Privacy Policy
Last updated: September 6, 2026
This policy explains what Shieldova collects, why, who we share it with, and how you delete it. It covers the Shieldova mobile app and this website. Shieldova is operated from the United States.
1. Information you give us
- Account information — your email address, and a display name if you set one. Passwords are handled by our authentication provider and are never visible to us.
- Evidence you submit — screenshots, photographs, PDFs, pasted text, and descriptions you type. This is the material you ask Shieldova to analyze, and it can include bills, statements, insurance correspondence, and messages you received.
- Case details — the company or issuer involved, amounts, dates, deadlines, and notes attached to a case.
Sensitive information. If you submit a medical bill, an explanation of benefits, or a claim denial, that document will contain health-related information. Shieldova is not a healthcare provider, health plan, or clearinghouse, and is not a HIPAA covered entity or business associate. Submit only what you want analyzed, and redact anything you would rather not share.
2. Information collected automatically
- Subscription status — whether you have an active subscription, its product identifier, renewal state, and expiry, received from our payments provider.
- Usage counters — the number of analyses you have run in the current month, used to enforce free-tier limits.
- Device push token — if you grant notification permission, so we can send deadline reminders.
- Server logs — standard request logs and error diagnostics generated by our hosting provider.
Shieldova does not embed third-party advertising or analytics SDKs, does not track you across other apps or websites, and does not sell or share your personal information for cross-context behavioral advertising.
3. How we use your information
- To analyze the evidence you submit and produce a case assessment.
- To generate the outputs you request — dispute letters, call scripts, and checklists.
- To track your cases, tasks, and deadlines, and to send reminders you enable.
- To operate your account, enforce plan limits, and process subscriptions.
- To secure the service, investigate abuse, and comply with legal obligations.
We do not use your submitted documents to train AI models, and our AI provider is contractually instructed not to retain them (see below).
4. Service providers we share with
We share personal information only with the providers needed to run Shieldova. We do not sell your personal information.
| Provider | What it receives | Purpose |
|---|---|---|
| Supabase | Account data, cases, uploaded files | Database, authentication, and file storage (United States) |
| OpenAI | The text and documents you submit for analysis | AI analysis and output generation. Requests are sent with retention disabled, and the content is not used to train models. |
| RevenueCat | A pseudonymous account identifier and purchase events | Subscription management |
| Apple / Google | Purchase and billing details | Payment processing. Shieldova never receives your card number. |
| Apple APNs / Google FCM | Device push token and notification content | Delivering reminders you have enabled |
We may also disclose information if required by law, or to protect the rights, safety, and security of Shieldova and its users.
5. How long we keep it
Your account data, cases, and uploaded files are retained until you delete them or delete your account. Shieldova does not automatically purge old cases, because a case can stay relevant for years — you remain in control of when it is removed.
Deleting your account removes your uploaded files from storage and permanently deletes your account and all associated records — profile, cases, evidence, outputs, tasks, reminders, and device tokens. Deletion is immediate and cannot be undone. Backups and provider-side logs may persist for a limited period before expiring.
6. Your choices and rights
Depending on where you live, you may have the right to access, correct, delete, or obtain a copy of your personal information, and to be free from discrimination for exercising those rights. You can exercise the core rights directly in the app:
- Delete your account and data — Settings → Delete Account, or use the account deletion request page.
- Delete individual cases and evidence — from the case itself.
- Turn off reminders — Settings → Notification Preferences, or in your device settings.
For access, correction, or portability requests, contact us using the details below. We will verify your request against your account email before acting on it.
7. Children
Shieldova is intended for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will delete it.
8. Security
Uploaded files are stored in a private bucket that is not publicly readable, and database access is restricted per-user at the row level. See our security page for detail. No system is perfectly secure, and we cannot guarantee absolute security.
9. Changes to this policy
If we make a material change, we will update the date above and notify you in the app before the change takes effect where required.
10. Contact us
Questions or privacy requests: support@shieldova.com.