Privacy First

Privacy Policy for DNSGuard

Package: com.dnsguard.app • Last Updated: October 2, 2026 • Effective Date: October 2, 2026

1. Information We Do NOT Collect

Your privacy and digital anonymity are our highest priorities. Specifically:

• No Personal Identifiable Information (PII): We do not ask for or collect names, email addresses, phone numbers, or account details.
• No User Account or Registration: You can use all features of the App immediately without creating an account or logging in.
• No Browsing History or Query Logs: We do not log, retain, or transmit domain names, websites visited, or search queries to any developer server.
• No Persistent Identifiers or Fingerprints: We do not track or store your Advertising ID (AAID), IMEI, MAC address, or hardware identifiers.
• No Third-Party Analytics or Ads: The App contains no advertising networks (e.g. AdMob) and no telemetry or tracking SDKs (e.g. Firebase Analytics, Meta SDK).

2. Information Processed Locally on Your Device

DNSGuard requires local data processing to function as a high-performance encrypted resolver:

• DNS Lookups: When activated, local DNS requests (port 53) are processed locally by the native engine (rust-dns-core) and securely transmitted via DNS-over-HTTPS. They are never written to disk or recorded by our team.
• In-Memory LRU Cache: To enhance speed and battery efficiency, recent DNS responses are cached in volatile device memory (RAM) with a 60-second Time-To-Live (TTL). This cache is destroyed when the application or service terminates.
• Real-Time Performance Counters: Ephemeral metrics (such as total query count, cache hit rate, and average latency in ms) are computed in device memory to display statistics on your dashboard. They are never transmitted off the device.

3. Android VpnService Disclosure

In full compliance with Google Play Developer Policies regarding the VpnService API:

• DNS-Only Split Tunneling: DNSGuard routes only traffic destined for the local virtual DNS address (10.255.0.2/32 and fd00::2/128).
• No Interception of General Web Traffic: All your normal internet traffic—including web pages, video streams, messaging, downloads, and app communications—bypasses the VPN entirely and flows through your standard network interfaces.
• No Intermediary Proxy or VPN Servers: We do not operate VPN servers or proxy servers through which your traffic passes. Encrypted DNS queries travel directly between your device and upstream resolvers.

4. Upstream DNS Resolvers

Encrypted queries (via DNS-over-HTTPS) are sent directly to respected public DNS providers that uphold strict privacy standards:

• Cloudflare DNS (cloudflare-dns.com / 1.1.1.1) — Privacy Policy
• Google Public DNS (dns.google / 8.8.8.8) — Privacy Policy
• Quad9 (dns.quad9.net / 9.9.9.9) — Privacy Policy
• System DNS Fallback: Used only as an emergency failover if encrypted upstream connectivity is unreachable, preserving your active internet connection.

5. Android Permissions Explained

Permission	Purpose
BIND_VPN_SERVICE	Creates the local split-tunnel interface to capture and encrypt DNS requests.
INTERNET	Transmits encrypted DNS-over-HTTPS packets to upstream DNS resolvers.
ACCESS_NETWORK_STATE CHANGE_NETWORK_STATE	Detects network transitions (e.g., Wi-Fi to Mobile Data) for seamless socket recovery.
FOREGROUND_SERVICE	Maintains the continuous DNS protection engine in the background.
POST_NOTIFICATIONS	Displays the system-mandated notification showing active protection and quick toggles.
RECEIVE_BOOT_COMPLETED	Allows the app to automatically reactivate protection when the device boots up (if enabled).

6. Security

All communication with upstream DNS resolvers is secured with modern Transport Layer Security (TLS 1.2 / TLS 1.3) with standard root certificate verification via rustls, shielding your lookups from ISP tracking, eavesdropping, and man-in-the-middle attacks.

7. Children's Privacy (COPPA)

DNSGuard does not knowingly collect or solicit any personal data from anyone under the age of 13. Since the app collects no personal data from any user, it is fully compliant with COPPA and global child privacy regulations.

8. User Rights (GDPR & CCPA/CPRA)

Under international privacy regulations (such as GDPR and CCPA), individuals hold rights regarding personal data access, deletion, and portability. Because DNSGuard neither collects, stores, nor transmits any personal user data, there is no personal data to view, export, or delete.

9. Policy Updates

We may update this Privacy Policy from time to time. Any revisions will be reflected on this page with an updated effective date.

10. Contact Information

If you have any questions or feedback regarding this Privacy Policy, please reach out to:

DNSGuard Development Team
Email: soon001soon@gmail.com
Application ID: com.dnsguard.app