Privacy Policy

Fortify Labs — CleanBrowse, Faithful Guard, Covenant Shield, Taqwa Guard
Last updated: March 27, 2026

Overview

Fortify Labs ("we", "us", "our") builds content filtering apps designed to help users block adult websites on their Android devices. This privacy policy explains what data we collect, how we use it, and your rights.

We believe in privacy by design. Our apps filter content locally on your device. We do not monitor, log, or transmit your browsing activity.

What Data We Collect

• Account information: Email address and display name, used for authentication and account management. Stored in Google Firebase.
• Accountability partner email: If you choose to add an accountability partner, we store their email address to send automated notifications. This is entirely opt-in.
• Subscription status: We store whether your subscription is active, canceled, or expired, along with the associated Google Play purchase token for validation.
• App status signals: VPN enabled/disabled state and a periodic heartbeat timestamp. These are used solely to trigger accountability partner notifications if you have opted in.

What Data We Do NOT Collect

• We do not log, store, or transmit any browsing history, DNS queries, or website visit data.
• We do not collect device identifiers, advertising IDs, or location data.
• We do not collect contacts, photos, files, or any data outside the app.
• We do not use any third-party analytics or tracking SDKs beyond Firebase Analytics (anonymous app usage events such as app opens and crashes).

How DNS Filtering Works

Our apps use a local VPN service to intercept DNS requests on your device. When you visit a website, the app checks the domain against a blocklist stored locally on your phone. If the domain is on the blocklist, the request is blocked locally. If it is not, the request is forwarded to a public DNS resolver (Cloudflare 1.1.1.1 or Google 8.8.8.8). At no point does your browsing data pass through our servers.

Accountability Partner Notifications

If you opt in to the accountability partner feature, the following events may trigger an automated email to your designated partner:

• You disable the VPN protection (if you opted in to this notification)
• You uninstall the app or the app fails to send a heartbeat for 48 hours (if you opted in)
• You cancel your subscription

These notifications contain only the event type and your display name. They do not contain any browsing data or website information.

Data Storage and Security

Account data is stored in Google Firebase (Firestore and Authentication), hosted on Google Cloud infrastructure. All data is encrypted in transit via TLS. Firebase infrastructure provides encryption at rest.

Data Retention and Deletion

You can delete your account and all associated data at any time. Deletion is immediate and permanent — your account, profile, accountability partner settings, subscription records, and all related data will be removed from our systems.

Delete your account here

For any other questions, contact us at hello@browsingdefender.com.

Third-Party Services

• Google Firebase: Authentication, database, analytics, cloud functions. Firebase Privacy Policy
• Google Play Billing: Subscription management. Google Privacy Policy
• SendGrid: Sends accountability partner notification emails. SendGrid Privacy Policy

Children's Privacy

Our apps are not directed at children under 18. We do not knowingly collect personal information from anyone under 18 years of age.

Changes to This Policy

We may update this privacy policy from time to time. We will notify users of material changes via the app or email. The "last updated" date at the top reflects the most recent revision.

Contact Us

If you have questions about this privacy policy or your data, contact us at:
hello@browsingdefender.com