1. Who we are and what this policy covers
BlockP never sees, stores or sells the content you view. Blocking decisions are made on your device; we keep only the small amount of data needed to run your account, sync your settings, process payments and understand how the app is used.
This Privacy Policy explains what BlockP collects, why, and what control you have. It applies to the BlockP apps for Android, iOS, macOS and Windows, the BlockP Chrome extension, the website blockp.io and its subdomains, and BlockP support and email communications (together, the Service).
The Service is operated by Nova Focus Private Limited, a company incorporated in India with its office in Bengaluru, together with its affiliate NovaFocus LLC (United States) ("BlockP", "we", "us"). Nova Focus Private Limited is the data controller ("data fiduciary" under India's Digital Personal Data Protection Act, 2023) for personal data processed through the Service.
Summary
- We do not collect your browsing history, the websites or apps you open, screen content, screenshots, messages, photos or files.
- Content detection runs on your device. Any screen or URL analysis used to block content happens locally and is discarded immediately.
- We do store: your account email, your synced BlockP settings and blocklist, contact emails you give us for protection features, purchase records, and app analytics.
- We never sell your personal data and never use it for third-party advertising profiles.
- You can delete your account and associated data at any time.
2. Data we collect
We collect only the categories below. If a category is not listed here, we do not collect it.
| Category | What it includes | Why we need it |
|---|---|---|
| Account data | Email address, name (if you provide it), sign-in provider (Google, Apple or email), and a random user ID | To create your account, sign you in and restore your settings on new devices |
| Synced settings | Your blocklist and allowlist entries (websites, keywords and app categories you add), schedules, app limits, protection mode, and device name and type | To apply the same protection across all your devices |
| Protection-feature data | Accountability partner email, the email and wait time you choose for time-delayed unlock codes, the mascot name you pick, one-time codes, and your app-lock PIN | To send unlock codes and alerts, and to help you recover access if you are locked out |
| Purchase data | Product purchased, price, currency, country, purchase and renewal dates, transaction or order ID, and subscription status | To grant premium access, handle refunds, prevent fraud and meet tax law |
| Analytics data | App events (for example, screens opened, features turned on, errors), device model, operating system, app version, language, and approximate country derived from IP address | To fix bugs, measure feature use and improve BlockP |
| Support data | Emails and attachments you send us, including screenshots you choose to share | To answer your request |
| Marketing preferences | Whether you receive product-update emails | To send product news, and to stop when you opt out |
Account data
- What it includes
- Email address, name (if you provide it), sign-in provider (Google, Apple or email), and a random user ID
- Why we need it
- To create your account, sign you in and restore your settings on new devices
Synced settings
- What it includes
- Your blocklist and allowlist entries (websites, keywords and app categories you add), schedules, app limits, protection mode, and device name and type
- Why we need it
- To apply the same protection across all your devices
Protection-feature data
- What it includes
- Accountability partner email, the email and wait time you choose for time-delayed unlock codes, the mascot name you pick, one-time codes, and your app-lock PIN
- Why we need it
- To send unlock codes and alerts, and to help you recover access if you are locked out
Purchase data
- What it includes
- Product purchased, price, currency, country, purchase and renewal dates, transaction or order ID, and subscription status
- Why we need it
- To grant premium access, handle refunds, prevent fraud and meet tax law
Analytics data
- What it includes
- App events (for example, screens opened, features turned on, errors), device model, operating system, app version, language, and approximate country derived from IP address
- Why we need it
- To fix bugs, measure feature use and improve BlockP
Support data
- What it includes
- Emails and attachments you send us, including screenshots you choose to share
- Why we need it
- To answer your request
Marketing preferences
- What it includes
- Whether you receive product-update emails
- Why we need it
- To send product news, and to stop when you opt out
Payment details
We never receive or store your full card number, bank details or wallet credentials. Purchases in the iOS and macOS App Store apps are processed by Apple. Purchases in the Android app are processed by Google Play. Purchases on our website, Windows, macOS direct download or Chrome extension are processed by Stripe. These providers may share with us a limited billing record (such as your name, email, country, card brand and last four digits) solely to identify your purchase.
Data we never collect
- Browsing history, search history or the URLs you visit
- Screen content, screenshots, video or images from your device
- The names or content of blocked websites or apps you encounter
- Keystrokes, messages, contacts, photos, files, microphone or camera data
- Precise location
- Health or biometric data
Data about other people
If you add an accountability partner, you give us that person's email address. You confirm you have their permission. We use their email only to send verification codes, unlock codes and protection alerts (for example, an uninstall alert) that you have set up. We never add them to marketing lists. They can ask us to delete their email at any time, which will switch off the related protection feature on your account.
3. Device permissions and on-device processing
BlockP needs powerful permissions to block content, but it uses them only on your device. Nothing these permissions can see is sent to our servers. You can revoke any permission in your device settings; some blocking features will then stop working.
| Platform | Permission | What BlockP does with it |
|---|---|---|
| Android | Accessibility Service | Reads the text and structure of the screen and, where needed, takes a screen capture to detect adult content with an on-device model, then closes or covers it. Captures are analysed in memory and discarded immediately. |
| Android | VPN Service | Creates a local VPN on your device so domain lookups (DNS) can be filtered. Your web traffic is not routed through BlockP servers. |
| Android | Device Admin, Usage Access, Display over other apps | Prevents uninstall when you enable it, detects which app is open, and shows the block screen. |
| iOS | Screen Time (Family Controls), content filter / DNS settings | Applies Apple's system-level restrictions. Apple does not share the apps or sites you use with BlockP. |
| iOS | Device management profile (optional) | Applies filtering and uninstall protection when you install the BlockP profile. It does not give us access to your data, messages or location. |
| iOS | Motion (pedometer) | Counts steps only for the walk-to-disable feature, on device. |
| macOS | Screen Recording, Accessibility, Full Disk Access, browser Automation | Reads the current browser URL and window content to detect and block content; tracks per-app usage time locally. |
| Windows | UI Automation | Reads the address bar of supported browsers locally to block matching sites. |
| Chrome | Tabs, declarativeNetRequest, proxy | Checks page addresses against your blocklist and blocks matches inside the browser. |
Android
- Permission
- Accessibility Service
- What BlockP does with it
- Reads the text and structure of the screen and, where needed, takes a screen capture to detect adult content with an on-device model, then closes or covers it. Captures are analysed in memory and discarded immediately.
Android
- Permission
- VPN Service
- What BlockP does with it
- Creates a local VPN on your device so domain lookups (DNS) can be filtered. Your web traffic is not routed through BlockP servers.
Android
- Permission
- Device Admin, Usage Access, Display over other apps
- What BlockP does with it
- Prevents uninstall when you enable it, detects which app is open, and shows the block screen.
iOS
- Permission
- Screen Time (Family Controls), content filter / DNS settings
- What BlockP does with it
- Applies Apple's system-level restrictions. Apple does not share the apps or sites you use with BlockP.
iOS
- Permission
- Device management profile (optional)
- What BlockP does with it
- Applies filtering and uninstall protection when you install the BlockP profile. It does not give us access to your data, messages or location.
iOS
- Permission
- Motion (pedometer)
- What BlockP does with it
- Counts steps only for the walk-to-disable feature, on device.
macOS
- Permission
- Screen Recording, Accessibility, Full Disk Access, browser Automation
- What BlockP does with it
- Reads the current browser URL and window content to detect and block content; tracks per-app usage time locally.
Windows
- Permission
- UI Automation
- What BlockP does with it
- Reads the address bar of supported browsers locally to block matching sites.
Chrome
- Permission
- Tabs, declarativeNetRequest, proxy
- What BlockP does with it
- Checks page addresses against your blocklist and blocks matches inside the browser.
DNS filtering
When DNS filtering is on, the domain names your device looks up are sent to a filtering DNS resolver, which answers "blocked" for adult or blocklisted domains. The resolver is operated either by BlockP or by a third-party filtering provider (currently CleanBrowsing). BlockP does not log or store the domains you look up. Third-party resolvers process lookups under their own privacy policies.
Detection models
Our content-detection models are downloaded to and run on your device. We may update these models from our servers; the download does not send any of your content to us.
4. How we use, share and keep data
We use personal data only to run the Service, and share it only with providers that help us do that.
How we use data, and our legal bases
- To provide the Service (account, sync, protection features, premium access): performance of our contract with you.
- To process payments, refunds and meet tax and accounting law: legal obligation and contract.
- To measure usage, fix bugs and prevent fraud or abuse: our legitimate interest in a reliable, secure product.
- To answer support requests: contract and legitimate interest.
- To send product updates: your consent or our legitimate interest, as local law requires. You can opt out using the link in every email.
We do not use your data for automated decisions that have legal or similarly significant effects on you.
Who we share data with
We share data only with the service providers below, under contracts that limit their use of it to providing services to us.
| Provider | Purpose | Data involved |
|---|---|---|
| Google Firebase / Google Cloud | Sign-in, database, cloud functions | Account, synced settings, protection-feature data |
| Apple App Store | iOS and macOS in-app purchases, Sign in with Apple | Purchase data, account data |
| Google Play | Android in-app purchases | Purchase data |
| Stripe | Website and desktop purchases | Purchase and billing data |
| Mixpanel (EU data residency), PostHog | Product analytics | Analytics data |
| Zoho ZeptoMail | Sending account, unlock-code and product emails | Email address, email content |
| Google Workspace and Google Gemini | Receiving support email and drafting replies | Support data |
| Cloudflare, DigitalOcean | Hosting, content delivery, DNS filtering and device-management servers | Technical data such as IP address |
| CleanBrowsing | Third-party DNS filtering | Domain lookups (see Section 3) |
Google Firebase / Google Cloud
- Purpose
- Sign-in, database, cloud functions
- Data involved
- Account, synced settings, protection-feature data
Apple App Store
- Purpose
- iOS and macOS in-app purchases, Sign in with Apple
- Data involved
- Purchase data, account data
Google Play
- Purpose
- Android in-app purchases
- Data involved
- Purchase data
Stripe
- Purpose
- Website and desktop purchases
- Data involved
- Purchase and billing data
Mixpanel (EU data residency), PostHog
- Purpose
- Product analytics
- Data involved
- Analytics data
Zoho ZeptoMail
- Purpose
- Sending account, unlock-code and product emails
- Data involved
- Email address, email content
Google Workspace and Google Gemini
- Purpose
- Receiving support email and drafting replies
- Data involved
- Support data
Cloudflare, DigitalOcean
- Purpose
- Hosting, content delivery, DNS filtering and device-management servers
- Data involved
- Technical data such as IP address
CleanBrowsing
- Purpose
- Third-party DNS filtering
- Data involved
- Domain lookups (see Section 3)
We may also disclose data (a) when required by law, court order or a valid government request; (b) to protect the rights, safety or property of BlockP, our users or the public; or (c) to a buyer or successor in a merger, acquisition or sale of assets, who must honour this Policy.
We do not sell or rent personal data, and we do not "share" it for cross-context behavioural advertising as defined under California law.
How long we keep data
| Data | Retention |
|---|---|
| Account data, synced settings, protection-feature data | Until you delete your account; removed from live systems within 30 days and from backups within 90 days |
| Accountability partner email | Until you remove the partner, the partner asks us to delete it, or you delete your account |
| One-time and unlock codes | Minutes to 24 hours, then invalidated; request records are removed with your account |
| Purchase data | For as long as tax and accounting law requires (up to 8 years), even after account deletion |
| Analytics data | Up to 24 months, then deleted or anonymised |
| Support emails | Up to 24 months after the conversation ends |
Account data, synced settings, protection-feature data
- Retention
- Until you delete your account; removed from live systems within 30 days and from backups within 90 days
Accountability partner email
- Retention
- Until you remove the partner, the partner asks us to delete it, or you delete your account
One-time and unlock codes
- Retention
- Minutes to 24 hours, then invalidated; request records are removed with your account
Purchase data
- Retention
- For as long as tax and accounting law requires (up to 8 years), even after account deletion
Analytics data
- Retention
- Up to 24 months, then deleted or anonymised
Support emails
- Retention
- Up to 24 months after the conversation ends
International transfers
We are based in India, and our providers store data in the United States, the European Union and other countries. When we transfer personal data out of your country, we rely on the safeguards your law requires, such as the European Commission's Standard Contractual Clauses.
5. Your rights and choices
You can access, correct, export or delete your data at any time, wherever you live.
Your rights
Depending on your location (including under India's DPDP Act, the EU and UK GDPR, and US state laws such as the CCPA), you may have the right to:
- Access the personal data we hold about you and get a copy in a portable format
- Correct inaccurate data
- Delete your data (subject to the purchase records we must keep by law)
- Withdraw consent or object to processing based on legitimate interest
- Restrict processing in certain cases
- Nominate another person to exercise your rights if you die or become incapacitated (India)
- Not be discriminated against for exercising these rights
- Complain to your data protection authority
How to exercise them
- Delete your account: use Delete account in the app settings, or email us from your registered email address.
- Opt out of analytics: use the analytics toggle in app settings where available, or email us.
- Stop marketing emails: use the unsubscribe link in any email.
- Anything else: email privacy@blockp.io from your registered email address.
We will verify your identity before acting and respond within 30 days (or sooner if your law requires). Deleting your account does not cancel an App Store or Google Play subscription; cancel it through Apple or Google first (see Terms, Section 9).
Children
BlockP is intended for users aged 18 and over. Users under 18 may use BlockP only with the consent and supervision of a parent or legal guardian, who agrees to this Policy on their behalf. We do not knowingly collect data from children under 13 (or the minimum age in their country) without verifiable parental consent. If you believe a child has given us data without that consent, contact us and we will delete it.
Security
We protect data with encryption in transit (TLS), encrypted storage at our cloud providers, access restricted to staff who need it, and access logging. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
Changes to this Policy
We may update this Policy at any time. We will post the new version on this page with a new "Last updated" date. If a change materially affects how we use your data, we will also notify you in the app or by email at least 7 days before it takes effect, and ask for your consent where the law requires it.
Contact and Grievance Officer
Nova Focus Private Limited, Bengaluru, Karnataka, India. Email: privacy@blockp.io