Last updated: October 17, 2026
TrustLens is provided by VectorShift Digital. Contact: masoodbarkiwork@gmail.com.
TrustLens checks one suspicious message, link, screenshot, QR code or PDF at a time and gives a plain verdict. There is no TrustLens account. Nothing you share is sent until you tap Check now, and the app shows exactly what a check will send before you do.
Photos, screenshots, QR codes and PDFs are read on your phone. Only the text you see in the box, and the links you leave ticked, are sent for a check. Whole PDFs are never uploaded. A photo is sent only if you turn on Include an image for that single check; it is re-encoded and its metadata (such as location) is removed first. Copies of shared files are kept in the app's private storage while you work and deleted within 15 minutes, or when the check finishes or is cancelled.
History is off by default. If you turn on Save history, the app keeps verdict summaries (risk level, score, when and what kind of item) for 30 days, encrypted with a key held by your phone. It never keeps the message, links or images. History is excluded from Android backups.
| Recipient | What it receives | Why |
|---|---|---|
| TrustLens server (hosted on Google Cloud) | The text you check and the links you left ticked | To run the checks and build the verdict |
| Google Web Risk | Each ticked link, exactly as written | To see if Google knows it as phishing or malware |
| Public DNS and domain registries (RDAP) | The domain names in ticked links | To see whether a domain exists and how new it is |
| Anthropic (Claude AI) | A trimmed part of the text, with links, email addresses and long numbers replaced by placeholders; an image only when you turned on Include an image | A second reading when the rules alone are unsure. The AI can raise a concern but never lowers a warning. |
| The linked website | An ordinary visit from our server, only when you turn on Visit the link safely for that check | To see where a link really leads, without your phone opening it |
The "What happened" sheet after every check lists what was actually sent and to whom. Google and Anthropic handle what they receive under their own terms: Google Privacy Policy, Anthropic Privacy Policy. Under Anthropic's commercial terms, inputs sent through its API are not used to train its models.
The server never stores the text, links or images you check, and keeps them out of its logs. A finished result is kept for 10 minutes so the app can reconnect if your network drops; it is encrypted with a key that only your phone has. To run the service it keeps a small amount of technical information:
| Information | Kept for |
|---|---|
| An app installation ID and a public key created on your phone (to recognise the app without an account), plus the result of Google Play's check that the app is genuine | Until 90 days after the app was last used |
| Your remaining checks and, if you subscribe, subscription status from Google Play | While the installation or subscription is active, then 90 days |
| Counters used to stop abuse, keyed to a pseudonym of your IP address (not anonymous) | 48 hours |
| Cost records for checks (which kind of check ran, never its content) | 35 days |
| Hosting logs from Google Cloud (time, IP address, request type; never message content) | Up to 30 days |
To prevent abuse, the app asks Google Play Integrity to confirm it was installed from Google Play and is running on a genuine device; Google processes device and app information to answer. TrustLens+ is sold through Google Play Billing: Google handles checkout and payment details, and TrustLens receives the purchase state and a purchase token to confirm your subscription. The token is stored encrypted and never logged. TrustLens never receives your payment card details.
TrustLens uses internet access to run checks. It reads only the items you share with it or pick with Android's photo and file pickers, and does not request camera, microphone, contacts, location or storage permissions. It shows no ads and has no advertising or analytics SDKs.
You decide what each check sends: untick links, edit the text, and leave the optional switches off. You can turn history off or delete it in the app at any time. Uninstalling or clearing the app's storage removes everything on your phone; the installation record on the server is deleted after 90 days without use. Because TrustLens has no accounts, we can't find that record from your email address; if you still have the app and want it removed sooner, email us and we'll help. Step-by-step instructions are on the support page. For any privacy question, email us.
TrustLens is not directed to children under 13.
The TrustLens server and its database run in the United States. Google and Anthropic may process information in other countries under their own terms.
This policy is hosted on GitHub Pages. Visiting it may involve ordinary website connection information handled by GitHub under its Privacy Statement. We will update this page when the app's data practices change, with a new update date.