Ok Marcos, I'm going to brainstorm here, because it is clear that this is a challenge which requires some form of workaround.
Here is a workaround which requires server programing as well:
1. Pass secure encrypted data via the normal B4X API methods. Make sure your app and the server have a common key.
2. The server reads the data and produces a one-time token relevant to that data.
3. Your app reads the token. eg: ghreu69sfh
4. You access your website with just the one time token as a parameter:
http://www.yourwebsite.com/?tk=ghreu69sfh This is done via the external webbrowser intent.
5. Your server reads the token and returns the appropriate page or info.
6. Your server blocks the token.
Perhaps this approach may be of assistance.