SecondLook Privacy Policy

Last updated: August 31, 2026

SecondLook is built so that the thing it warns you about — handing sensitive information to someone you can't verify — never happens with SecondLook itself. There is no account and no sign-in.

What we collect

SecondLook does not collect personal data for advertising or analytics. There is no account system and no tracking SDK. The standard check makes no network requests at all.

What stays on your device

• Text you paste and screenshots you import — read on-device with Apple's Vision framework; the screenshot is not stored.
• Your hiring-stage selection and app preferences.
• Saved checks — only which rules matched, the stage, and the date. The message text and any quoted snippets are never stored. Social Security numbers, card and bank account numbers, IBANs, and dates of birth are stripped from any snippet before it is shown on screen.
• Your Deep AI Check monthly count (kept in the device keychain so it survives reinstalling the app).

Optional feature: Deep AI Check

The report has one clearly-labeled optional control. When you tap Deep AI Check and accept a one-time explanation, SecondLook sends the message text (with SSNs and card/bank numbers already removed) and the screenshot to SecondLook's backend, which passes them to a third-party AI model for a closer read. The screenshot is sent as you took it, so blur anything sensitive in it first.

• You can turn Deep AI Check off any time in About → AI.
• SecondLook's backend does not store the image or text beyond briefly caching the result, and never uses them to identify you.
• Requests carry a short-lived, per-install token that contains no account, name, email, or device identifier — it only proves the request came from a real install.

Plain-language summaries

The "In plain terms" summary and suggested reply on the report are built from the rules that matched. If a backend is configured, it is sent only that list of matched rules plus your hiring stage — never the message text, a screenshot, an email address, a name, or a domain.

Purchases

SecondLook Plus is processed by Apple. Apple's privacy policy applies to payment data. SecondLook only learns whether Plus is active via StoreKit entitlements.

Children's privacy

SecondLook is not directed at children under 13.

Changes

We may update this policy. The "Last updated" date will change when we do.

Contact

For privacy questions about this app, contact the developer via the App Store product page support URL.