Privacy & Data Handling

AppCraft Africa runs one free, public tool that analyses a file you upload: the Fake Image Detector. We treat everything you upload as sensitive.

We keep your upload only as long as needed to run the analysis and for a short retention window of at most 7 days, then delete it automatically. You can delete it sooner — immediately, via the “Delete now” button on the detector, or on request. We never use your uploads to train models, and we never sell your data.

The voice and financial-document detectors described elsewhere on this site are no longer public sandboxes: since 28 August 2026 they are shown live on a call, on your own material, and nothing is uploaded to this website for them. This site also no longer runs a contact form — the only way to reach us is email, which we hold in an ordinary mailbox and use to reply to you.

The image you submit to the Fake Image Detector, plus the technical results we compute from it.

Minimal request metadata needed to operate the service securely: your IP address (used transiently to enforce per-hour rate limits and to block abuse) and standard server logs.

Anonymous, privacy-respecting product analytics (see “Analytics & cookies” below). We do not ask for, or require, an account, a name or a phone number to use the free tool.

If you write to us, whatever you put in that email — and nothing else. There is no form on this site and no marketing list behind it.

Your file is processed solely to produce the authenticity result you asked for, entirely on our own servers. Nothing you upload to this website is sent to a third-party model provider. Commercial customers receive the exact processing chain for whatever we deploy for them, and can require that nothing leaves their own environment.

For the Fake Image Detector we keep the upload, a small thumbnail of it, and the forensic overlays the result page displays.

We do not publish your uploads, and the per-request output URLs are not indexed by search engines.

Uploads and any artefacts derived from them (thumbnails, forensic overlays) are automatically deleted within 7 days.

Immediate deletion: the detector includes a “Delete now” button that wipes your upload and its artefacts from our servers the moment you have your result. You can also email us and we will delete your data promptly.

Aggregate, non-identifying analytics (e.g. “a document check was run”) may be retained longer, but these contain no copy of your file and cannot be used to reconstruct it.

We do not use your uploaded images to train, fine-tune or evaluate machine-learning models. Your file exists on our systems only to serve your request and during the short retention window above.

We use PostHog (EU region) for privacy-respecting product analytics, reverse-proxied through our own domain. It records anonymous interaction events — for example which tool was opened or whether a check succeeded — to help us improve the product. It does not receive a copy of your uploaded file.

We do not run advertising trackers and we do not sell or share your data with advertisers.

Traffic is served over HTTPS. Uploads are size-limited and validated, rate-limited per IP, and isolated to dedicated processing containers. We apply the principle of least retention: the less we keep, and the shorter we keep it, the safer your data is.

You can ask us to delete data associated with a submission, or ask what we hold, at any time. Because the free tool requires no account, the fastest path is simply to use the “Delete now” control, or email us with enough detail to locate the request.

For commercial / API customers, data handling, retention and residency are governed by the agreement we sign with you, which can be tightened to your regulatory needs (including on-prem or in-VPC deployment where nothing leaves your environment).

We may update this page as the product evolves. Material changes will be reflected in the “Last updated” date above. Continued use of the tools after an update constitutes acceptance of the revised policy.