Privacy Policy

Blockd (“we,” “us,” or “our”) operates the Blockd mobile application (“the App”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. If you have any questions, contact us at hello@blockd.app.

Information We Collect

Account Information

When you sign in with Apple, Google, or create a guest account, we collect basic authentication identifiers (such as your name and email address) through our authentication provider, Supabase. Guest accounts do not require personal information.

Device Information

We collect device identifiers (IDFV), APNs push notification tokens, and your device’s connection status to provide real-time accountability monitoring.

Profile Information

You may optionally set a display name and select a pixel avatar. Your unique accountability code is generated to allow partners to connect with you.

DNS & Filtering Data

The App installs a local VPN configuration that routes DNS queries to our filtering server (AdGuard Home). Queries are processed in real time to enforce your blocklist and are not copied into our application database. Our DNS server retains a short-lived query log used only for the in-app “Discover domains” feature, which lets you tap an app and surface which domains it connects to so you can choose what to block. The log is consulted on demand at your request, and the results returned to your device are filtered to domain summaries. Your custom blocklist rules, blocked services, schedules, and filter settings are stored on our servers so they sync across your devices.

Protection Events

When protection turns on, turns off, or is disabled (and why, e.g. user-initiated, network loss, sleep), we record the event and share it with your accountability partners. This is the core of the accountability feature you opted into.

Partner Messages

Partners can leave short notes on protection alerts. These messages are stored alongside the alert and visible to the protected user and the message sender.

Subscription Data

Subscription status is managed by RevenueCat. We do not directly handle payment information—all payments are processed by Apple through the App Store.

How We Use Your Information

• To provide DNS-based content filtering across your device
• To enable accountability partnerships and real-time protection monitoring
• To send push notifications when protection status changes or blocklist rules are modified
• To manage your subscription and account
• To respond to support requests

VPN & Network Data

Blockd uses a local VPN tunnel (NEPacketTunnelProvider) to intercept and forward DNS queries to our AdGuard Home filtering server. Only DNS traffic is routed through this tunnel—your regular internet traffic (web browsing, app data, etc.) passes through normally and is not intercepted, monitored, or stored by Blockd. A persistent WebSocket connection is maintained to monitor protection status in real time.

Third-Party Services

We use the following third-party services to operate the App. Each service processes data in accordance with its own privacy policy.

• Supabase — Authentication, database, and real-time subscriptions
• AdGuard Home — DNS content filtering and query logging
• RevenueCat — Subscription management
• Apple Sign-In — Authentication
• Google Sign-In — Authentication

Consent & Your Control

Before you sign in, the App shows an explicit consent screen that lists every category of data we collect and how it is used. You must accept it for the App to function. We record the consent version and timestamp against your account so we can re-prompt you if our practices materially change.

You can delete your account at any time from Settings > Account > Delete Account in the App. See “Your Rights & Data Deletion” below for what that removes.

Data Retention

• Account data, blocklist rules, partner connections, and alert history are retained while your account is active and deleted when you delete your account.
• DNS queries are processed in real time and not copied into our application database. Our DNS server keeps a short-lived query log used only for the in-app “Discover domains” feature.
• We do not sell or share your data with advertisers, and we do not request or track your location.

Your Rights & Data Deletion

You can delete your account at any time from Settings > Account > Delete Account in the App. Account deletion:

• Permanently removes your user profile, devices, partnerships, alerts, partner messages, blocklist rules, blocked services, schedules, and notification preferences from our servers
• Removes your client record from our DNS filtering server so queries are no longer routed for your devices
• Removes the VPN profile from your device
• Notifies your accountability partners that the partnership has ended
• Local data can be fully removed by uninstalling the App
• Does not cancel any active App Store subscription — Apple requires you to cancel via Settings > Apple ID > Subscriptions on your device

Children’s Privacy

We do not knowingly collect personal information from children under the age of 13. If you believe we have collected such information, please contact us so we can promptly remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date.