, Meta 95) is saved to your account so your history isn't lost; never the addresses, sites or apps.
• Safari protection: the ad blocker and tracker rules are applied by Safari itself, so ShooFly never sees the pages you visit. The Safari extension changes settings only on the ad and privacy pages of the services you clean up. Its Dark-Pattern X-Ray reads the words on the pages you open, inside Safari on your phone, to label tricks like fake timers and pre-ticked add-ons. Nothing it reads is saved or sent anywhere.
• People-search removal: the name, city, email and other details you enter are kept in your iPhone's secure keychain and used only to fill in each site's own opt-out form on your phone. They're never sent to ShooFly.
• Calls and texts: spam filtering uses lists stored on your phone, updated daily from public FTC reports and ShooFly's own list. That list is made from numbers Mabel finds are scams and numbers people block in ShooFly: when you're signed in and block a number, just that number is sent to us, kept with a one-way code in place of your account so it's counted once but can't be traced to you, and removed if you unblock it. A number is only blocked for everyone once several accounts flag it. Your calls and messages never reach us, and your contacts don't either unless you turn on Recognize My Contacts for Mabel (scrambled numbers only). If you choose Report Junk, the message goes by text to 7726, the number US carriers use for spam reports, not to us.
• Scam Check, Mail Scan, QR Check, Terms Trap Finder, Paste Guard and Ask: what you paste, photograph or scan is checked on your phone, using Apple's on-device AI where available. It isn't sent to us.
• Clean Screenshot and Photos Without Location work on your phone with Apple's on-device text and face recognition. Your photos aren't uploaded.
• Camera and Bluetooth: the camera is used only to read QR codes and letters you choose to scan. Tracker Radar uses Bluetooth only while its screen is open, to show nearby trackers and beacons. Nothing is saved or sent.
• Who Called Me? downloads the whole list of reported numbers and checks the number on your phone, so the numbers you look up are never sent to us. Trial Reminders keeps your trials on your phone, and the reminders come from the phone itself.
• Your safe word stays on your phone, and so does your list of blocked numbers (only each number itself goes to ShooFly's spam list, as above).

Who Processes It

Your account, profile, cleanup history and check-ins are stored with our database and hosting providers, who process them only to run ShooFly for us. Notifications are delivered by Apple. If you use “suggest from text” for your AI profile, that text is sent to an AI model to make suggestions, and isn't kept. Sign in with Apple and Google share only your name and email with us. For Mabel, Twilio carries the phone calls and ElevenLabs runs the AI voice (with an Anthropic Claude model): each call passes through them, and we delete it from ElevenLabs once it's saved with us. Character Calls run through ElevenLabs the same way, without recording, and are deleted there when they end. Mabel's Diary and Share Clip use an AI model (Anthropic Claude) to write the diary and pick the clip from that day's scam calls. We don't use any analytics or advertising companies.

Your Choices

• Turn off any connected AI app, or change what it can see, in the app.
• Download everything we keep in Account, then Download My Data.
• Delete your account and everything in it in Account, then Delete Everything. It's removed right away.
• Erase what ShooFly keeps on your phone in How ShooFly Keeps You Safe, then Erase ShooFly's Data on This Phone.

Questions: support@getshoofly.app