Privacy Policy

We collect the minimum needed to run SafariScam AI: your account details, the destinations you save, your plan, the questions you ask Simba, and any scam reports you submit. We never see or store your card details (Stripe does, as our payment processor). We don't sell your personal data. You can delete your account and data anytime from your Account page.

• Account data — email, password (stored hashed). To create and secure your account. Legal basis: contract.
• Saved destinations (city, country). To personalise your search and alert you to new reports. Basis: contract.
• Plan & billing status (via Stripe). To provide what you paid for. We receive plan status and receipts, not card numbers. Basis: contract; invoices kept per Spanish tax law (legal obligation).
• Urgent-chat questions & AI responses. To generate Simba's answers and enforce fair-use limits. Questions are processed by our AI provider (Anthropic) under contract. Don't include sensitive personal details in questions. Basis: contract / legitimate interest.
• Scam reports you submit (city, country, description, category). To grow and verify the scam database for all users. Reports are reviewed before publication. Basis: legitimate interest / consent.
• Technical & usage data. Security, debugging, and understanding what to improve. Basis: legitimate interest; analytics cookies only with your consent.

• No sale of personal data. No advertising use of your personal data.
• No live location tracking. Matching is based on destinations you declare or describe, never GPS.
• No card data on our systems — payment details go directly to Stripe.

Carefully chosen processors under data-processing agreements: Supabase (database, authentication, and application hosting; may store data outside the EU under approved safeguards such as Standard Contractual Clauses), Anthropic (processes your urgent-chat questions to generate Simba's responses), and Stripe (payments). Analytics tools, if enabled, run only with cookie consent.

Account data: while your account exists. On deletion, personal data is erased or irreversibly anonymised within 30 days, except invoices and records we must keep under Spanish tax and commercial law (kept for the statutory period, then deleted). Rejected or unpublished reports are deleted within 90 days of review.

You can access, correct, export, restrict, object to processing of, or delete your personal data — most of it directly from your Account page, or by emailing admin@safariscam.ai. We respond within one month. You may also complain to a supervisory authority — in Spain, the AEPD (aepd.es) — though we'd appreciate the chance to resolve things first.

Essential cookies keep you signed in and the service working. Analytics/marketing cookies (if enabled) load only after your consent via a cookie banner.

SafariScam AI is for users 16 and older. We do not knowingly process children's data; if you believe a child has created an account, contact us and we will delete it.

We'll update this policy as the service evolves and notify you of material changes in-app or by email. The “last updated” date above always tells you the current version.