ShieldStep Limited — Registered in Kenya (Company No: PVT-A71MBLRO)
The Short Version: ShieldStep Pro is built on a strict privacy-first architecture. We never read your private text messages, we never access your mobile money balance or transaction history, and we never share your personal data. All mindful redirections and digital recovery support happen 100% locally on your device.
ShieldStep Limited ("the Company", "we", "our", or "us") is committed to protecting your privacy. The only data transmitted to our secure operational servers consists of basic administrative parameters:
We use your data strictly to maintain, authenticate, and administer your account profile. Your phone number is utilized solely to verify active wellness states. We never sell, distribute, rent, or lease your profile details to third-party marketing networks or analytics brokers.
ShieldStep Pro operates on a strict Privacy-First, Data-Isolated Architecture. All screen scanning, string token comparisons, and mindful redirections happen completely locally on your device.
Unlike traditional apps, ShieldStep Pro explicitly rejects remote surveillance infrastructures. We do not collect, view, read, or upload your private messages, personal bank balances, PINs, mobile money transaction histories, or generic browser activities. All validation loops occur entirely within the temporary, volatile memory of your local Android device and are never transmitted to our remote servers.
To implement mindful behavioral guardrails and support addiction recovery, the App utilizes specialized system configurations:
5.1 Android Accessibility Service API: Used to ephemerally provide guardrails for interaction prompts on recognized platforms in real-time. All information processed is handled strictly in volatile memory, never written to disk, and never transmitted over the internet.
5.2 System Overlay Permission (SYSTEM_ALERT_WINDOW): Allows ShieldStep Pro to display a 15-minute reflection screen over restricted platforms. No keystrokes or background interactions are recorded.
When you initiate an application deactivation from within the ShieldStep Pro interface, a mandatory 24-hour reflection countdown window begins. Upon expiration of the 24-hour timer, your remote status is updated to inactive, system configurations are released, and standard uninstallation capabilities are fully restored.
Under the Kenyan Data Protection Act (2019), you have the right to access details of personal data, request correction or deletion, object to processing, and lodge complaints with the Office of the Data Protection Commissioner (ODPC). Contact us at admin@shieldstep.co.ke.
We may update this Privacy Policy from time to time. Material changes will be communicated via in-app notifications at least 14 days before taking effect.
ShieldStep Limited is registered in the Republic of Kenya (Company No: PVT-A71MBLRO) and complies with Data Controller registration requirements under the Office of the Data Protection Commissioner (ODPC).
Email: admin@shieldstep.co.ke
The Short Version: ShieldStep Junior is built on a strict privacy-first architecture to protect children and teenagers. We never view or upload private chat messages, photos, passwords, or personal browsing history. All content filtering, app blocking, and trigger mitigations occur 100% locally on the child's device.
ShieldStep Limited ("ShieldStep Junior", "we", "our", or "us") is committed to protecting the privacy of parents, guardians, and children. The only data transmitted to our secure operational servers consists of basic administrative parameters:
We use registration data strictly to administer the parental protection profile and authenticate subscription status. Contact details are never sold, rented, leased, or shared with third-party marketing networks or data brokers.
ShieldStep Junior is intended for use by minors under the direct supervision and consent of a parent or legal guardian. In full compliance with the Kenyan Data Protection Act (2019) regarding the processing of data of children:
ShieldStep Junior operates on a strict Privacy-First, Data-Isolated Architecture. All screen parsing, app package comparisons, and content filtering happen completely localized on the child's device within volatile memory.
We explicitly reject remote surveillance of minors. We do not collect, view, read, or upload:
To enforce protective digital boundaries and prevent unauthorized bypass or uninstallation by minors, ShieldStep Junior utilizes sensitive system hooks authorized by the parent/guardian:
6.1 Android Accessibility Service API (BIND_ACCESSIBILITY_SERVICE): Used in real-time to detect blacklisted app launches, explicit web content, unauthorized in-app purchase triggers, and STK/mobile wallet prompts. Monitors system nodes inside Settings to prevent unauthorized force-stopping or deletion without parent PIN authentication. All node data remains strictly in volatile memory.
6.2 System Overlay Permission (SYSTEM_ALERT_WINDOW): Displays a protective block screen over restricted applications or content, redirecting the minor back to a safe screen. No background interactions or keystrokes are recorded.
To ensure minors cannot disable protection without parental knowledge, deactivation and uninstallation require parent/guardian authentication (via parent PIN, linked admin account verification, or a mandatory security countdown window). Once authorized by the parent/guardian, system hooks are released and uninstallation capabilities are restored.
Under the Kenyan Data Protection Act (2019), parents and legal guardians have the right to access account details, request correction or deletion, withdraw consent, and lodge inquiries with the ODPC. Contact us at admin@shieldstep.co.ke.
ShieldStep Limited is registered in the Republic of Kenya (Company No: PVT-A71MBLRO) and complies with Data Controller registration requirements under the Office of the Data Protection Commissioner (ODPC).
Email: admin@shieldstep.co.ke