Who We Are

LEECHGUARD PRIVACY POLICY

Last Updated: July 3, 2026This Privacy Policy explains how Watchwise LLC ("we," "us," or "our") collects, uses, stores, and protects your information when you use the LeechGuard application ("Service"). By using LeechGuard, you agree to this policy.

1. Information We Collect

Account information
When you create an account, we collect your email address and authentication credentials. If you sign in with Google, we receive your name, email, and Google profile ID from Google's OAuth service.

Content you register for protection
Assets, images, face profiles, monitored channels, and infringement records you add to your account are stored in our cloud database.

Face and biometric data
If you use face monitoring, you submit a reference photo of yourself. This photo is processed to identify potential unauthorized uses of your likeness. See Section 3 for full details.

Scan and enforcement records
Scan results, detected infringements, takedown requests, counter-notices, and associated audit logs are stored in your account.

Usage data
We collect standard app usage logs (feature interactions, error events) to diagnose issues and improve the Service. We do not collect advertising identifiers or behavioral tracking data.

Gmail access (optional)
If you connect your Gmail account to send enforcement notices, we request the Gmail send-only OAuth scope. We do not read, store, or index your inbox. The OAuth token is stored encrypted and used only to send notices you initiate.

2. How We Store Your Data

LeechGuard uses Supabase, a cloud database platform, to store your account data. Your data is hosted on servers in the United States. All data in transit is encrypted via HTTPS. Data at rest is encrypted by Supabase.

You can delete your account and all associated data at any time through app settings. Deletion is permanent and processed within 30 days, except where retention is required by law (e.g., fraud prevention, legal holds).

3. Biometric and Face Data

Face monitoring processes facial recognition data, which may constitute biometric information under applicable law, including the Illinois Biometric Information Privacy Act (BIPA), Texas Capture or Use of Biometric Identifiers Act (CUBI), and EU GDPR Article 9.

By enabling face monitoring:

  • You confirm the reference photo is of yourself or a person for whom you hold legal authorization

  • Your reference photo is transmitted to AWS Rekognition and FaceCheck.ID for facial similarity comparison

  • These services process your image to return match scores; they do not retain your biometric data beyond the API call under their standard processing terms

  • Your reference image is stored in your LeechGuard account and used solely for detecting unauthorized uses of your likeness

  • You may delete your face profile at any time; deletion permanently removes the reference image and ceases all face-based scanning

  • We do not sell biometric data under any circumstances

4. Third-Party Services

The following services may receive or process your data as part of delivering LeechGuard's functionality:

ServicePurposeWhat is sharedSupabaseCloud database and authenticationAll account dataAWS RekognitionFacial similarity comparisonReference photo (not retained by AWS beyond the call)FaceCheck.IDReverse face image searchReference photoAnthropic (Claude)AI classification and DMCA document generationScan context, image analysis inputsBing Visual SearchReverse image searchReference imageSerpAPI / YandexReverse image searchReference imageRevenueCatSubscription and entitlement managementPurchase recordsSendGridTransactional email deliveryYour email address, notice contentGoogle (OAuth)Gmail send accessOAuth token (send-scope only)Apple / GoogleIn-app purchasesHandled directly by App Store / Play Store

We do not share data with these services beyond what is necessary for the stated function. We do not permit third parties to use your data for advertising or to sell it to others.

5. How We Use Your Information

  • Deliver the features you request (scanning, takedowns, monitoring)

  • Send legal notices on your behalf when authorized

  • Send transactional notifications (deadline reminders, scan results)

  • Diagnose technical issues

  • Comply with applicable law

We do not use your data to train AI models. We do not sell your data.

6. Automated Processing

LeechGuard uses automated systems — including AWS Rekognition facial recognition and Anthropic's Claude AI — to classify scan results and generate legal documents. Under GDPR Article 22, you have the right not to be subject to decisions based solely on automated processing that produce significant legal effects. In LeechGuard, all enforcement actions require your explicit initiation or Quiet Mode consent. You may disable Quiet Mode at any time to resume manual review of all actions.

7. Your Rights

All users:

  • Access the data we hold about you by contacting contact@leechguard.com

  • Request correction of inaccurate data

  • Delete your account and associated data through app settings

EU / EEA users (GDPR):
In addition to the above, you have the right to:

  • Data portability (receive your data in a machine-readable format)

  • Object to processing

  • Withdraw consent at any time (for face data and Quiet Mode)

  • Lodge a complaint with your national data protection authority

California users (CCPA/CPRA):

  • Know what personal information we collect and how it is used

  • Delete your personal information

  • Opt out of the sale of personal information (we do not sell personal information)

  • Non-discrimination for exercising your rights

To exercise any of these rights, contact us at contact@leechguard.com. We will respond within 30 days.

8. Children's Privacy

LeechGuard is not intended for users under 13 years of age. Users who enable adult content monitoring must be 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Data Retention

We retain your data for as long as your account is active. When you delete your account, your personal data is permanently deleted within 30 days. Anonymized or aggregated usage statistics that cannot identify you may be retained indefinitely.

10. Security

All data transmissions use HTTPS. Database data is encrypted at rest by Supabase. We do not store payment credentials — payments are handled by Apple and Google directly.

11. Changes to This Policy

We may update this policy to reflect changes in our practices or applicable law. We will notify you of material changes through the app or by email. Your continued use of LeechGuard following notice constitutes acceptance of the updated policy.