Privacy Policy

Effective November 5, 2026 · Applies to the LoanShield app and md5to.com/loanshield

LoanShield is made by MD5TO, a business name of A&M Olivieri LLC ("we", "us"). The short version: the messages and screenshots you check stay on your phone, and we never sell your data.

Your account

To use LoanShield you create a free account with Sign in with Apple, Google or a one-time code sent to your email. We store your email address, your name if you share it, the sign-in method, and whether you agreed to receive scam-alert emails. We do not use passwords. Your sign-in token is stored in your iPhone's Keychain. You can delete your account at any time in Settings › Delete my account, which removes this information from our server.

Messages and screenshots you check

The text you paste and the screenshots you pick are analyzed on your iPhone. Screenshot text is read with Apple's on-device Vision technology. We do not receive, store or see these messages or images. A short preview of your recent checks is saved only on your phone, and you can clear it at any time.

Lender and phone lookups

When you verify a lender, the app sends only the company name you typed to the FDIC BankFind API and the CFPB Consumer Complaint Database, both run by the U.S. government. The phone number check runs on your phone; numbers you mark as scams are saved only on your phone. Links to NMLS, the BBB and other sites open in your browser under their own privacy policies.

Photos permission

LoanShield asks for access only to the screenshot you choose. It does not browse or upload your photo library.

Advertising

The free version shows ads from Google AdMob. We request non-personalized ads. AdMob may collect device information such as your IP address and advertising identifier to show and measure ads, as described in Google's advertising policy. LoanShield Pro removes ads.

Purchases

Subscriptions are processed by Apple. We never see or store your payment card.

Partner links

Some links (for example identity protection or credit tools) are partner or affiliate links. If you sign up, we may earn a commission. Those sites have their own privacy policies.

Security

Our server only accepts encrypted (HTTPS) connections, stores sign-in codes and session tokens as one-way hashes, and keeps IP addresses only as salted hashes for rate limiting.

Children

LoanShield is not directed to children under 13, and we do not knowingly collect information from them.

Changes and contact

If this policy changes, we will update this page and the effective date. Questions: contact@md5to.com.