Privacy Policy

Effective November 3, 2026

Who we are

This policy covers the Report Fraud iPhone app and the website at reportfraud.app (“Report Fraud”, “we”, “us”), both run by Dwas Woot LLC, a US company. Report Fraud helps you prepare reports for official US government fraud-reporting programs. It is not a government service and is not affiliated with any government agency. You submit reports yourself on each program’s official website, and what you send there is governed by that agency’s own privacy policy.

Information that stays on your iPhone

Everything you put into a report is stored only on your device:

• your reports and unfinished drafts;
• evidence files and photos, and the details you add about them;
• links you add about the people involved;
• your contact details;
• the submissions you record, including reference numbers;
• your settings, such as the state you chose in setup, and your Anthropic API key if you add one (kept in your iPhone’s Keychain, on that device only).

iOS encrypts this information with your iPhone passcode (complete file protection), so the protection needs a passcode to be set. It is excluded from iCloud and device backups, and sits behind the app’s Face ID or passcode lock, which is on unless you turn it off in Settings. We have no copy of it and no way to access it.

When you copy text into an official form, it expires from the clipboard after ten minutes. When you share a photo, video or PDF, the shared copy has its location and other hidden details, such as the device, dates and author, removed by default; you can turn this off. Word, Excel and other documents, and audio files, are shared as they are and may contain hidden details such as the author’s name. Files you export or share leave the app’s protection and are handled by wherever you send them.

What is sent when you use the AI helper

The AI helper is optional. The app asks you to choose how to use it, or not to, before anything is sent for the first time, and you can change your choice in Settings. If you use it, the app sends:

• your description of what happened, the report details you fill in, and your answers to follow-up questions;
• when you ask the app to suggest where to report, your report’s details (what happened, when, where, who was involved, the amount, how you know) and the labels you gave your evidence (or, for evidence without a label, its description).

The app never sends your evidence files or photos, links about the people involved, or your contact details. Where the text goes depends on what you chose:

• Your own Anthropic API key. The app sends the text from your iPhone directly to Claude, an AI model made by Anthropic, under your Anthropic account, which Anthropic bills. It never passes through our server, and no proof of purchase or device key is sent. Your API key is sent only to Anthropic. About once a week the app downloads the AI helper’s current instructions from our server; that request contains nothing about you or your reports.
• Report Fraud’s AI. Requests pass through Cloudflare, which protects our server. The text goes through our server to Claude. Our server doesn’t store your text, and its logs record only the kind of request, whether it succeeded and how long it took, never what it said. To count your AI uses, each request also carries Apple’s signed proof of purchase and an anonymous key for your iPhone, described in the next section. With the text, our server gives Anthropic a one-way scrambled code made from your purchase identifier, so that abuse of the AI can be traced to one account rather than to everyone using Report Fraud. The code can’t be turned back into the identifier and contains no name, email address or device information.

Either way, Claude organizes the text into a report and suggests where to send it, and Anthropic processes it under its own terms and privacy policy.

Help from Apple Intelligence on your iPhone

On iPhones with Apple Intelligence turned on, the app offers a few small helpers that run entirely on the iPhone with Apple’s on-device model: a short title for each report, filling in when, where, the amount and who was involved from your description, shortening a section to fit an official form, and suggesting a label and description for evidence from the text in the file. Nothing is sent anywhere for these, to us or to Apple, and they aren’t offered if you turn the AI helper off. Apple’s Writing Tools also work in the app’s text boxes; they are part of iOS and covered by Apple’s privacy policy.

Information we keep to run AI allowances

With Report Fraud’s AI, your first AI uses are free, and Report Fraud Pro subscriptions include a monthly allowance. To count uses without accounts, our server keeps a small amount of technical information that does not include your name, email address or any report content:

• App Attest key. Apple’s App Attest creates a key on your device. We store its public half and a counter, which prove that requests come from a genuine copy of the app.
• App transaction identifier. An identifier Apple issues for your copy of the app, used to count your free AI uses across reinstalls.
• Subscription details. For subscribers, the subscription’s transaction identifiers, product, purchase and expiry dates, and the allowance used in the current period. Apple handles payment, and we never see your payment details.
• Usage records. For each AI request: the day it happened, whether it succeeded, the AI model used, and its size, cost and duration. These records don’t say which device, account or subscription made the request, and we delete them after 90 days.

We keep the App Attest key, app transaction identifier and subscription details for as long as we offer Report Fraud’s AI, so that reinstalling the app doesn’t reset your free uses. To have them deleted, write to [email protected]. Because they contain no name or email address, we’ll work out with you which records are yours.

Our server runs behind Cloudflare, which processes your IP address to deliver and protect the service. Our server uses IP addresses only briefly, in memory, to limit abuse, and doesn’t store them.

Apple services

When you type a place in a report’s “Where” field, the address suggestions come from Apple Maps, so what you type there is sent to Apple. Agency websites you open from the app open inside it, and Delete all reports and evidence clears what they stored. Purchases and subscriptions are processed by Apple through the App Store. Apple’s use of this information is covered by Apple’s privacy policy.

When a subscription starts, renews, changes, ends or is refunded, Apple sends us a notice about it. These notices go first to RevenueCat, a service we use for subscription reports, such as how many subscriptions renewed or were canceled. RevenueCat passes them on to our server and keeps a copy for those reports. A notice contains the product, its price, the dates, the App Store country and Apple’s transaction identifiers. It contains no name, email address, device information or report content. The app itself never contacts RevenueCat. To have these records deleted too, write to [email protected].

This website

reportfraud.app uses Google Analytics to understand how many people visit and which pages they read. Google Analytics uses cookies and collects information such as the pages you view, the site that referred you, your browser and device type, and your approximate location. Google processes it under Google’s privacy policy. You can opt out with Google’s Analytics opt-out browser add-on or by blocking cookies for this site.

The website is served through Cloudflare. The app does not include Google Analytics or any other analytics or advertising code.

What we don’t do

• We don’t sell or rent information, and we don’t show ads.
• The app doesn’t track you across other companies’ apps or websites.
• We share information only with the service providers named above, or when the law requires it. Because your reports never reach us, we can’t disclose them.

Your choices

• You can use the app without the AI helper and fill in reports yourself.
• You can delete any report, or use Settings → Delete all reports and evidence to remove your reports, evidence and drafts from your iPhone. Deleting the app deletes them too.
• iOS can keep an Anthropic API key in the iPhone’s Keychain after the app is deleted; Report Fraud removes it the next time it’s installed. To remove it right away, choose another option in Settings → AI helper before deleting the app, or revoke the key in your Anthropic account.
• If you choose “Don’t use AI”, the app also turns off Apple’s Writing Tools in its text boxes.
• Deleting reports or the app doesn’t cancel a subscription. Manage subscriptions in your Apple Account settings.

Children

Report Fraud is not directed at children under 13, and we don’t knowingly collect information from them.

Changes to this policy

If we change how we handle information, we’ll update this page and its effective date.

Contact

Questions about this policy or the app: [email protected].