Privacy policy

Last updated 24 October 2026

Screenlint is run by Abhishek Shori, an individual (a sole trader) based in India. In this policy "we" and "us" mean Screenlint, and we decide how the data below is used. Write to audits@screenlint.com with any question about it.

What we collect

• When you request access: your email address, and anything else you fill in (company, the framework your app is built with, its name or App Store link), plus which service you picked and the page you sent it from.
• When you upload a build: your company name, the email address the report goes to, the build itself, your notes, and a test login if you add one. The test login is encrypted in your browser before it leaves your device, with a key only our audit system holds. It is unlocked only for your audit, and handed only to the machine running it.
• From running your app: screenshots, a launch video, each screen's accessibility tree, a log of the walkthrough's steps, the review and your report.
• When you email us: your message and address. Mail to audits@screenlint.com is also sorted automatically, as described below.
• When you pay (once paid reviews open): Paddle collects your payment details. We never see your card number; Paddle tells us your name, email address, country and what you bought.

Our pages set no cookies and run no analytics or tracking scripts. The only thing they load from another website is Paddle's checkout, on the upload page when a review needs paying and on the payment page Paddle's own emails link to; Paddle's own privacy notice covers it. Cloudflare, which hosts it, sees your IP address and uses it to block abuse, for example to limit how often the access form can be sent.

What we use it for

To reply to you, send your upload link, run your review, send you the report and answer your questions about it. We don't sell your data, and we won't add you to a mailing list.

Who helps us run Screenlint

• Cloudflare hosts the site, stores builds, captures and reports in its R2 object storage, encrypted at rest, and forwards email sent to screenlint.com to our inbox.
• Resend sends Screenlint's emails.
• GitHub runs the macOS machine your app is audited on, through GitHub Actions. The machine exists for one run and is then destroyed; your app runs there in a fresh simulator made for your audit alone, and your build is deleted from the machine as soon as your audit ends. No other client's build runs on that machine, and it holds no key to our storage, email or AI accounts. Your report is then written on a second GitHub machine, from the screenshots and screen structure, never your build, and that machine is destroyed after its run too. GitHub keeps the run's log for 90 days; it holds job ids and step summaries, never your test login.
• Anthropic provides Claude, which steers the walkthrough and writes the review. Only screenshots, stills from the launch recording, the on-screen structure of your app, its name, version and bundle ID, and your notes for the auditor are sent to it; your build itself never is. Under Anthropic's commercial terms, data sent through its API is not used to train its models. Claude also sorts the emails you send to audits@screenlint.com, so that routine questions can be answered automatically: it is sent the subject and the first part of the text of each email, never attachments.
• Google hosts the inbox where we read and answer your email.
• Paddle takes payments, once paid reviews open, as the Merchant of Record.

These companies may process data in the United States and other countries.

How long we keep it

• Your build: deleted as soon as your report is ready, and never kept longer than 7 days.
• Your test login: encrypted in your browser before upload, used only during the audit run, and deleted when it ends.
• Screenshots, your report and the review: deleted 90 days after the audit, or at once when you press "Delete this report now" on the report.
• The record of your upload: deleted 90 days after its last change. That button removes your company, email address and app details from it at once, and leaves only its dates, service, status and payment, so your link's count of uploads stays right.
• Your request for access: kept until you ask us to delete it.
• Emails: kept in our inbox until we delete them.
• The log of automatic email sorting: the kind of email, the job it was about, a scrambled form of the sender's address and the time, never the text or the address itself; deleted after 90 days.
• Payment records: kept by Paddle as tax law requires.

Your choices

You can ask us for a copy of what we hold about you, to correct it, or to delete it, at any time: write to audits@screenlint.com. When you ask us to delete what we hold, we delete your builds, reports, upload records and requests for access by hand, turn off your upload link, and reply to confirm. If you only ask to delete a report, the automatic reply may send a link instead, to the address your audit was booked under, and the report is deleted when you press the button on the page it opens. You can also delete your report, its screenshots and the review yourself, at any time, with the "Delete this report now" button at the end of the report.

If you need a non-disclosure agreement, we sign yours on request: email us before you upload.

How it's protected

Upload links and report links carry long random secrets, builds and reports sit in private storage, encrypted at rest, and test logins are encrypted before they leave your browser. Every page is served over HTTPS.

Changes

If this policy changes, the date at the top changes with it.