Privacy policy
Escudo ยท Updated July 19, 2026
What Escudo does with your messages
The SMS filter runs entirely inside your iPhone, using Apple's filtering technology. When an SMS arrives from a number that is not in your contacts, iOS shows it to the Escudo extension on your own device. The extension classifies it right there and replies whether it goes to the Junk folder. The message content is never sent to any server, ours or anyone else's. Apple also technically prevents this kind of extension from reaching the internet.
What data the app collects
None. The app has no accounts, asks for no name, email, number or contacts, and includes no analytics or third party advertising.
What the app stores on your phone
- Local activity counters (messages checked and set aside) to show you on the main screen.
- The updated detection rules the app downloads from our server. The download sends none of your data. It is a read only, digitally signed download.
All of this lives only on your device and is removed when you delete the app.
Voluntary fraud reports
If you choose to use "Report a scam" and tap send, the app sends the text you pasted, to improve detection for everyone. You can optionally add the number that sent the scam, to help block calls from that number on other phones. No identifier of yours is sent. Any email addresses in the text are removed automatically before it is stored. It is the only Escudo feature that sends content off your phone and it only happens when you decide.
Subscription verification
To deliver the updated Familiar rules, the app sends our server the Apple signed receipt for your subscription. That receipt proves the subscription is active and contains no personal data. We do not store it.
Website waitlist
If you left your email on escudoapp.com to hear about the launch, we store only that email and use it only for that. You can ask us to delete it by writing to [email protected].
Changes to this policy
If the app ever changes what it does with data, this page will say so first and clearly. The core promise does not change: your messages are yours.