Legal
Privacy Policy
Effective date: November 5, 2026 · AppLabs, LLC
AppLabs, LLC (“we”, “us”) makes PromptShield (“the App”), an app that checks files for prompt injection on your device. This policy explains what PromptShield reads, what it stores, and what we receive.
The short version: everything happens on your phone. PromptShield has no account, no ads, no analytics and no tracking, and it never uploads your files or scan results. We receive nothing.
What PromptShield reads, and why
Only the files you choose with your phone's file picker, one at a time, so they can be scanned. PromptShield doesn't ask for access to your storage, photos, contacts or location, and it can't see files you haven't picked.
On Android the file is read through the system file picker and access ends when the scan finishes. On iOS the file is opened in place through the document picker, so iOS doesn't make a copy, and access ends when the scan finishes. The file's contents are held in memory during the scan and released afterwards, or as soon as you cancel.
How scanning works
PromptShield extracts the text in the file — including hidden text, comments, metadata and, with on-device text recognition, text in images — and checks it against a built-in set of rules. Nothing in the file is opened, run or followed: macros, scripts, formulas and links are read as text only.
Text recognition runs on your phone: Google ML Kit's on-device model, which is built into the Android app and never downloaded, and Apple's Vision framework on iOS. ML Kit includes a Google usage-logging component; the Android app has no internet permission, so it cannot send anything, and its background services are removed from the App.
No network access
The Android app does not have Android's internet permission, so it cannot connect to the internet. The iOS app contains no code that connects to the internet. PromptShield has no servers. Scanning works the same in airplane mode.
What PromptShield stores
- Your settings: scan limits, whether history is on, and whether you've seen the introduction notice.
- Scan history, only if you turn on “Save scan history” (off by default): for each scan, the file name, date, risk level and score, coverage status, and the number and types of findings. Short evidence excerpts are kept only if you also turn on “Store evidence snippets” (off by default). The file itself is never stored.
All of this stays in PromptShield's private storage on your phone. On Android, backups and device-to-device transfers are turned off for PromptShield. On iOS, it is included in your device backup like other app data. Turning history off deletes it; Settings → Clear history deletes it; uninstalling PromptShield deletes everything.
Exports and copying
A JSON report is created only when you tap Export, and goes only where you save it. Copying evidence puts it on your clipboard; on Android 13 and later it is marked as sensitive so it isn't shown in clipboard previews. Nothing is shared automatically.
Links
Links in PromptShield to our other apps open the Google Play Store or the App Store, outside PromptShield, under their own privacy policies. Links to Google Play tell Google Play that PromptShield sent the visit; PromptShield itself records nothing.
Crash reports
PromptShield contains no crash-reporting, analytics or advertising code. If you've allowed it in your phone's settings, Google or Apple may share basic crash statistics with us through their developer consoles; these don't identify you or include your files.
Children
PromptShield isn't directed to children under 13. It doesn't collect personal information from anyone, including children.
Your choices
History is off unless you turn it on. You can clear it at any time in Settings, and uninstalling the App removes everything it stored. Because we don't receive any data from PromptShield, there is nothing for us to access, correct or delete on our side. Depending on where you live, you may have other rights over your data; contact us to use them.
Changes
If this policy changes, we'll update it in the App and change the effective date. If PromptShield ever needs to send any data, this policy will say exactly what and why before that happens.
Contact
Questions about this policy: mail@applabs.llc
AppLabs, LLC · Newark, Delaware, USA