Your privacy

What stays on your device

The sensitive parts of your tenancy never leave your phone in readable form:

What we don't do

• We don't sell your personal information.
• We don't read your evidence, letters, or notes — they're stored locally.
• We don't require an account to start using core features.
• We don't use your private content to train models.

Personal-information protection

Before any non-encrypted data could ever leave your device, Renter Shield redacts personal details such as email addresses, phone numbers, and identifiers. The design goal is simple: the protective record of your tenancy belongs to you, and stays with you.

Emergency resources are always reachable

You never have to accept any terms or share any data to reach help. Crisis resources, legal-aid directories, and the 211 line are always available. Call 211 · in a crisis, call or text 988, find free legal aid at lawhelp.org, or call 911 in an emergency.

When you contact us or join our list

Almost everything about Renter Shield is local-first, but a few things do reach us, and we want them stated plainly:

• Email you give us on purpose. If you enter your address in a signup form on this site, or request account deletion, that address is emailed to hello@rentershield.app so a person can act on it. We use it only to reply, to send the updates you asked for, or to process your deletion request. We do not sell it, rent it, or share it for advertising. Reply to any email to be removed from the list.
• Your email address, if you give it to us in the app. Setup asks for an email so you can restore your information if you lose your phone. You can skip that step. If you enter one, we receive the address, and — so we can tell you which rules apply — your state and ZIP code. Nothing else from the app is sent with it: not your lease, not your evidence, not your letters, not your notes. We use it to reach you about your account and your plan. We do not sell it, rent it, or share it for advertising.
• Your account and purchases. Signing in is optional; you need it only to buy a plan or restore one. You sign in with your email through Clerk, our sign-in provider, and we keep a user ID for your account. If you buy in the iPhone app, Apple takes the payment and tells our server the transaction and subscription status so your plan can switch on. If you buy on the web, Stripe takes the payment and we receive the same kind of status. We never see your card number.
• What you type into Guardian chat. Chat is optional. When you ask a question, it goes to our server with the state you selected and any lease facts you typed into the app (never the lease document itself). We automatically remove email addresses, phone numbers, street addresses and Social Security–style numbers, then send the question to xAI (the company behind Grok) to write the answer; if xAI is unavailable, OpenAI answers instead. Names are not removed (a letter needs your landlord’s name), so leave out anything you would rather not share. Both companies’ developer terms say this data is not used to train their models. They may keep requests for up to about 30 days to watch for misuse of their service; we do not control that window. Your ZIP code is not sent to them, and your evidence, photos, letters and notes are never sent. We keep a usage count for your plan’s limit and the redacted request only as long as billing needs it — not a transcript of your chat. Every emergency resource, deadline and rights page works without chat.
• Nothing else from the form. The signup does not read your saved data, evidence, letters, or notes. Those never leave your device.
• Web fonts. This site no longer loads fonts from Google or any other font service, so no font provider learns that you visited.

Deletion requests are handled as promptly as we can and never require you to pay, subscribe, or explain why. One honest limitation: deleting inside the app erases everything on that device immediately, but it does not yet reach an email address you already sent us. To have that removed too, use the deletion page or email us, and we will remove it by hand.

Deleting your account and data

You can delete your account and data at any time — see Delete my account & data. Because your record lives on your device, most deletion happens instantly and locally; anything server-side (such as an encrypted sync blob, if you enabled sync) is removed when you ask. Deleting your data never removes your access to the free emergency resources.

Contact

Privacy questions: privacy@rentershield.app · General support: hello@rentershield.app or the support page.

Your use of Renter Shield is also subject to our Terms of Service.