Privacy Policy

Last updated: September 11, 2026

Scout ("the app", "we") is a web browser for iPhone and iPad, built on the open-source Brave browser, that checks each site for phishing and scams before it opens. This policy explains what data Scout handles and with whom. The short version: to check a site we send its address to our server; we don't ask who you are, and we don't keep a history of what you check.

How the safety check works

When you open a site Scout hasn't already checked, it sends that page's address (URL) to Zaatar Tech's server. This happens in normal and private tabs alike. No account, name, email, or device identifier is sent with it.

Our server then:

• Fetches the public version of the page itself. It does not receive your cookies, logins, or anything you typed, so it never sees the page as you do.
• Sends the address and the page's text to OpenAI to judge whether it looks like phishing or a scam and what kind of content it has (for example gambling or adult content).
• Looks up when the domain was registered, using public domain registries.

The result is sent back to your device. We don't store the addresses you check or build a history or profile from them. Addresses can briefly appear in our server's operational logs when something goes wrong, and are used only to keep the service running.

Data stored on your device

• Recent check results, kept for a limited time so sites you revisit open instantly.
• The kinds of content you've chosen to block.
• Your browsing data (history, bookmarks, open tabs, saved passwords, and settings), handled like any browser, on your device.

Deleting the app removes this data.

OpenAI

OpenAI processes the page address and text on our behalf to produce the safety verdict. It receives no information about you. OpenAI's handling of API data is described in its own policies.

Features provided by Brave

Scout is built on Brave, and some browser features use Brave's services:

• Ad- and tracker-blocking lists and browser components are downloaded from Brave's servers.
• "Block Dangerous Websites" uses Google Safe Browsing through Brave's privacy-preserving proxy.
• If you turn on Sync, your synced data is end-to-end encrypted and relayed through Brave's servers.
• Crash reports, privacy-preserving product analytics (P3A), and the daily usage ping go to Brave only if you turn them on. All three are off by default.

These services are governed by Brave's browser privacy policy (brave.com/privacy/browser). Searches go to the search engine you choose in Settings, under that provider's policy.

Data we do not collect

• We do not require an account, email, or sign-in.
• We do not collect your name, contacts, location, or photos.
• Scout shows no ads and includes no advertising or tracking SDKs.

Children's privacy

Scout is not directed at children under 13 and does not knowingly collect personal information from them.

Your choices

You choose what Scout blocks in Settings → Blocked Content, and "Continue anyway" always lets you open a site Scout has blocked. Your browsing data lives on your device: clear it in Scout's settings, or uninstall the app to erase it. We keep no copy of your check history to access, export, or delete.

Changes to this policy

If this policy changes, we'll update the date above and post the new version here.

Contact

Questions about privacy? Email inquiries@zaatar.tech.