DebtShield Privacy Policy

Effective date: 2026-05-05 · Last updated: 2026-05-05

Short version: DebtShield stores all of your collection-call records, photos, letters, third-party-contact entries, debt details, and validation tracking only on your device. We have no servers and no analytics. We never see your records. The only network communication the app performs is with Apple's StoreKit servers to verify your subscription status.

1. Who we are

DebtShield is published by an independent iOS developer (Apple Developer Team ID ZM8LF8494F). For any privacy-related question, write to captainlongevity@gmail.com.

2. Information we do not collect

We do not collect, transmit, store on a server, sell, share, or analyze:

Your collection-call entries, conversation summaries, exact quotes, caller identities, voicemail summaries, or screenshots
Your debt records, original creditors, current collectors, account numbers, balances, dispute reasons, or status flags
Your validation requests, cease-and-desist letters, or letter photos
Your third-party contact log entries (family, employer, neighbor)
Your name, email, phone, or any account identifier
Device identifiers (IDFA, IDFV) for advertising or tracking purposes
Location data
Crash reports or analytics events sent to any third party

3. Information stored on your device

All data you enter is stored locally on your iOS device using Apple's SwiftData framework. This data is included in your iCloud or iTunes device backup if you have device backup enabled. We do not have access to your device backups; only Apple does, under their published privacy terms.

4. On-device processing

Several features process data locally on your device only:

FDCPA violation analysis and 7-in-7 harassment monitor are computed locally from your call log. No call data is transmitted to any server.
CFPB and attorney evidence PDFs are generated on-device using PDFKit. No log content is transmitted during PDF generation, and we cannot intercept the resulting file.
App Lock uses Apple's LocalAuthentication framework. Your Face ID or Touch ID biometric data never leaves Apple's Secure Enclave; the app only receives a success or failure signal.
Validation deadline reminders are scheduled via Apple's UserNotifications framework and fire locally on your device. No remote push servers are involved.

5. Subscriptions and StoreKit

DebtShield offers an optional Pro subscription via Apple's StoreKit 2. When you subscribe, restore a purchase, or when the app verifies your entitlement, your device communicates directly with Apple's servers. DebtShield receives only the entitlement status (active or inactive) and a purchase identifier. We do not see your Apple ID, payment method, billing address, or transaction history. Apple's handling of subscription information is governed by Apple's Privacy Policy.

5a. iCloud sync (optional, OFF by default)

If you enable iCloud sync — disabled by default; opt-in via the onboarding sync-choice screen or Settings > Sync — DebtShield uses Apple's CloudKit framework to replicate your records to your private iCloud account. We have no access to this data. Apple's CloudKit private database is encrypted at rest and accessible only to you via your Apple ID. Apple may produce iCloud-stored content in response to valid legal process; this is the trade-off the onboarding screen describes in plain English.

To stop syncing, toggle the switch off in Settings > Sync; existing records remain on your device but no further changes are uploaded. Records already in iCloud can be removed by deleting the app's data from iCloud Drive (iOS Settings > Apple ID > iCloud > Manage > DebtShield).

Records you delete inside the app go to a 30-day "Recently Deleted" recovery window before being permanently removed (across all your synced devices, when sync is on).

6. Permissions the app requests

Photo Library — only when you tap "Add photo" on a call log entry or letter record (e.g., to attach a caller-ID screenshot).
Face ID — only after you enable App Lock in Settings (Pro).
Notifications — only after you enable validation deadline reminders (Pro).

You can revoke any of these permissions at any time in iOS Settings > DebtShield.

7. Children's privacy

DebtShield is not directed to children under 13. We do not knowingly collect any information from anyone, including children. The app's age rating reflects this.

8. Data retention and deletion

Records are stored on your device, and — if you enabled iCloud sync per §5a — replicated to your private iCloud account. You control retention on both. To remove everything: (a) delete the app from your device; and (b) if you used iCloud sync, remove the app's data from iCloud (iOS Settings > [Apple ID] > iCloud > Manage Account Storage > DebtShield). We hold no copies on our own infrastructure to delete.

9. International users

The app does not transfer your data internationally because it does not transfer your data anywhere. The app is published in English and is primarily marketed in North America. FDCPA and CFPB references in the app are US federal law.

10. Changes to this policy

If we ever change how the app handles data — for example, if a future version adds an opt-in cloud backup feature — we will update this policy and surface the change in the app before you can use that feature. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact

Privacy questions: captainlongevity@gmail.com