SecurityCake SHIELD

2. APP PURPOSE

SHIELD is a free, gamified scam awareness education app for everyday consumers. Americans lost $10B+ to fraud in 2023, yet there's no structured way for consumers to build scam recognition skills.

Users take interactive quizzes built from real-world scam scenarios (phishing, romance scams, crypto schemes, etc.), track a Preparedness Score, earn achievements, and compete on a leaderboard. The core experience is free.

Scam-to-Quiz: Users submit scam content (text, URLs, screenshots, or via iOS Share Sheet) which AI analyzes and converts into quizzes. Each submission uses 1 credit (premium subscribers get 10/month).

Premium ($5.99/mo or $49.99/yr): 10 monthly submission credits plus a Scam Defense Score — a personalized risk assessment enriched with Have I Been Pwned breach data.

3. TEST CREDENTIALS & INSTRUCTIONS

Sign-in credentials are provided in the App Review Information section above. The account is pre-populated with quiz data and has premium access.

Steps: Launch app > Sign in > Home shows Preparedness Score and quiz categories > Tap a category > Start a quiz > Answer questions with immediate feedback > View results > Leaderboard tab > Progress tab > Profile tab for Scam Defense Score and breach details > Scam-to-Quiz: paste suspicious text to generate a quiz > Share Sheet: from Safari, tap Share > SHIELD > Settings: sound, haptics, biometric lock, account deletion.

One account type. Free users access all quizzes. Premium unlocks Scam Defense Score and monthly submission credits via Apple In-App Purchase managed by RevenueCat.

4. EXTERNAL SERVICES

- Supabase: auth (email/password, Apple Sign In), database, edge functions
- RevenueCat: in-app subscription management and receipt validation
- Apple Sign In: native authentication
- OpenAI: text-to-speech, embeddings for duplicate detection (server-side)
- Google Gemini: content safety filtering, multimodal analysis (server-side)
- N8N: backend workflow automation for scam-to-quiz pipeline (server-side)
- Parsera/Tavily: web content extraction from submitted URLs (server-side)
- Apify: video/social media content extraction (server-side)
- Have I Been Pwned: breach data for Scam Defense Score
- Expo/EAS: over-the-air JS bundle updates

5. REGIONAL DIFFERENCES

SHIELD functions consistently across all regions. No regional differences in features or content. All content is in English.

6. REGULATED INDUSTRY

SHIELD is a consumer education app for scam awareness. It does not operate in a regulated industry. It is not a financial services, healthcare, or gambling app. No licenses or regulatory authorizations are required.

Terms of Service: https://shield.securitycake.com/