How AppShield handles information

Website use and the free checker

Optional policy-update signup

If you choose the policy-update signup on the checker page, the form sends your email address, a consent flag, list and signup-source identifiers, and a hidden anti-spam field to an AppShield Cloudflare Worker. Cloudflare also receives ordinary request information such as IP address, browser user-agent, and request time while delivering and securing the endpoint. The Worker stores the subscription record in a D1 database so AppShield can manage the requested updates and prevent abuse.

The signup is optional and separate from purchasing a review. To unsubscribe or ask for removal, email the address below from the subscribed address. The active subscription record is retained until you withdraw consent, request deletion, or the list is discontinued, subject to the provider's normal backup and recovery cycle.

Review requests and correspondence

The request page uses browser JavaScript to assemble the details you enter into request text. It does not post those field values to AppShield or a form provider. The primary action copies the text to your clipboard and asks your browser to open an addressed email; a manual-copy fallback remains on the page. Nothing reaches AppShield until you paste the request, review it, and send it through your own email service.

A request can include your name, reply email, app name, target store, build-access type, approximate flow count, primary locale and role, intended submission date, rejection status, and high-level notes. Gmail processes messages sent to the published AppShield contact address. AppShield uses them to assess fit and availability, answer questions, document the agreed scope, and provide the service.

Payments

Payment is requested only after AppShield accepts a review scope in writing. Stripe processes the hosted checkout and payment credentials. AppShield does not receive or store a full card number, bank login, or wallet credential. Stripe also receives the non-sensitive checkout fields you provide: app name or working title, target store, and approved scope ID. AppShield can receive those fields plus the payer name and email, transaction amount, time, status, payment-provider identifiers, and limited payment-method details made available for receipts, refunds, accounting, fraud prevention, and dispute handling.

Payment-method availability and Stripe's own use of information are governed by the checkout shown to you and Stripe's privacy notice. Do not send payment credentials by email or through a review-materials folder.

Accepted review materials and test access

After scope and payment are confirmed, AppShield may receive a TestFlight invitation, APK or internal-test link, draft listing and screenshots, draft privacy or Data Safety answers, age-rating answers, policies, an SDK and data inventory, prior rejection text, and reviewer notes. If login is required, use one disposable, least-privilege test account populated only with invented test data.

Materials are shared through the restricted folder or platform invitation agreed in the acceptance email. The customer generally controls that storage account and grants access directly to the reviewer. A disposable password must be shared separately through the agreed one-time-secret or password-manager method, never in an email body, folder name, or URL query string.

AppShield uses accepted materials only to perform, document, clarify, and recheck the agreed review. Reports and client materials are not published or used as a public testimonial without separate written permission.

Who processes information

Depending on the action you take, information may be processed by GitHub (site hosting), PostHog (memory-only website analytics), Cloudflare (email-signup endpoint and database), Google Fonts (web-font delivery), Google/Gmail (correspondence), Stripe (payments), and the restricted storage, TestFlight, Google Play testing, or one-time-secret provider agreed for your review. AppShield does not sell personal information or provide it to data brokers. Information may also be disclosed when required by law, to protect the service or others, or in connection with a legitimate business transfer.

These providers may process information in countries different from yours under their own terms and safeguards.

Retention

• Unaccepted review requests: normally deleted within 90 days after the last substantive correspondence.
• Active working copies of builds and review materials: deleted within 7 days after the focused recheck window closes. The recheck window is 7 calendar days after the initial report unless the accepted scope says otherwise.
• Disposable test credentials: removed from AppShield's active access when the review and recheck close. You remain responsible for revoking invitations, links, and credentials.
• Final reports, scope confirmations, and ordinary service correspondence: normally retained for up to 24 months after service completion for continuity and dispute handling, unless earlier deletion is appropriate or longer retention is required. A final report may contain screenshots, excerpts from supplied materials, and reviewer observations; those contents follow the same service-record period.
• Payment, refund, tax, fraud, and accounting records: normally retained for 7 years, or longer when required by applicable law or an active dispute.
• Policy-update subscribers: retained until consent is withdrawn, deletion is requested, or the list is discontinued.

Provider backups, security logs, or records controlled by a customer-owned folder may persist for the provider's normal retention cycle. AppShield deletes or removes active access on the schedule above but cannot erase a provider's independent legal or security records.

Security and data minimization

AppShield limits collection to the accepted scope, separates test credentials from ordinary correspondence, uses restricted sharing, and asks customers to revoke access after the recheck. No transmission or storage system is perfectly secure. Promptly report suspected unauthorized access and rotate any affected credential.

Your choices and questions

You may ask what information AppShield holds about you, request a correction, withdraw policy-update consent, or request deletion. AppShield may need to verify the request and may retain information required for payment, tax, fraud, dispute, or other legal obligations. Privacy rights vary by location, and AppShield will honor applicable rights.

The service is intended for adults acting for an app business or project. Do not submit children's personal information.

Changes to this notice

Material changes will be posted here with a new effective date. The notice in effect when a review is accepted governs that engagement unless a later change is required by law or agreed in writing.