DebtShield is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.
We do not collect, transmit, store on a server, sell, share, or analyze:
DebtShield uses a local SwiftData store. Optional iCloud sync, described below, also replicates the archive to your private Apple CloudKit database. Standard iOS device backups may contain app data when enabled and are separate from app synchronization. We cannot access your Apple Account or backups.
Several features process data locally on your device only:
DebtShield uses Apple StoreKit for a monthly subscription and a one-time non-consumable Lifetime purchase. Loading products, checking offer eligibility, purchasing, restoring and verifying access communicate with Apple. The app reads verified product and entitlement information, including expiration or revocation status where applicable, and keeps local access state. Apple processes payment; DebtShield does not receive your payment-card details or Apple Account password. Current and supported historical purchase access depend on verified transactions. See the DebtShield terms for the available plans and subscription handling.
DebtShield's iCloud sync is off by default. The current onboarding explains the privacy model and does not enable or change sync. You can opt in through Settings > Sync; follow the app's Quit & relaunch confirmation to apply the chosen storage mode. When enabled and available, Apple CloudKit can replicate the underlying records and attachments to your private Apple Account database. Turning sync off does not erase earlier iCloud copies; manage those through Apple Account storage settings. Private CloudKit storage is governed by Apple's service terms and is not a promise of end-to-end encryption for every field or immunity from valid legal process. We do not operate a record server.
To stop subsequent syncing, turn the preference off in Settings > Sync and complete the requested quit and relaunch. The selected storage mode takes effect when the App reopens; existing local records remain. Records already in iCloud can be removed by deleting the app's data through your Apple Account iCloud storage settings.
Supported original records use a deletion marker and a Recently Deleted window of up to 30 days. Restore clears that marker; this is not a serialized backup of every child or attachment. Expiry purge runs through local App activity and depends on successful processing and, where enabled, Apple sync availability. The detailed deletion scope below applies.
You can revoke any of these permissions at any time in iOS Settings > DebtShield.
DebtShield is not directed to children under 13. The app has no child account or developer-operated record collection. Contact support if a child has sent personal information to us. The app's age rating reflects its intended audience.
Records are stored on your device, and — if you enabled iCloud sync per §5a — replicated to your private iCloud account. You control retention on both. To remove the local container, remove the App; if you used iCloud sync, separately manage the App's data in iCloud (iOS Settings > [Apple ID] > iCloud > Manage Account Storage > DebtShield). We hold no copies on our own infrastructure to delete.
The App does not route records through a developer-operated record server. Apple services, legal-page hosting, support correspondence and any sharing destination you choose may process information outside your country under their own policies. Those services are separate from the App’s local record storage. The app is published in English and is primarily marketed in North America. FDCPA and CFPB references in the app are US federal law.
If we ever change how the app handles data — for example, if a future version adds a developer-operated service — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.
DebtShield's widget displays locally prepared summaries of app records. The app and its widget exchange the relevant summary and preferences through an on-device shared container; this is not a developer-operated record upload. Information displayed by a widget can be visible to people able to view the Home Screen or Lock Screen where it is placed. Use the widget and device display settings to control that visibility. Screenshots and independent copies remain separate from the records you later edit or delete.
Privacy questions: captainlongevity@gmail.com
These DebtShield legal pages are served by Vercel. Opening a page sends ordinary request information, such as IP address, browser information and the requested URL, to the host for delivery and security; see Vercel's Privacy Notice. These pages contain no advertising or analytics scripts. If you email support, we receive the address and information you choose to send to answer your request. Avoid including sensitive records that are not needed for that request.
Moving a debt to Recently Deleted marks that debt for the 30-day recovery window; its calls, letters and third-party contacts remain separately stored and may still be visible. Permanently deleting the debt also removes its matching child records, including children already in Recently Deleted. Expired-record purge runs when the App launches and depends on successful local operations; it is not a remote timer guaranteeing erasure at the exact deadline. With sync enabled, changes propagate according to Apple CloudKit availability. Disabling sync, deleting local records or exporting a PDF/CSV/Markdown file does not erase prior cloud or external copies; those readable exports are not a full-database restore.