Legit It

Draft for legal review. Not yet in effect.

Privacy policy

Last updated October 23, 2026

Legit It helps you check whether texts, emails, ads, posts and pictures can be trusted. This policy explains, in plain words, what we collect, why, and what we never do.

The short version

What we collect

What you check. The screenshot, photo, video, link or text you send. Before a picture leaves your phone, the app covers card and account numbers, Social Security numbers, long ID numbers and, on banking screens, money amounts. The server reads it, checks it and deletes the file immediately afterward.

Anonymous check records. For each check we keep: the kind of content, the verdict and score, the scam pattern and warning signs found, the company an ad names, how long the check took, and the claim wording with emails, street addresses, phone numbers, long numbers and link paths removed. These records contain no file, no account and no phone ID.

A random phone ID. The app makes a random number for your phone, with nothing personal in it, so the daily check limit (50 a day) works per phone. It is not stored with check records.

Your account (when accounts launch). If you sign in with Apple or Google, we receive your name and email as you choose to share them, and we keep your plan, your referral or organization code and your earnings, if any.

Payments. Apple or Google handles your payment. We see whether you are subscribed and your plan, never your card details. Our subscription provider, RevenueCat, processes this information for us.

Referral, campus and community programs. If you earn money through referrals, a campus or community program or as a creator, we collect what's needed to pay you and meet tax rules (for example name, address and a tax form), handled by our payout provider.

Waitlist. If you join the waitlist, your email, what you're interested in and any invite code.

Who helps us run Legit It

To check something, we use trusted services that process it on our behalf and only for that purpose: Anthropic (AI reading and analysis), Hive and Sightengine (AI-picture detection), Serper and Brave (web search), Google Fact Check (fact-checks) and Render (our servers and database). Apple, Google and RevenueCat handle subscriptions. We share only what each needs to do its job.

What we never do

Your choices

You can delete your account and its data at any time from the app or by emailing us. You can leave the waitlist from any email we send. Depending on where you live (for example California), you may have rights to know, correct or delete your personal information; email us to use them.

Children

Legit It is not meant for children under 13, and we don't knowingly collect their information. Earning programs require you to be 18 or older.

Security

Information is sent over encrypted connections, uploads are deleted after checking, and access to our systems is limited. No system is perfectly secure, and we'll tell you promptly if a breach affects you.

Changes and contact

If we change this policy in a meaningful way, we'll tell you in the app or by email before it takes effect. Questions: hello@legititapp.com.