Frequently Asked Questions

No access to personal communications or media. The app uses Android's Accessibility Service to detect screen patterns like tab labels and button IDs, not content itself. No permissions requested for contacts, SMS, calls, camera, or file storage.

No. Android prevents this at OS level by masking password fields. The app's code checks for specific view IDs and URLs only, with strict text-length filters applied.

NOT Collected: Screen content/text, Screenshots/recordings, Messages/communications, Passwords/form data, Photos/contacts/call logs, Browsing history/URLs, GPS location, Financial data, Tap coordinates/keystrokes. IS Collected: App usage statistics, Installed apps list, Permission status, DNS filtering settings, Feature usage events, Crash reports, Email & name (account only), Subscription status, Country (via IP, once).

Device-only: Screen analysis (memory only, discarded immediately), blocking statistics, feature toggles, pause data. Server storage: App usage stats, installed apps, permission status, DNS settings, account info — all via encrypted HTTPS.

Zero screen content transmission. Detection of Shorts, Reels, blocked sites, and keywords happens entirely in device memory. Results are simple 'block/allow' decisions; actual text/UI data never transmitted.

No storage or transmission of browsing history. URL checking against blocklist occurs instantly in phone memory; if no match, URL is immediately discarded.

No VPN used. Safe Internet configures DNS settings to point to Kahf Guard's DNS servers. DNS filtering affects domain lookups only; actual traffic goes directly from device to websites.

No recording of tap coordinates, gestures, or text. Accessibility Service API doesn't provide touch data. Analytics records only named events like 'user enabled a feature,' not interactions.

App usage data: 28 days, then automatically deleted. Account data: retained while account active. Crash reports: 90 days for debugging. Deletion: immediate upon account removal.

Only API allowing detection of currently displayed screen content, essential for blocking specific features (Shorts, Reels, blocked websites) rather than entire apps. Same API used by screen readers, password managers, and Google Assistant.

Provides structural 'table of contents' of screen — text labels, element IDs, content descriptions. Cannot see images, videos, or visual content. Checks for specific view IDs and URLs in real time, then discards data immediately.

No. Accessibility Service API cannot provide pixel data, screenshots, or recordings. Screen capture requires MediaProjection API with explicit user confirmation. Kahf Guard doesn't use MediaProjection.

No. All analysis processed in memory and immediately discarded. App checks whether condition is met, then discards data. Nothing written to disk or sent to servers.

No. Only monitors specific apps when their features are enabled: social media (YouTube, Instagram, Facebook, Telegram, WhatsApp), 17 supported browsers, and system apps (Settings, Play Store). Unmonitored app events dropped instantly.

Yes, via Settings > Accessibility > Kahf Guard. Disables content-blocking features but app continues for prayer times. Parents can disable remotely or generate emergency codes.

OS-level automatic masking of password fields. Apps marking input as password field causes Android to return empty/masked text to any accessibility service. No app can override this protection.

No. Accessibility Service API limitation across all services. Provides text labels and element IDs only — structural information, not pixel/visual data.

No, for two reasons: Banking apps use FLAG_SECURE OS-level protection blocking accessibility services from reading content. Kahf Guard only monitors its blocking-list apps — banking apps never included.

Cannot access: images/videos/visual content, network traffic, files/storage, camera/microphone, GPS location, contacts/SMS/call logs, password fields (OS-masked), FLAG_SECURE app content.

Listens for limited events solely for protection continuity: boot completion, power state changes — used to check if Accessibility Service is running and restart if needed. Does not monitor calls, SMS, location changes, Wi-Fi, Bluetooth, or app installs.

Accessibility Service: Detect/block content (Shorts, Reels, blocked apps/sites, harmful keywords) — accesses UI labels/structure of monitored apps only. Display Over Other Apps: Show block overlay with Islamic message — no additional access. App Usage Stats: Track app duration for time limits and parental monitoring — app names/duration only. See All Apps: List installed apps for blocking selection — app names/package IDs only. Internet Access: Sync account, restrictions, usage data — nothing on device. Start on Boot: Restart protection after reboot — only triggers restart. Notifications: Alert on blocks and active protection — only sends notifications. Battery Optimization Exemption: Prevent forced service sleep — prevents forced sleep only.

Yes, all permissions revokable anytime via Settings. Revocation disables dependent feature (e.g., revoking Accessibility Service disables content blocking). App notifies if critical permission is missing.

Android kills all background services on restart. Without auto-restart, content blocking would silently stop — allowing bypass via restart. Boot process restarts protection service, reschedules prayer times, restores notifications.

Android's built-in backup saves app preferences to Google Cloud. Kahf Guard backup includes only feature settings and device identifier — no screen content, messages, browsing history, app usage data, or personal content. Encrypted by Google through account.

18 blocking features across six categories: Content features: YouTube Shorts, Instagram Reels, Facebook Reels, Telegram Search, WhatsApp Status. Apps: YouTube, Instagram, Facebook, Telegram, WhatsApp (individual toggles plus custom apps). Group blocking: Social Media group with 17 apps (Facebook, Instagram, Twitter, TikTok, Snapchat, Reddit, Pinterest, Discord, others). Websites: Custom domains across 17 browsers. Harmful content: Risky word blocker for adult/gambling terms. System protection: DNS change prevention, uninstall prevention, emergency pause disabling.

YouTube: Detects Shorts player open (view ID check) — cannot see video content, comments, subscriptions, watch history. Instagram: Detects Reels section active (view ID check) — cannot see photos, DMs, stories, follows, explore content. Facebook: Detects Reels/video section active (content descriptions) — cannot see posts, messages, friends, groups, marketplace. Telegram: Detects Search bar open (input field check) — cannot see messages, channels, contacts, files. WhatsApp: Detects Status tab active (tab label check) — cannot see messages, calls, contacts, media.

Reads currently visible browser URL and checks against personal blocklist in real-time device memory. Match triggers navigation away; non-match results in immediate URL discard — never stored, logged, or transmitted. Works across 17 browsers including Chrome, Firefox, Edge, Brave.

Scans visible social media/browser text for curated explicit adult and gambling terms. Match triggers navigation away. Scanned text processed in memory and immediately discarded — never stored or transmitted.

Three simultaneous actions: (1) Navigation via Back/Home button; (2) Full-screen overlay with inspirational Islamic message for ~8 seconds; (3) Haptic feedback vibration.

Yes, if Emergency Pause is enabled. Pause all blocking for a set duration from the main screen; blocking resumes automatically at expiration. Parents can disable Emergency Pause entirely.

Always Block (constant), Time Limit (X minutes daily then blocked), Schedule (blocked during specific hours), Allowed (explicitly permit within group block).

Parent sets up 'Family' on their device, links child's device, then remotely configures all blocking settings (app blocks, website blocks, content filters, screen time limits, schedules) from their phone. Changes push to child's device in real-time.

Can see: app usage statistics (which apps, duration by hour/day), installed apps list, active permissions, current restriction settings. Cannot see: messages, photos, browsing history, screen content, call logs, personal communications.

Parent changes setting → saved to servers → Firebase Cloud Messaging push notification sent to child's device → device fetches updated settings → applies immediately (typically seconds).

Yes. From parent's app, request immediate app usage data and installed apps list sync. Triggers push notification to child's device, which uploads latest data. Parent's app then refreshes.

Protections include: uninstall prevention, DNS change prevention, emergency pause disabling, settings redirect. Determined users may find workarounds (factory reset). No software is 100% bypass-proof; designed to require significant effort.

Adults share app usage statistics with a trusted person (spouse, friend, mentor) without granting control. Partner sees usage data and receives alerts but cannot change settings. Designed for voluntary adult accountability.

All app-to-server data uses encrypted HTTPS connections (TLS). Data cannot be intercepted or read on the network between device and servers.

It is a powerful permission requiring careful use. Kahf Guard uses it responsibly: processes events only from a specific monitored app list, applies strict filters, processes all data in memory without disk writing, never transmits screen content to servers.

No. No remote access, remote control, or remote viewing. Parental control is limited to configuration changes (apps/websites to block) — cannot view screen, read messages, control device, or access personal content.

No backdoors, hidden data collection, or undisclosed functionality. Everything is documented in this FAQ. Full transparency: collected data disclosed, third-party services documented, required permissions explained.

PostHog (own servers): receives feature usage events, device ID, email after login — does NOT receive screen content, messages, browsing history. Firebase Analytics (Google): receives usage events, server user ID — does NOT receive screen content (email/name limited). Firebase Crashlytics (Google): receives crash logs, server user ID — does NOT receive email, name, screen content. Facebook SDK (Meta): receives install events, subscription status — does NOT receive screen content (email/name limited).

PostHog is a product analytics tool on Kahf's own servers. Records named events ('user enabled feature') to understand usage and improve features. No screen recording — session replay explicitly disabled. No typed text recorded or transmitted.

Facebook advertising reaches people needing content protection. SDK measures ad effectiveness. SDK receives: install/open events, subscription status, random Google advertising ID. Screen content, messages, and app activity are never shared with Facebook.

(1) Firebase Analytics — records usage events. (2) Firebase Crashlytics — sends crash reports (error type, device model, OS version), not personal data. (3) Firebase Cloud Messaging — Google's standard push notification service for notifying child devices of parent setting changes.

Public IP lookup services used solely for country detection (prayer times, language selection). Only country name saved locally. IP not stored. Single lookup with local caching.

No session recording, screen replay, or interaction tracking tool. PostHog session replay explicitly disabled. Analytics records only named events, not screen interactions.

Delete via in-app settings: More/Settings > 'Delete Account.' Removes account and all server-associated data immediately.

Device disconnects from account. Local settings (enabled features) remain on device; app stops server syncing. Child devices disconnect from parent management until re-login.

Data export not currently available in the app. Request a copy via support@kahf.co for readable format provision.

Right to access, correct, export, and delete personal data at any time. Exercise via in-app settings or support@kahf.co. Full legal policy: Privacy Policy at /privacy-policy/.

Designed for minimal battery impact. App processes accessibility events from a specific monitored app list only — no continuous background scans. When no monitored app is active, service is essentially idle. Battery impact comparable to other always-on services like notification listeners.

No. Content detection logic is highly optimized — each check takes microseconds. No heavy computation, network requests, or disk operations during normal use.

Android battery optimization can kill background services. If Kahf Guard is killed, content blocking stops silently. Disabling optimization ensures continuous protection — same reason Google Family Link and security apps request exemption.

Android requires foreground services to display a persistent notification. This indicates active protection and prevents background service termination. Minimize via notification settings if distracting.

Free Features: Safe Internet (DNS filtering), Basic app blocking (limited), Prayer time auto-silent, App usage statistics, Basic website blocking. Premium Features: Parental Control (remote management), Unlimited app/website blocking, Reels/Shorts/Channels blocking, Auto-silent during Salah (advanced), Unlimited device sync, All upcoming premium features.

Personal Pack — individuals, all premium features, 1 child device sync, monthly billing. Family Pack — families, all premium features, unlimited device sync, monthly billing. Yearly Pack — annual payment, all premium features, 1 child device sync, best value.

Free plan for financially unable users. Full premium feature access at no cost. Apply via subscription screen: 'I cannot afford it. Help me.' Digital safety accessible regardless of financial situation.

Yes, anytime. Google Play > Subscriptions > Kahf Guard > Cancel; or contact support@kahf.co. Premium access retained through current billing period; no next-cycle charges.

Google Play (credit/debit cards, Google Pay, linked payment methods); bKash (Bangladesh users). Additional regional methods possible — check the app subscription screen for options.