diff --git a/briar-android/src/main/AndroidManifest.xml b/briar-android/src/main/AndroidManifest.xml
index 3518fe872..96e2cb178 100644
--- a/briar-android/src/main/AndroidManifest.xml
+++ b/briar-android/src/main/AndroidManifest.xml
@@ -40,6 +40,7 @@
 		android:name="org.briarproject.briar.android.BriarApplicationImpl"
 		android:allowBackup="false"
 		android:banner="@mipmap/tv_banner"
+		android:dataExtractionRules="@xml/backup_extraction_rules"
 		android:fullBackupContent="@xml/backup_rules"
 		android:icon="@mipmap/ic_launcher_round"
 		android:label="@string/app_name"
diff --git a/briar-android/src/main/res/xml/backup_extraction_rules.xml b/briar-android/src/main/res/xml/backup_extraction_rules.xml
new file mode 100644
index 000000000..c03286ff8
--- /dev/null
+++ b/briar-android/src/main/res/xml/backup_extraction_rules.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="utf-8"?>
+<data-extraction-rules>
+	<cloud-backup disableIfNoEncryptionCapabilities="true">
+		<!-- docs: https://developer.android.com/guide/topics/data/autobackup#XMLSyntax -->
+		<exclude
+			domain="root"
+			path="." />
+		<!-- the previous entry should exclude things recursively, but we add more just to be sure -->
+		<exclude
+			domain="root"
+			path="app_db" />
+		<exclude
+			domain="root"
+			path="app_key" />
+		<!-- we don't use domain=file (getFilesDir()), but ApplicationInfo#dataDir -->
+		<exclude
+			domain="sharedpref"
+			path="." />
+	</cloud-backup>
+	<device-transfer>
+		<!-- docs: https://developer.android.com/guide/topics/data/autobackup#XMLSyntax -->
+		<exclude
+			domain="root"
+			path="." />
+		<!-- the previous entry should exclude things recursively, but we add more just to be sure -->
+		<exclude
+			domain="root"
+			path="app_db" />
+		<exclude
+			domain="root"
+			path="app_key" />
+		<!-- we don't use domain=file (getFilesDir()), but ApplicationInfo#dataDir -->
+		<exclude
+			domain="sharedpref"
+			path="." />
+	</device-transfer>
+</data-extraction-rules>