Privacy Policy

LegitCheck AI for Android · Effective October 21, 2026

This Privacy Policy describes how LegitCheck AI (the “App”) collects, uses, stores, and shares your information when you use our Android application (published on Google Play under the package name com.legit.check.shoe.authenticator).

By installing or using the App, you agree to the terms described in this Privacy Policy.

Developer contact: quicklysearch.bot@gmail.com

1. Information We Collect

1.1 User-Submitted Content

To generate AI-based authenticity verification results, the App processes the following content that you actively provide:

Before the App sends photos for the first time, it asks for your permission to send your photos and the details you entered to OpenAI through our server. Without this permission no analysis request is sent. You can turn it off at any time in the App menu (“Send to OpenAI”); this applies to future requests.

Before sending, the App reduces each photo to at most 1024 pixels on the long side and re-encodes it. Re-encoding removes the photo’s metadata (EXIF), including GPS coordinates.

Notes, prices, and purchase details you add in the App’s collection or on the photo step are not sent to OpenAI.

Photos are processed to generate the AI authenticity analysis. The category, brand, and model you enter are also used for product analytics (see §3.3). We do not use your photos to train AI models.

1.2 Technical Information

We automatically collect:

This information is used to operate, debug, and improve the App.

1.3 Subscription Information

We collect subscription and purchase-related data:

For users in Russia, billing is processed by CloudPayments (see §3). For users in other countries, billing is processed by Google Play Billing via Adapty (see §3).

1.4 Region Detection

To route you to the correct payment provider, the App reads:

These three signals are combined to determine whether you are a user in Russia (which switches the payment flow to CloudPayments) or elsewhere (which uses Adapty / Google Play). Reading these values does not require any special permission and is done locally on your device.

These signals are also reported in analytics events so we can monitor the routing decision quality across our user base.

1.5 Contact Information

We receive your email address when you pay for a subscription through CloudPayments (users in Russia): our CloudPayments checkout asks for it to deliver the fiscal receipt required under Russian Federal Law No. 54-FZ. We pass the details needed for the receipt to CloudPayments and receive payment status notifications. We also receive your email address if you write to our support.

The App does not ask for your name, phone number, physical address, or government ID. Such details may still reach us if you include them yourself, for example in a support email or a free-text comment (see §1.9).

1.6 Approximate Location (via IP)

The App’s analytics provider (Mixpanel) records your approximate location by inferring it from your IP address at the time of each event. The granularity is country / region / city level – not GPS.

1.7 Device Identifier for the Free Check

To give each device one free authenticity check and to prevent abuse of it, the App reads the Android ID (an identifier Android assigns to the App on your device) and turns it on the device into a one-way SHA-256 hash. Only this hash, together with a random request ID, is sent to our free-check service. The Android ID itself never leaves your device, and the hash is never sent to our analytics providers.

Our service does not store the hash it receives. It stores a keyed hash of it (HMAC-SHA256 with a secret key), the free-check status (reserved or used), the request ID, the number of attempts, and the dates the record was created and last changed. The service uses your IP address only briefly to limit the request rate and does not store it. The record is not linked to your email address, name, purchases, or analytics IDs. Records that have not changed for 365 days are deleted automatically.

The App may contact this service when you open the main screen and when you start or complete a free check, including while the free check is not offered to you. In that case the request checks that the service is reachable and reads the current free-check status; it does not create a new record. The service still writes its usual technical log entry (see §3.8) and counts the request for rate limiting.

1.8 History and Collection on Your Device

Your check history (results, the photos of each check, category, brand, model, and the purchase source and price if you entered them) and your collection (the items you add with a photo, their status, purchase and market prices, currency, purchase source, and your notes) are stored only on your device, in the App’s private storage. We do not upload them to our servers.

The App aims to keep about 50 checks in the history: when new checks are saved above this number, it removes the oldest ones a few at a time, so the history can hold more for a while. Records the App cannot read are not removed automatically. The collection holds up to 200 items.

If you updated from an earlier version of the App, the file of the previous history version stays on your device after its checks are moved to the new history. Deleting a check from the history does not remove it from that older file. The App remembers the deletion and does not show the check again, but if the history is ever reset (see below), checks left in the older file can be imported again. The file is removed when you uninstall the App or clear its data in Android Settings.

If the App cannot open your history and you choose “Start history over” (or the App resets the history by itself after an update), the old history is not deleted: the App keeps a copy of it on your device and starts a new one. The copy has no time limit: it stays on your device until you uninstall the App or clear its data in Android Settings. It is not uploaded anywhere.

1.9 Questions and Feedback

Your answers are sent to our analytics provider Mixpanel (see §3.3) and are linked to your pseudonymous analytics user ID. The answers you pick from a list (but not the free-text comment) also go to Firebase Analytics. Before a free-text comment is sent, the App tries to remove email addresses and phone numbers using simple patterns and cuts the text to about 1,500 bytes; the comment goes only into Mixpanel events. The filter can miss some formats and does not remove names, addresses, or other details, and the comment field does not warn you about this, so please do not write personal information there. The comment is not a way to contact us: if you want a reply, email us.

2. How We Use Your Information

2.1 Primary Purposes

Your data is used to:

2.2 We DO NOT Use Your Data To:

We do share your Advertising ID and app and purchase events with Meta to measure our advertising (see §3.6); Meta’s further use of this data is governed by its own privacy policy. - Access your photo library, contacts, messages, or other media beyond what you intentionally upload

3. Third-Party Services

To deliver the App’s functionality, we share specific data with the following service providers. Each one operates under its own privacy policy.

3.1 Payment Processing

3.2 Subscription Management

3.3 Analytics

3.4 Crash Reporting

3.5 Remote Configuration

3.6 Advertising Attribution

3.7 AI Photo Authentication

3.8 Free Check Service

3.9 App Integrity Verification

3.10 What We Do Not Share

We do not share user data with data brokers, ad networks (beyond Meta SDK as described above), marketing list providers, or any other third party not listed in this section.

3.11 Sharing a Result

When you tap “Share” on a result, the App creates a PDF certificate (with the verdict, category, model, confidence, checklist, AI notes, check number, date, and up to five photos of the check) or a picture, and opens the standard Android share sheet. The file goes only to the app or person you choose. Our analytics records which app you picked (its package name), the verdict, confidence, category, and format of what you shared, whether it worked, how long it took, and the file size – not the file itself. The App keeps the file in its temporary storage and deletes files older than about an hour the next time you share; Android may also clear this storage on its own.

4. App Permissions

4.1 Camera and Photos

You may revoke these permissions at any time in Android Settings → Apps → LegitCheck AI → Permissions.

4.2 Internet Access

Required for AI analysis, subscription management, and analytics.

4.3 Notifications

The App does not ask for notification permission and does not send push notifications.

4.4 Network State

The App reads your network connection state to provide offline feedback if the AI service is unreachable.

4.5 Phone State

The App does not request READ_PHONE_STATE. The SIM and network country codes mentioned in §1.4 are available to the App without that permission on modern Android versions.

4.6 Advertising Interfaces (Privacy Sandbox)

The Google Analytics for Firebase SDK and the Meta (Facebook) SDK included in the App declare access to the Android Privacy Sandbox interfaces (attribution reporting, advertising ID, topics, and custom audiences). We do not show ads in the App. You can manage these interfaces and the Advertising ID in Android Settings (Security & privacy → Privacy → Ads, the exact path depends on your device).

5. Data Security

5.1 Encryption

5.2 Backup

We disable Android’s automatic cloud backup of the App’s data to prevent accidental disclosure of cached identifiers.

If you move to a new phone using Android’s device-to-device transfer (Android 12 and later), the text of your check history, your collection cards (status, prices, currency, notes), App settings, and technical identifiers (for example, the analytics ID and the App’s installation ID) may be copied to the new device. Photos, your permission to send photos to OpenAI, the free-check status, and subscription SDK data are not copied.

5.3 Storage

6. Your Rights

You have the right to:

6.1 Russian Users (152-FZ “On Personal Data”)

If you are a resident of the Russian Federation, your personal data is processed in accordance with Federal Law No. 152-FZ “On Personal Data”. Some of our third-party processors (Mixpanel, Firebase, Adapty, OpenAI, Cloudflare, Google Play, Meta, and Vercel, which hosts our server) operate servers outside the Russian Federation; by using the App, you consent to the cross-border transfer of your data to these providers solely for the purposes described in this Privacy Policy.

6.2 EU/UK Users (GDPR)

If you are in the European Union or the United Kingdom, the lawful bases for processing your data are: (a) performance of contract (subscription processing); (b) legitimate interests (App improvement, fraud prevention); (c) consent (sending photos to OpenAI). Please note that the analytics and advertising attribution SDKs described in §3 start when the App launches; the App currently has no separate consent screen or switch for them. You can object by writing to us, reset or delete your Advertising ID in Android Settings, or uninstall the App.

6.3 Requesting Deletion of Your Data

The App has no accounts, so we need something that lets us find your records. Email us at quicklysearch.bot@gmail.com and include one of the following:

Within 30 days of receiving such a request, we will review it, delete the data we can find, and reply with what was deleted, what was kept, and why. This covers:

Some data usually cannot be found or deleted from such a request:

Data held by Google Play, Meta, and CloudPayments as independent services is governed by their own privacy policies. You can reset or delete your Advertising ID in Android Settings. If you have never paid, we usually cannot find your analytics data from an email alone, because the App does not show its installation ID yet; you can always remove all data on your device yourself (see above). Data in backup copies is deleted when those copies are deleted.

7. Children and Privacy

The App is intended for adults aged 18 and over and is not directed at children. We do not knowingly collect personal data from children. If we become aware that such data has been collected, we will delete it promptly. If you are a parent or guardian and believe your child has used the App, please contact us.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in legal requirements. Updated versions will be published at this URL with a new effective date. Please review this page from time to time. Continued use of the App after an update constitutes acceptance of the revised Privacy Policy.

9. Disclaimer of Warranties

The App:

For high-value items, we recommend consulting a professional authenticator in addition to using the App.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: quicklysearch.bot@gmail.com

This Privacy Policy is effective as of October 21, 2026.