Privacy Policy

Last updated: 20 May 2026

CyberHalo (Pty) Ltd ("we", "us", "our") operates the Authentibot mobile application and website. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it. We have written this in plain English because we believe you deserve to understand it.

1. Who We Are

CyberHalo (Pty) Ltd is a South African company. You can contact us at the details provided at the bottom of this policy. Authentibot is our product — a real-time scam detection app for iOS and Android.

2. What Information We Collect

We collect only what is necessary to provide the service:

• Your email address, when you create an account or sign in
• Subscription and billing information, processed securely through Apple, Google, or Stripe — we never see or store your full card details
• Content you submit for scanning (messages, screenshots, text) — this is sent to our backend for analysis and is not stored after a result is returned
• Your scan history, which is stored locally on your device only and is never transmitted to us
• Basic usage data to help us fix bugs and improve the app (crash reports, feature usage)

3. What We Do Not Collect

• We do not store the content of anything you scan
• We do not sell your data to anyone, ever
• We do not use your data for advertising
• We do not share your data with third parties except as described below
• Call Guard audio is processed in real time only — it is never recorded or stored

4. How We Use Your Information

• To provide and operate the Authentibot service
• To manage your subscription and process payments
• To send you important service updates (not marketing, unless you opt in)
• To improve and fix the app based on usage patterns

5. Third Parties We Work With

We use a small number of trusted third-party services to operate:

• Anthropic — our AI backend for scam analysis. Content you submit for scanning is processed by Anthropic's API. Anthropic's privacy policy applies to this processing.
• Apple / Google — for in-app payments and sign-in on their respective platforms
• RevenueCat — for subscription management across iOS and Android
• Railway — our backend hosting provider

None of these parties receive your personal data for their own marketing purposes.

6. Data Storage and Security

Your scan history is stored locally on your device only. You can delete it at any time from the Settings screen in the app. We apply industry-standard security measures to protect any data we do hold, including encrypted API communications and secure key storage.

7. Your Rights

You have the right to access, correct, or delete your personal data at any time. To exercise these rights, contact us at the address below. If you are located in the European Economic Area or the United Kingdom, additional rights under GDPR apply. If you are located in South Africa, the Protection of Personal Information Act (POPIA) applies.

8. Children

Authentibot is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. The date at the top of this page always reflects the most recent update.

10. Contact Us