← Verifyly

Privacy Policy

Verifyly · The Trendsetter Agency LLC · Last updated September 29, 2026

What Verifyly keeps, what it only looks at, and how to delete it.

Who we are

Verifyly is operated by The Trendsetter Agency LLC ("we", "us"). Verifyly helps you check a link, message, email, document, photo, QR code, or barcode before you act on it. This policy explains what Verifyly stores, what it only processes for a moment, who else sees any of it, and how to delete it.

Verifyly does not require an account, an email address, or your name. We do not sell your information, show ads, or use tracking or advertising analytics.

What Verifyly stores on its server

• A device record: a random installation ID, a one-way hash of a secret that only your device holds, and when the device was created and last used.
• An anonymous customer ID, your plan, and your monthly usage counts (checks, documents, image readings, and explanations).
• If you subscribe through the App Store or Google Play: the store's purchase ID, product, status, and expiry date, and the store transaction reference needed to confirm renewals with the store. We never receive your card number.
• Each check you run: what you typed or pasted, text read from a file or photo, the values of scanned codes, and the result, including the evidence gathered (for example, where a link redirected, a domain's registration date, and which phishing lists were consulted).
• An audit log of actions (for example, "check completed" or "history deleted"). It records the action and time, not the content of your evidence.
• A salted hash of your network address, used only to limit how many new installations one network can create per day. Your raw IP address is not stored.

What is processed only for a moment

• Photos: an image you scan or upload is read and then discarded. Only the text read from it and any decoded code values are kept with the check.
• Uploaded PDFs and text files: the file is read on the server and then discarded. The text and a summary of its structure (for example, page count, whether it contains scripts or embedded links) are kept with the check.
• Your network address: used for rate limiting while your request is handled, then only kept in hashed form as described above.

What stays on your device

• Your device's installation ID and secret, which let the server recognize this device.
• An offline copy of your recent history and your plan, so the app still shows them without a connection. It is cleared if the device's identity changes.

Who else sees information

To check your evidence, Verifyly's server contacts outside services. They see requests from Verifyly's server, not from your device.

• Websites in the links you check: our server opens the address (without signing in or submitting anything) to see where it leads. The site sees our server's request.
• Domain registries (RDAP) and DNS: receive the domain names being checked.
• OpenPhish and abuse.ch URLhaus: we download their public lists and compare addresses on our own server. Your addresses are not sent to them.
• Google Safe Browsing, when enabled: receives the web addresses being checked.
• Open Food Facts, Open Beauty Facts, Open Products Facts, Open Library, and UPCitemdb: receive only a scanned barcode number.
• xAI, when image reading or plain-language explanations are enabled: receives the photo to read its text, and a summary of the result to reword it. The result itself is always decided by Verifyly's rules.
• Apple and Google: receive purchase references to confirm subscriptions.
• Railway: hosts Verifyly's server and database in the United States.
• We may disclose information if required by law or to protect people from fraud or harm.

How long we keep it

• Checks and their evidence are deleted automatically 90 days after they are created, or sooner if you delete them.
• Audit log entries are deleted after one year. Daily installation counters are deleted after a week.
• Plan, subscription, and usage records are kept while your device or subscription is active, and as long as needed for billing and legal records.

Deleting your information

• Delete a single check from its result page, or every check at once from History. Deletion removes the evidence from our server immediately.
• If you uninstall the app or clear its data, your device's secret is gone and the server copy can no longer be opened. It is then deleted on the normal schedule.
• To ask us to delete everything linked to your device or subscription, email MichelleTrendsetters@gmail.com with the first characters of the installation ID shown on the Plan page.

Security

• All traffic uses HTTPS. Device secrets are stored only as one-way hashes.
• Each check can only be read or deleted by the device that owns it.
• Links are opened only from our server, never on private or internal networks, and nothing on a page is run or submitted.
• Text inside your evidence is treated as data. Instructions hidden in a message, page, or document cannot change how Verifyly works.

Children

Verifyly is not directed to children under 13, and we do not knowingly collect information from them.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your information, and to object to certain processing. Email MichelleTrendsetters@gmail.com and we will respond within the time the law requires. We do not sell or share personal information for cross-context advertising.

Changes and contact

If we change this policy, we will update the date above and, for significant changes, tell you in the app.

Questions: MichelleTrendsetters@gmail.com · The Trendsetter Agency LLC · www.thetrendsetteragency.com