Privacy Policy for AboShield

Last updated: 17 October 2026 · applies to AboShield on Android, iOS/iPadOS and Windows

1. Controller

2. Summary

AboShield works without an account and without a cloud. Your subscriptions, contracts, logins, notes and documents are stored encrypted on your device only.
The developer has no access to this data. There is no server it is sent to.
On Android and iOS the app shows ads from Google AdMob; Google processes data as described below. Content from your vault is never transmitted.

3. Data on your device

Everything you enter (subscriptions, prices, deadlines, cancellations, logins, passwords, notes, documents, sender details) is stored in an encrypted database on your device. The key is derived from your master password with Argon2id; passwords, notes and documents are additionally encrypted individually (XChaCha20-Poly1305). The master password is never stored and cannot be recovered by anyone.

Only a few device settings (e.g. auto-lock time, ad frequency counters) and – if you use them – the short texts for the home screen widget and the Live Activity are stored unencrypted outside the vault. In the default “Discreet” mode these contain only dates and counts, no provider names or amounts.

Android auto backup and device transfer are disabled for vault data. Moving to another device is only possible with a backup you create yourself, encrypted with a separate backup password; you decide where that file is stored or shared.

4. Biometrics

Biometric checks are performed solely by the operating system. AboShield does not receive or store biometric data, only the result of the check; a random key is kept in the device’s protected key store (Keychain or Android Keystore).

5. Reminders

Reminders are scheduled locally on the device. No push services or servers are used.

6. Logo detection (can be turned off)

If you enter a provider’s website, AboShield can load its public logo directly from that website via HTTPS. The provider learns your IP address and the technical request; no subscription, account or login data is sent. You can turn this off in Settings.

7. Advertising with Google AdMob (Android and iOS only)

AboShield shows banners on overview pages and occasionally a video ad (e.g. after saving a subscription or at start after unlocking). The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google may process in particular: IP address, device and app information (device type, operating system, language), advertising ID (Android) or device identifiers, interactions with ads and diagnostic data. Vault content, your subscriptions or logins are not sent to Google; AboShield passes no keywords, content or interests.

Consent: On first start after setup, AboShield asks via Google’s consent solution (UMP) whether personalised ads may be shown (Art. 6(1)(a) GDPR). Without consent, non-personalised or limited ads are served. You can change or withdraw your choice at any time under Settings → Ad settings. On iOS AboShield does not ask for permission to track across apps, so the advertising identifier (IDFA) is not used.

Google may transfer data to countries outside the EU (in particular the USA) based on the EU-US Data Privacy Framework and standard contractual clauses. More: policies.google.com/privacy, policies.google.com/technologies/ads.

8. App stores

When you download via the App Store or Google Play, these providers process data under their own responsibility and privacy policies.

9. No analytics by the developer

AboShield contains no analytics or statistics services of the developer, no crash reporting to the developer and no accounts.

10. Deletion

Under Settings → Privacy → Delete all local data you remove all data from your device. Uninstalling the app also deletes the app data.

11. Your rights

You have the right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent (Art. 15–21 and Art. 7(3) GDPR). As the developer stores no personal data about you, requests regarding advertising should be addressed to Google. You may also lodge a complaint with a data protection authority.

12. Children

AboShield is not directed at children under 16.

13. Changes

This policy is updated when the app changes. The version published here applies.