SafeOpen — Support
SafeOpen Support
Getting Started
Open SafeOpen and point your camera at any QR code. The app decodes it immediately without pressing any button. You’ll see the payload type, destination, and a risk assessment before you decide whether to open it.
Tap the “Paste” tab and paste your link. You can also share a link from Safari, Messages, or any other app by tapping the share icon and selecting SafeOpen from the share sheet.
It classifies the payload (URL, Wi-Fi, contact, calendar, plain text, etc.), normalizes the URL if applicable, runs local risk heuristics, and shows you a plain-language explanation of what the payload is and what opening it will do.
No. All scanning and risk scoring in the current version runs entirely on your device. No URL, QR payload, or scan result is ever sent to Katafract or any third party. See the Privacy Policy for full details.
Risk Scoring
SafeOpen uses four levels: Likely Safe (standard URL, recognizable domain, no flags), Use Caution (short URL, unusual parameters, or patterns worth noting), High Risk (raw IP address, punycode spoofing, suspicious port, or known risky patterns), and Unknown (non-URL payload or insufficient data to score).
SafeOpen uses deterministic local heuristics that flag structural patterns, not reputation databases. A short URL from a trusted service, for example, will always show “Use Caution” because short URLs obscure the destination by design. The explanation tells you exactly why it scored that way so you can make an informed call.
Yes. SafeOpen shows you the information but never blocks you. Tap “Open” at any risk level and the app will hand off to the appropriate system handler — your browser for URLs, the Contacts app for vCards, and so on.
Privacy & Data
No. SafeOpen has no accounts, no sign-in, and no registration of any kind. Download, scan, done.
Scan history is stored only in local device storage. It is never synced to iCloud, uploaded to Katafract, or shared with anyone. Deleting the app deletes the history.
No. There are no analytics SDKs, crash reporters, or network calls of any kind in the core app. Zero data is collected.
Contact Us
Didn’t find what you were looking for? We’re happy to help.