Your screen is input, not inventory.

Screens and result artifacts

Uploaded PNG, JPEG, and WebP screens are sent to the private scorer to create the requested attention result. When you use intention suggestions or the viewer perspective, we also send a resized, metadata-free copy of your image, your intention and relevant scan measurements to OpenAI through OpenRouter. The iPhone app asks for your permission before sharing this data with these AI providers. You can withdraw that permission in Account. These AI features suggest design interpretations; they do not measure human understanding or feelings. We do not use customer screens to train models.

On the website, when you prepare a scan before signing in, this browser keeps the selected or cropped image and your request to analyze it for up to 24 hours. We clear that saved image after a successful scan. You can replace it or clear browser data to remove it sooner.

New visual scans on the website and in the iPhone app save the original image, heatmap overlay, attention map, element measurements, confirmed intention, AI interpretation, chosen or custom revision changes and element targets privately in My Scans until you delete the saved versions or your account. These saved images require sign-in. You can delete an image and its linked versions from My Scans. The overlay contains your image with predicted attention. Older scans may retain their previous 24-hour expiry; expired payloads are cleared on access. Temporary intention and interpretation request caches can last up to 24 hours to avoid duplicate AI requests, and deleting saved versions clears the associated temporary copies. We keep a content hash, request receipt and technical run metadata to track usage and prevent duplicate charges.

The iPhone app also keeps imported images, scan drafts and downloaded results in protected app storage excluded from device backups. Signing out or deleting your account clears these local scan copies. Signing out does not delete scans saved to your account; remove them separately in My Scans or delete your account. Images or ZIP files you export to Photos, Files or another app are separate copies that you control there.

Other token-protected artifact links expire within 15 minutes. The scorer does not retain the uploaded image.

Account and billing data

We store account email, account type, plan, credit balance, hashed session tokens, hashed API-key secrets, purchase state, provider transaction identifiers, and receipt links. When Apple supplies your first and last name during account creation, we also store that account name.

Google sign-in on the website and in the iPhone app uses our managed authentication service. This service can retain the name and profile photo supplied by Google, along with your email and Google user identifier, to authenticate your account.

Card details are entered on the hosted payment-provider page and are not stored by AttentionProof.

Product analytics and research answers

We record product events such as page view, upload, completed result, checkout step, acquisition source, coarse viewport size, device category (phone, tablet or desktop), operating-system family, whether the visit is inside Facebook or Instagram, and optional checkpoint answers. Website interactions include named buttons and links, form use, control changes and Message Me opening, send confirmations and errors. Click and form-use observations exclude typed text, filenames, contact details and message contents. Device categories are approximate and do not identify a specific device. We do not infer an answer when you skip a checkpoint.

The website uses a random browser session identifier and remembers the first recorded acquisition source for up to 30 days. It also uses a separate random, first-party browser identifier for up to 30 days so it can recognize a returning browser and offer relevant continuity. The server stores a one-way hash of that browser token. It is not a fingerprint, a verified person, or a cross-device identity. We count each visit as a separate journey in product experiments. The anonymous same-browser link expires after 30 days. De-identified journey events can remain in aggregate experiment history after that link is removed. After sign-in, we associate the current browser journey with your account to understand which visits lead to useful results and purchases. The first acquisition source is kept separate from the source of your current visit. Signing out clears the browser identifiers and saved journey context from that browser.

On attentionproof.com, Meta measurement starts only after you allow it. The Meta Pixel records page views, browser attention-check starts and completions, and a verified event when your own-image result is shown. For that verified result, our server can also send Meta a matching Conversions API event with the same event ID so it is not counted twice. This server event may include Meta browser identifiers and your browser type to match it to an ad interaction. Meta may use these identifiers under its own terms. We do not send Meta your uploaded images, filenames, heatmaps, presentation text, account email, or payment details. You can change your choice here at any time. Product analytics needed to run and improve AttentionProof continue if you decline Meta measurement.

The iPhone app collects your optional purpose and platform choices before sign-in, using a randomly generated installation identifier. It also records app opens, named screen visits and actions, time spent in screens, app foreground and background transitions, image selections, check outcomes and timing, result interactions, and purchase or restore attempts and outcomes so we can understand which workflows to improve. These analytics do not include your images, filenames, presentation text, screen recordings, or raw touch coordinates.

Events can be saved on your device while offline and sent when a connection is available. After you sign in, we can associate activity from this installation with your account to understand repeat use and purchases. Signing out starts a new installation identity; deleting the account also deletes its linked mobile analytics. You can edit your purpose choices in the Account tab in the app.

Reviews you choose to share

If you submit a review, we store its text, rating, your account name or chosen display name, optional description, submission date and time, publication permission, approval status, and any optional before/after creative pair with your account. The labels describe the order supplied by the reviewer and do not claim that the after creative performed better. Reviews and images appear on our website only with your explicit permission and after approval. Your account email is not displayed with your review.

You, an account-bound AI agent, or AttentionProof support can prepare a private review draft. Agent and support drafts include an assistance disclosure. They expire after 30 days and cannot provide consent, enter moderation, publish, or claim an offer on your behalf. You must open the exact draft in your own signed-in browser and separately confirm the review and any images before it enters the approval queue. Preparing a draft does not change a review that is already published.

You can update, discard a draft, or remove your review at Leave a review. Updates require approval again and replace the displayed submission date and time. Discarding a draft deletes its draft images. Removing the review withdraws permission to display it and deletes the review, its images, and any private draft. Deleting your account also removes its review, images, and drafts. Reviews that receive bonus checks display a free-check incentive disclosure. The bonus does not depend on the rating or publication decision.

Review drafts and bonus checks

You can fill in a review before signing in. When you continue with email or another sign-in option, we save your answers and selected images in this browser for up to 24 hours so you can return to them. This local draft is cleared after your private draft is saved to your account. Email verification is required before an email-only submission.

An honest review earns 50 checks once, regardless of rating or publication. No social connection is required. To prevent repeated claims, we retain a limited receipt containing a keyed hash of your email, provider, credit amount, and grant date. Older social rewards also retain a keyed hash of the social identifier. The receipt contains no review text or access token. Removing a review does not revoke the reward or make it available again.

Messages to the founder

When you use Message Me on the website or in the iPhone app, we store your message text, replies, the name and email you provide or use for your account, message times and the page or app screen where the conversation started. These conversations are private and help the founder answer you personally. Message text and contact details may also be included in support email notifications.

On the website, unsent drafts are restored from this browser for up to seven days and cleared after a confirmed send. Older drafts are discarded the next time you open the chat. A separate first-party cookie lets you return to your conversation in the same browser for up to one year. The server stores a one-way hash of this cookie token. Signed-in conversations belong to your account; a conversation started before sign-in can join your account when its contact email matches your verified account email. Signing out clears access from that browser.

In the iPhone app, Message Me requires sign-in and opens your account's private conversation. Signing out clears the conversation and unsent draft from the app, but keeps messages saved to your account so you can follow up after signing in again. Deleting your account deletes its stored conversation. To request a copy or deletion of a conversation started on the website without an account, email support@attentionproof.com from the contact email you supplied.

Control and contact

You can revoke an API key or cancel a subscription from your account. To request a copy or deletion of account data, email support@attentionproof.com from the account email.

We may retain billing and security records when required for accounting, fraud prevention, dispute handling, or law.