Privacy Policy

Paranoia is built and published by Diego Fill, who is the controller for the personal data described below.

This policy covers two things: the Paranoia app on iOS, and this website at checkparanoia.com. They are separate systems and they are described separately. The terms you agree to by using either are in the Terms of Use.

You can reach us at partnerships@diegofill.com.

The app has no accounts. There is nothing to sign up for, no email address to hand over and no profile held on a server. It contains no analytics SDKs and no advertising trackers.

Your watchlist, your preferences and your on-device profile stay on the device. They are never transmitted to us, and deleting the app removes them.

The app ships with a snapshot of the scored dataset and refreshes it in the background. That request fetches a public dataset about companies. It sends no personal data, no advertising or device identifiers, and no part of your watchlist — it asks for the current dataset and nothing about you travels with the question.

The app’s App Store privacy label reads, in full: “Data Not Linked to You → Purchases. That's it.” That entry refers to the subscription purchase described in the next clause, and to nothing else.

Paranoia Plus is an in-app subscription sold through the App Store. Apple is the merchant of record: Apple takes the payment, holds the purchase record and issues the receipt. We never see a card number, a billing address or a name.

What we receive from Apple is aggregate sales and subscription reporting. The purchase record is not linked to your identity — in Apple’s own terms it is Data Not Linked to You: data collected in a way that is not tied to your identity, where the developer must not attempt to link it back to you and must not tie it to other datasets that would enable it to be linked. That definition is Apple’s, published here: developer.apple.com/app-store/app-privacy-details ↗.

Apple’s handling of your purchase is governed by Apple’s privacy policy: apple.com/legal/privacy ↗.

This website sets no cookies and loads no third-party scripts. The fonts are self-hosted: they are downloaded once at build time and served from this origin, so viewing a page sends no request to a font CDN.

Site traffic is measured with Vercel Web Analytics, a cookieless, aggregate processor. Visitors are identified by a hash derived from the incoming request rather than by a cookie, and that visitor session hash is discarded after 24 hours, so a browsing session cannot be reconstructed across sites or across days. No IP address is stored with the measurement.

Each data point stores:

• —Event timestamp
• —URL
• —Dynamic path
• —Referrer
• —Query parameters, filtered
• —Geolocation, at country, region and city level
• —Device operating system and version
• —Browser and version
• —Device type
• —Script version

Vercel publishes what it collects and how: vercel.com/docs/analytics/privacy-policy ↗.

Separately from that measurement, the host and its CDN write ordinary request logs — IP address, user agent and timestamp — which are retained briefly for security and operations. We do not publish a retention period here because our host does not publish one, and a number we could not stand behind is worse than an honest gap.

Two processors are involved in the whole service, and they are named here in full. There is no third.

• —Apple processes subscription purchases as merchant of record. Apple provides the same or equivalent protection of user data as is stated in this policy. Its policy: apple.com/legal/privacy ↗.
• —Vercel hosts this website and provides the aggregate analytics described above. Vercel provides the same or equivalent protection of user data as is stated in this policy. Its policy: vercel.com/docs/analytics/privacy-policy ↗.

No data is sold, rented or shared with anyone else, and no advertising network, data broker or third-party SDK receives anything from the app or this site.

The app is rated 4+ and is suitable for a general audience. It contains no social features, no user-generated content and no advertising.

We do not knowingly collect personal data from anyone, children included. With no accounts and no profiles there is no age gate to fail and no children’s data to hold. If you believe a child has somehow provided personal data to us, write to partnerships@diegofill.com and it will be deleted.

If you are in the EU or the UK. Our lawful basis for the aggregate site measurement and the security logs described above is legitimate interests — understanding whether the site works and keeping it available — assessed against the fact that neither identifies you. Nothing here relies on consent, because nothing here reads or writes anything on your device that would require it. You have the right of access, rectification, erasure, restriction, objection and portability, and the right to complain to your supervisory authority.

If you are in California. In the past twelve months we have collected no categories of personal information from the app. From this website, the only categories that arise are internet and network activity in aggregate form and, in the host’s request logs, an IP address. We do not sell personal information and we do not share it for cross-context behavioural advertising — neither has ever happened and neither is planned. You have the right to know, to delete, to correct, and to be free from discrimination for exercising any of them.

How to revoke consent or request deletion, wherever you are. Email partnerships@diegofill.com and say what you want done. We will answer within thirty days. Being plain about it: because there are no accounts, there is typically nothing to retrieve and nothing to erase. Your watchlist and preferences are on your device and you remove them by deleting the app; your purchase record belongs to Apple and is managed through your Apple ID.

Paranoia scores companies, and the sources below are the evidence behind those scores. To be explicit, because the phrase “data sources” invites the wrong reading: this is data about companies, not data about you. None of it is collected from users, and nothing you do in the app is sent to any of them.

• —ToS;DR ↗ — CC BY-SA
• —PrivacySpy ↗ — CC BY
• —Wikidata ↗ — CC0
• —Blacklight (self-run scans) ↗ — —

Never a purchased or scraped dataset.

This policy changes when the app or the site changes. When it does, the effective date below moves and the current version is published here. Material changes are described in the app’s release notes rather than announced by email, because we hold no email addresses to announce them to.

We review this policy at least every twelve months whether or not anything has changed, so that the date below means something.

Questions about this policy, requests under it, or a correction to something it gets wrong: partnerships@diegofill.com.

Effective August 21, 2026.