Last updated: March 2026
The short version: RoboVeto does not collect, transmit, or share any personal data on either iOS or Android. Your messages stay on your phone. Full stop.
RoboVeto uses fundamentally different approaches on iOS and Android — both achieve the same privacy outcome, but by different technical means.
On iOS, RoboVeto operates as a Message Filter Extension using Apple's IdentityLookup framework. When a message arrives from an unknown sender, Apple's operating system calls RoboVeto's extension with only the body and sender of that one message. The extension checks it against your keyword filters entirely on-device, returns a pass/filter decision, then discards everything.
The extension is a sandboxed process that cannot connect to the internet — Apple enforces this at the OS level. It never reads your existing message history. It only ever sees one incoming message at a time, and only from unknown senders.
Platform limitation: Apple's framework only routes messages from unknown senders to third-party filters. Short codes (5–6 digit numbers) and some international numbers always bypass all third-party filters — this is an iOS platform constraint, not a RoboVeto limitation.
On Android, RoboVeto serves as your default SMS app. As with any SMS app (Google Messages, Samsung Messages, etc.), it necessarily reads your SMS and MMS content to display your inbox, conversations, and message history. The critical distinction is what we do with that access: nothing leaves your device.
All message content is read directly from Android's system SMS content provider and displayed locally. Spam filtering runs on-device against your keyword configuration. No message content, sender information, or usage data is ever transmitted to any server — because we have no servers to send it to.
The app stores your filter settings and preferences in Android's DataStore on your device only. This data is not synced to the cloud and is not backed up by RoboVeto (standard Android backup rules apply to system-level SMS content independently).
Stored in Apple's secure App Group container, protected by iOS file encryption. Shared between the main app and the filter extension. Never transmitted off your device.
Stored in Android DataStore on your device. Your SMS message content itself is stored by Android's system SMS provider — RoboVeto reads it but does not duplicate or transmit it. Never transmitted off your device.
RoboVeto Pro on iOS is an auto-renewable subscription managed entirely by Apple via StoreKit 2. All purchase and billing information is handled by Apple and governed by Apple's privacy policy. We do not receive or store your payment information.
RoboVeto Pro on Android is an auto-renewable subscription managed entirely by Google via Google Play Billing. All purchase and billing information is handled by Google and governed by Google's privacy policy. We do not receive or store your payment information.
RoboVeto for iOS does not request any special permissions beyond what Apple's Message Filter Extension system requires. The filter extension itself has no permissions to read contacts, access location, or use the camera. It operates entirely within Apple's sandboxed framework.
As a default SMS app, RoboVeto for Android requires the standard permissions that any SMS app on Android needs:
These permissions are used solely to provide the messaging experience. None of the data accessed through these permissions is transmitted anywhere.
RoboVeto does not knowingly collect information from children under 13. The iOS app is rated 4+ on the App Store. The Android app is rated Everyone on Google Play.
We may update this policy as the app evolves. The current version is always available at roboveto.app/privacy and within the app.
Questions? Contact us at privacy@roboveto.app.