TemptShield Privacy Policy

Effective date: 26 August 2026

TemptShield ("the app") is a self-control app for Android that adds a short pause before you open apps you have flagged as tempting. It is built on one principle — friction, not surveillance — and it works fully offline.

The short version

• We do not collect any personal data.
• We do not transmit any data off your device. There are no servers to transmit it to.
• We do not use analytics, tracking or advertising SDKs.
• Everything the app knows lives in local storage on your device and is deleted when you uninstall it.

Because of what this app is for, that matters more than usual: the list of apps someone chooses to put friction on is sensitive information. The design answer here is not to protect it well, but never to have it.

Data the app stores — on your device only

• Your list of flagged apps — the apps you chose to add a pause to.
• Pause statistics — how often the pause appeared and whether you closed the app or opened it anyway, today and over time, plus per-app totals.
• Settings — your countdown length, your "Open anyway" pass length, and whether onboarding has been completed.

None of this leaves the device. Android's auto-backup is deliberately disabled for the app, so this data is not uploaded to your Google account either. A reinstall starts back at zero.

Permissions and why the app needs them

Usage access (PACKAGE_USAGE_STATS) — prominent disclosure. TemptShield uses Android's Usage Access permission for exactly one purpose: to detect which app has come to the foreground, so the pause can appear when you open an app you flagged. The check runs on your device in real time. TemptShield never records what you do inside any app — no browsing history, no URLs, no message contents, no screen contents, no keystrokes — and nothing beyond the aggregate pause counts described above is stored anywhere. You grant this permission explicitly in system settings and can revoke it there at any time.

Display over other apps. Used solely to draw the pause screen on top of a flagged app.

Notifications and foreground service. The app runs a foreground service so the pause keeps working when the app itself is closed; Android requires a visible notification for this.

Run at startup. Restores that service after your device reboots.

Installed-app list (package visibility). Used only to show you the picker where you choose which apps to flag. The list is read on the device and is never stored or transmitted.

Optional content filtering (Private DNS)

TemptShield can guide you to Android's system Private DNS setting and suggests Cloudflare Family (family.cloudflare-dns.com) as the resolver, which filters adult content for the whole device. If you turn that on:

• Your device's DNS queries are resolved by Cloudflare, not by TemptShield. The app never sees, handles, routes or logs your network traffic. It reads only whether the Private DNS setting is currently active, so it can show you the status indicator.
• Cloudflare's handling of those queries is governed by Cloudflare's privacy policy and their 1.1.1.1 for Families commitments.

The setting lives in Android's own settings and is entirely under your control.

Data sharing and third parties

We do not share, sell, rent or disclose any data to third parties, because none ever reaches us. The app contains no third-party analytics, advertising or tracking SDKs.

Children

TemptShield is a self-control tool for a general audience. It does not knowingly collect personal information from anyone, including children — it does not collect personal information at all.

Data retention and deletion

All data is local. To delete it, uninstall the app: the flagged app list, the statistics and the settings go with it and do not survive a reinstall. There is no account to delete, because there is no account.

Security

The data the app keeps is held inside Android's application sandbox, and sensitive values are stored with Android Keystore-backed encrypted storage.

Changes to this policy

If the app's data practices change, this policy will be updated and the date above revised. Because the app is offline by design, we expect that to be rare.

Contact

Questions about this policy: mnhmilu.app@gmail.com.