Blockd Privacy Policy
Blockd is a recovery-focused content-blocking app made by EVI Holdings, LLC ("we," "us"). Recovery is personal, so Blockd is built local-first. The most sensitive information you create in the app stays on your device unless this policy says otherwise. This policy covers the Blockd iOS app, the Blockd browser extension and blockdvpn.com. It explains what we collect, what we deliberately don't collect, and the choices you have.
1. Summary (the short version)
- Your recovery data, including streaks, urge logs, journal entries, triggers, relapse history and lesson progress, is stored on your device, not on our servers.
- Blockd filters content using a VPN configuration that runs on your iPhone. Your traffic is not routed through our servers, and we do not log, inspect, store or transmit your browsing history or network traffic.
- If you use the Community or other online features, limited data is processed through Firebase (Google) and Supabase, as described below.
- We do not sell your data. We do not show ads. We do not share your data with data brokers.
2. Information stored only on your device
The following is saved locally on your iPhone, in the app's private storage, and is never uploaded to our servers:
- Recovery start date, streak, and Brain Recovery progress
- Urge logs, including intensity, triggers, feelings, and reflections
- Journal entries and lesson takeaways
- Relapse records
- Lesson and meditation progress
- Onboarding answers, app settings and blocking preferences
Your iOS backup settings (iCloud or computer backups) decide whether this data is included in your device backups. You and Apple control those backups, not us. Deleting the app deletes this local data from your device.
3. Content filtering and the VPN configuration
To block adult content across your whole iPhone, including Safari, other browsers and in-app browsers, Blockd installs a VPN configuration using Apple's Network Extension framework. iOS asks for your permission before installing it and shows a "VPN" indicator while it's active. This is how Apple lets apps filter content system-wide. Here is exactly what it does and doesn't do:
- Filtering decisions happen on your device. When your iPhone looks up a website's domain name, Blockd checks it against a blocklist stored on your device. Blocked domains don't load.
- Allowed lookups go to a public DNS resolver. Domains that aren't blocked are forwarded to a public DNS resolver so the site can load, the same as on any phone. That resolver receives the domain name and your IP address and handles them under its own privacy policy. We don't receive or control those lookups.
- Your traffic is not routed through servers we operate.
- We do not collect, log, store, or transmit your browsing history, the websites you visit, DNS queries, or the contents of your network traffic.
- We do not monitor or record what is blocked or when. Any short-lived lookup cache stays in memory on your device.
- Blockd is not a privacy VPN. It doesn't hide your IP address, anonymize your traffic, or change your location. The configuration exists only to perform the blocking you enable. It isn't used for analytics, advertising, or any other purpose.
You can turn the filter off at any time in the app, or remove the configuration in iOS Settings → General → VPN & Device Management.
App blocking (Screen Time)
If you choose apps to block, Blockd uses Apple's Screen Time APIs. Apple gives Blockd only opaque tokens for your selections, so we can't see which apps you chose, and no usage data is sent to us.
Browser extension
The Blockd extension for Chrome, Edge and Brave blocks sites using the browser's built-in rules, which run locally. It doesn't collect, log or send your browsing history.
4. Information processed through our service providers
Firebase (Google LLC)
If you use online features, we use Google Firebase:
- Authentication. When you use the Community, Firebase Authentication creates an anonymous account identifier (UID) so you can manage your own posts. We do not require your real name or email.
- Community posts. Posts, replies, chat messages, and favorites you submit to the Community are stored in Firebase (Cloud Firestore) so other users can see them. Don't include anything in posts that you don't want others to see.
- Infrastructure data. Firebase may process standard technical data (such as IP address and device identifiers) as part of operating the service. Google's processing is governed by its own terms: firebase.google.com/support/privacy
Supabase
We use Supabase to run backend functions for certain app features. Supabase processes only the identifiers and data those features need, and it doesn't receive your on-device recovery data or browsing activity. Supabase's processing is governed by its own terms: supabase.com/privacy
Apple
Apple processes purchases and subscriptions. We receive only the anonymized transaction information needed to unlock features, such as whether a subscription is active. We never see your payment details.
5. What we do NOT collect
- No browsing history, DNS history, or network traffic contents
- No contacts, photos, or location
- No advertising identifiers; no ad networks or third-party ad SDKs
- No sale or rental of personal information to anyone, ever
6. How we use information
We use the limited information we process only to operate app features you use (such as the Community), maintain security and prevent abuse, process purchases, and comply with law. We may look at aggregate, de-identified statistics, such as the number of Community posts per day, to improve Blockd. We don't use your data for advertising or profiling.
7. Data retention and deletion
- On-device data is kept until you delete it in the app or delete the app.
- Community content is kept until you delete your posts or ask us to delete them. You can delete your own posts in the app.
- Account deletion. You can ask us to delete your Community account and associated data by emailing support@blockdvpn.com. We'll delete it within 30 days, except where the law requires us to keep it.
8. Your rights
Depending on where you live (including the EU/EEA, UK, and California), you may have rights to access, correct, delete, or export personal data we hold, and to object to or restrict certain processing. Nearly all Blockd data lives on your device under your control, so you can exercise most of these rights directly in the app. For anything else, contact us at support@blockdvpn.com. We won't discriminate against you for exercising your rights. We don't "sell" or "share" personal information as the California Consumer Privacy Act defines those terms.
9. Children
Blockd is intended for users 17 and older and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.
10. Security
We use industry-standard protections. These include Apple's on-device data protection for local data, encryption in transit, and Firebase and Supabase security rules that restrict access to online data. For example, only you can delete your own posts. No system is perfectly secure, but because of our local-first design, the most sensitive data never leaves your device.
11. International transfers
Firebase and Supabase may process data on servers in the United States and other countries. Where required, these transfers rely on appropriate safeguards such as standard contractual clauses.
12. Changes to this policy
If we make material changes, we'll update the effective date and notify you in the app. If you keep using Blockd after the changes take effect, you accept the updated policy.
13. Contact
EVI Holdings, LLC
1209 Mtn Rd Pl NE, Albuquerque, NM 87110
Questions or requests: support@blockdvpn.com