Sheeldy — Privacy Policy
iOS application. Last updated: 5 October 2026.
In one sentence: without an account, nothing leaves your iPhone. With a Sheeldy account, only what you choose to report is sent, at the moment you confirm it.
What the app does
Sheeldy hands iOS a list of numbers reserved for telemarketing in the country chosen in the app: in France, the ranges that the regulator (Arcep) reserves for automated calls; in Spain, the 400 numbering that the CNMC assigns to commercial calls; in Italy, where no such range exists yet, only numbers reported by users and checked by Sheeldy. iOS refuses those calls itself, on your phone, without consulting anyone. Commercial SMS filtering works the same way, on the device.
What the app never reads
- Your contacts.
- Your call log.
- The content of your messages: the filtering extension classifies messages on the device and transmits nothing; the reporting extension only looks at the sender, never the message.
- Your location, your advertising identifiers.
What travels over the network
| When | What is sent | What comes back |
|---|---|---|
| List update (all users) | Nothing: no identifier, no data | The signed list |
| Free account creation or sign-in by code (optional, on your action) | Your email address and the app language; then the six-digit code received by email | A code by email, then a token |
| Sign-in by password (Sheeldy service clients, optional) | E-mail address and password, once | A token, your first name |
| Access check (signed-in accounts) | Client ID and token, in a header | Yes or no, a reason |
| Reporting a number (signed-in accounts, on your action) | The number, the type (call or SMS), your optional 140-character note, your client ID | A tier of the number of reporters |
| "Doubt about an email?" (signed-in accounts, on your action, after a consent screen) | The screenshots you chose or the photos of the screen you took, one to five, downscaled and stripped of metadata, your client ID | A two-value verdict and the signs noticed |
| "Doubt about a letter?" (signed-in accounts, on your action, after a consent screen) | The photos of the letter you took or chose, one to five, downscaled and stripped of metadata, your client ID | A two-value verdict and the signs noticed |
The free account
Blocking and filtering need no account. To report a number or have an email, a letter or a conversation checked, the app offers a free account: you enter your email address, receive a six-digit code valid for ten minutes, and the account is created when you type it in. No password, no other information asked. Sheeldy keeps your email address, the creation date and the app language, to recognise you and send you your codes; codes are stored hashed and erased after use. Your address is used for no commercial mailing without your consent and is never shared. You can delete your account at any time from the app (Help, account and information): the address, the reports and the usage history are erased immediately. If the same address becomes a client of the Sheeldy service, the same account is used, under the service's terms.
Checking a suspicious email
For signed-in accounts only (free account or Sheeldy customer). Your screenshots, or the photos you take of an email shown on a computer (the app asks for no access to your photo library and saves nothing to it), leave for Sheeldy only when you tap "Analyze", after seeing what is sent. They are passed, for analysis, to an artificial-intelligence provider, Anthropic PBC (United States), a processor under the GDPR, on the basis of your consent at each sending; the transfer is governed by standard contractual clauses, the provider does not use this data to train its models, and its retention there is time-limited by its commercial terms. Neither Sheeldy nor the app keeps the screenshots, the text or the result: they vanish as soon as you close the screen. Sheeldy only records the time, your identifier, the verdict, the number of screenshots, the usage and the cost of the analysis, to cap the number of analyses per day, and deletes those rows after 90 days. An email screenshot often contains a third party's data (the sender): you remain responsible for it, as for any transmission on your part.
A pseudonymised per-IP-address counter is used only to limit abuse, for the duration of the limiting window; no user agent is logged. No data is sold. Apart from the processor named above, no data is shared with third parties.
Checking a suspicious paper letter
For signed-in accounts only (free account or Sheeldy customer). You photograph the letter with the app's camera, or choose an existing photo; the app asks for no access to your photo library and saves nothing to it. The photos leave for Sheeldy only when you tap "Analyze", after seeing what is sent, and are passed for analysis to the same processor and under the same conditions as for an email (above). A letter carries your name and postal address: the consent screen reminds you of it, and neither Sheeldy nor the app keeps the photos, the text read or the result. Sheeldy only records the time, your identifier, the type of check, the verdict, the number of photos, the usage and the cost, to cap the number of analyses per day, and deletes those rows after 90 days. The result is an aid to decision, never a certainty: when in doubt, contact the organization through a number you already know, never the one printed on the letter.
Checking a conversation ("Romance scams")
For signed-in accounts only (free account or Sheeldy customer). The questions asked in the app before any analysis (met online, money requested, photo seen elsewhere…) stay on your iPhone and are never sent. The text you paste or the screenshots you choose leave for Sheeldy only when you tap "Analyze", after seeing what is sent. They also contain another person's messages: they are passed, for analysis, to the same processor and under the same conditions as above, and are kept neither by Sheeldy nor by the app. The result spots the methods used by scammers; it says nothing about a person's sincerity and does not replace the advice of someone you trust or of the competent services.
Checking a photo (signed-in accounts, at your explicit request): the photo you choose is passed to Sheeldy, then to Google LLC (United States), a processor under the GDPR, for a reverse image search on the web (Google Cloud Vision, comparable to Google Lens), on the basis of your consent at each sending and under standard contractual clauses. The only question asked is whether the same image exists elsewhere on the web and under which label: no facial recognition is performed, no biometric data is created. Google does not keep the image and does not use it to train its models (Google Cloud terms); Sheeldy does not keep it either. You only receive summarised information (label, number of identical images, site names), never links.
What is kept
- On your iPhone: your settings, the numbers you block manually, the signed list, the history of your own reports. The session token lives in the keychain, encrypted, and is never copied into a backup.
- At Sheeldy (accounts only): your email address, the account creation date and the app language; the numbers you reported, with the optional note, for the time of the review; and, for email, letter and conversation checks, the date, the type of check, the verdict, the number of screenshots or photos and the cost, never the content, for 90 days. All of it is deleted with your account.
Reports
A report never blocks anything automatically. It is reviewed by a person at Sheeldy before any inclusion in the list. A reported number is associated with no name.
Your rights
Access, rectification, erasure: from your Sheeldy dashboard, or by writing to contact@sheeldy.com. Deleting your account erases your reports. The Sheeldy terms of use apply: terms of use.