Warranty Shield Privacy Policy

Effective:: 17/07/2026
Last updated:: 17/07/2026

1. Who we are

Warranty Shield (the "app", "we", "us", "our") is operated by DealSteals.com Pty Ltd (ACN 153 602 870, ABN 87 153 602 870), trading under the registered business name Warranty Shield. The app is listed on the app stores as Warren AI, and its in-app assistant is named Warren.

We are based in Australia and the app is offered to users in Australia. This policy explains what personal information we collect, how we handle it, and the rights you have. It should be read together with our Terms of Service.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. The short version

We built Warranty Shield around a simple idea: we should hold as little of your information as possible.

Your documents live in your storage, not ours. Your receipts, photos, warranty PDFs and other files are saved to your own Google Drive or Microsoft OneDrive account, and a backup copy is sent to your email. We never store copies of these files on our servers.
We hold only metadata. Things like product names, purchase dates, warranty dates and claim notes are stored in our database so the app can work. No photos. No file contents.
We don't sell your data. Ever.
If we ever shut down, your data stays with you, in your own Drive/OneDrive and your email inbox. See section 13.

The rest of this policy sets this out in full.

3. What information we collect and hold

3.1 Information you give us

Account details: your email address, and an optional backup email address.
Your country (selected at registration), used to determine which consumer-law information applies to you.
Product and warranty records you enter: product name, brand, model, serial number, purchase date, purchase price, category, room, warranty dates, and status.
Claim and fault records you create: text descriptions, dates, amounts, outcomes, reference numbers, fault event logs and related notes.

3.2 Metadata we store on our systems (Supabase)

Our database (hosted with Supabase in the Sydney, Australia region) stores structured metadata only, for example:

Product records, warranty dates, claim and fault history, lemon scores and error-code notes.
File references: the file name and a pointer (file ID and link) to a document in your own Google Drive or OneDrive. The file itself is not stored by us; only the reference to where it lives in your account.
Your subscription/feature status, consent version, and account creation date.
A hashed device identifier used for fraud detection.

We do not store your home address in our database.

3.3 Information stored in your accounts (not ours)

The following are stored in accounts that belong to you and are controlled by you:

Your Google Drive or Microsoft OneDrive: all files, including receipts, product photos, warranty PDFs, manuals, evidence photos/videos, and machine-readable summary files the app organises into a "Warranty Shield" folder.
Your email inbox: a backup copy of each document is emailed to you at upload time, along with periodic ("vault health") summary emails that include a portable backup file of your records.

These accounts are governed by the terms and privacy policies of Google, Microsoft and your email provider, not by us.

3.4 Information processed by our AI assistant (Warren)

When you use an AI feature (such as scanning a receipt, decoding an error code, or asking Warren to draft or polish a claim letter), the relevant content (for example, the text or image you provide) is sent to our AI provider, Anthropic, to generate a response. This is used only to produce the output you requested. See section 7.

3.5 Technical information

Standard technical information needed to run and secure the app, such as app version, general device information, and log data associated with your requests.

4. What we do not collect or hold

To be clear about the boundaries of our system:

We do not store copies of your receipts, photos, warranty documents, bank statements or any file content on our servers.
We do not store your home address.
We do not access your Google Drive or OneDrive beyond the app-specific "Warranty Shield" folder that the app creates. Our access is limited by the permission you grant (a narrow OAuth scope) and can be revoked by you at any time in your Google or Microsoft account settings.
We do not sell your personal information or share it for third-party advertising.

5. How we use your information

We use your information to:

Provide the app's core functions, tracking your products, warranties, claims and faults.
Show you general information about your consumer rights relevant to your country.
Organise your files into your own cloud storage and send email backups.
Generate AI-assisted content (via Warren) that you request.
Send you service messages, reminders (such as upcoming warranty expiries) and vault-health summaries.
Maintain the security and integrity of the app, including fraud prevention.
Comply with our legal obligations.

6. Who we share your information with

We share limited information with a small number of service providers ("subprocessors") only as needed to run the app, such as our database provider, our AI provider, and our email provider. The complete, maintained list of these providers, including what each one handles, where it is based, and links to its own privacy terms, is set out in Appendix A at the end of this policy.

Separately, your documents are stored in your own Google Drive or OneDrive and email accounts, which you control (also covered in Appendix A), and in-app purchases are handled by the Apple App Store or Google Play.

We may also disclose information where required by law, or to protect our rights or the safety of others.

We do not sell your personal information, and we do not share it with insurers or other third parties without a specific consent from you recorded at the time.

7. AI features and Warren

Some features use artificial intelligence (our AI assistant, Warren, powered by Anthropic's Claude models) to help you, for example drafting claim letters, decoding error codes, or reading receipts.

Content you submit to an AI feature is sent to Anthropic to generate the response you asked for.
AI-generated content is a draft, not advice. Every AI output is labelled "Drafted by Warren: review before sending." You should always read and check it before you use or send it.
AI outputs may contain errors and should not be relied on as legal advice. See our Terms of Service for more.

8. Where your data is stored, and overseas disclosure

The metadata we hold is stored with Supabase in the Sydney, Australia region.
Some of our providers are based in, and may process limited data in, the United States. These include Anthropic (AI features), Resend (email delivery), and Microsoft (OneDrive sign-in), and our database provider Supabase is a US-based company even though our data is hosted in Sydney. In-app purchases are handled by Apple and Google, which are also US-based. The full list is in Appendix A.
Where information is disclosed overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including by entering into data processing agreements with these providers.
Files you save to your own Google Drive or OneDrive are stored according to that provider's infrastructure and terms.

9. Data security

We take reasonable steps to protect the information we hold, including:

Row-level security, so each user can only access their own records.
Encryption in transit, secure authentication, and rate limiting on our services.
Data minimisation: because we hold only metadata and no file contents, the impact of any breach of our systems is limited: it could not expose your receipts, photos or documents, because we never hold them.

No system is perfectly secure. If a data breach occurs that is likely to cause serious harm, we will notify affected users and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

10. Data retention

We keep your metadata for as long as your account is active.
When you delete your account, we delete the metadata we hold about you (see section 12), subject to any records we are required to keep by law.
Files in your Drive/OneDrive and your email backups are controlled by you and are not affected by deletion of your Warranty Shield account, and they remain in your accounts until you remove them.

11. Your privacy rights

You can:

Access the personal information we hold about you.
Correct information that is inaccurate.
Export your data at any time from Settings → Export my data (a machine-readable file emailed to you and saved to your Drive).
Delete your account and the metadata we hold (see section 12).
Complain if you think we've mishandled your information (see section 17).

To exercise any of these, contact us using the details in section 17.

12. Account deletion and what survives

You can delete your account from Settings. Deletion runs with a 7-day grace period, after which the metadata we hold about you is removed from our systems.

Deleting your Warranty Shield account does not delete:

The files in your own Google Drive or OneDrive; or
The backup copies in your email inbox.

These remain in your own accounts and under your control. If you want to remove them, you must do so directly in those accounts.

13. What happens if Warranty Shield stops operating

Because of the way the app is built, your data does not depend on us continuing to operate.

If Warranty Shield were ever to shut down (whether due to business closure, sale, or technical reasons):

Your files stay where they already are: in your own Google Drive or OneDrive, already organised in your "Warranty Shield" folder, and in your email backups. Nothing is deleted from your own accounts.
Before any planned shutdown, we would export your metadata (your product, warranty and claim records) to a portable file and email it to your registered address, so you keep a complete, readable record even without the app.
Your email backups are completely independent of both us and your cloud storage provider.

In short: the app is an organiser, not the vault. If the organiser goes away, your vault, your Drive/OneDrive and email, is still yours.

14. Children

Warranty Shield is intended for adults (18 and over) and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will remove it.

15. Third-party services and links

The app connects to third-party services (Google, Microsoft, Anthropic, Apple, Google Play, and your email provider) and may link to external websites such as government consumer-affairs pages. We are not responsible for the privacy practices or content of those third parties. Their terms and privacy policies apply to your use of their services.

16. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you through the app or by email. The "Last updated" date at the top shows when the policy was last revised.

17. Contact us and complaints

For any privacy question or request, or to make a complaint, contact us at:

DealSteals.com Pty Ltd (trading as Warranty Shield) Email: privacy@warrantyshield.com.au

We will respond within a reasonable time. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.

Appendix A: Service Providers and Subprocessors

List last updated: 17/07/2026

This appendix lists the third-party providers we use to run the app. We keep it current: when we add or remove a provider, we update this list and the "List last updated" date above. Because the app stores your documents in your own cloud storage and email rather than on our servers, some providers below are your own accounts that you control, rather than our subprocessors. We have separated these so the distinction is clear.

Subprocessors (process personal information on our behalf)

Supabase, Inc. provides our database, authentication and backend. It handles your account email and the metadata we hold (product, warranty, claim and fault records, file references, feature status, and a hashed device identifier). Our data is hosted in the Sydney, Australia region (AWS ap-southeast-2), though the company is US-based. See Supabase's Privacy Policy and DPA.

Anthropic, PBC powers our AI assistant, Warren (reading receipts, decoding error codes, and drafting and polishing claim letters). It handles only the content you submit to an AI feature, such as a receipt image or text, an error code, or the details you give Warren. Based in the United States. See Anthropic's Privacy Policy and Trust Center.

Resend (Resend, Inc.) delivers our transactional and backup emails. It handles your email address (and optional backup email) and the content of emails we send you, including document backup attachments. Based in the United States. See Resend's Privacy Policy and Subprocessors list.

Microsoft Corporation provides sign-in for OneDrive storage, for users who choose OneDrive. It handles the authentication tokens and identifiers used to connect your OneDrive account. Based in the United States. See Microsoft's Privacy Statement.

Your own storage accounts (you control these, not our subprocessors)

When you save documents, they go into accounts that belong to you. We only place files into the app-specific "Warranty Shield" folder, using a permission you grant and can revoke at any time.

Google Drive (Google LLC) and Microsoft OneDrive (Microsoft Corporation) hold your files: receipts, photos, warranty PDFs, manuals, evidence, and summary files. OneDrive is an alternative to Google Drive.

Your email provider holds your backup copies: a backup copy of each document, plus periodic summary emails.

App distribution and payments

These providers distribute the app and process purchases as independent parties. We do not receive or store your full card details.

Apple Inc. distributes the app and processes in-app purchases on iOS through the App Store. Based in the United States (the Australian contracting entity is expected to be Apple Pty Limited, to be confirmed). See Apple's Privacy Policy.

Google (Google LLC) distributes the app and processes in-app purchases on Android through Google Play. Based in the United States. See Google's Privacy Policy.

Underlying infrastructure

Some of our providers use their own subprocessors (fourth parties) to deliver their services, such as cloud hosting and email-sending infrastructure including Amazon Web Services. We do not separately list every downstream vendor; you can see their current lists on the pages linked above, in particular Supabase's DPA and Resend's subprocessors page.