Privacy Policy
Majd Shield for Android · Last updated October 7, 2026
The short version
- Majd Shield filters websites on your phone. We do not see the sites you visit.
- We have no accounts, no ads, no analytics and no tracking. We do not sell or share data.
- If you link a parent's phone, the two phones talk through end-to-end encrypted messages that we cannot read.
- The parent sees the rules and the phone's status, never browsing history, app usage times, messages or location.
Who we are
Majd Shield is made by Majd HQ, an independent developer in Edmonton, Alberta, Canada. Questions about this policy: kawaleh19@gmail.com.
What stays on your phone
These are stored only on the device and are never sent to us:
- Your PIN (stored as a one-way hash, not the PIN itself).
- Your settings: filters, schedules, app rules and daily limits, prayer settings, language.
- The list of recently blocked sites and the count of blocked requests.
- Screen time per app, read from Android's own usage statistics, used to apply daily limits and shown only on this phone.
- The record of attempts to switch protection off, and error logs used by the Diagnostics screen.
Uninstalling the app or clearing its storage deletes all of it.
How the filter works
Majd Shield uses Android's VPN feature to look at the names of websites your phone asks for (DNS requests). This happens inside the app on your phone. It is not a VPN to a server: your traffic is not routed through us, and the app does not read the content of pages, messages or apps.
A website name that is not blocked is looked up with Cloudflare's family DNS service (1.1.1.3), which also blocks malware and adult sites. Cloudflare receives the website names that need looking up, as any DNS service does, and handles them under its own privacy policy. Majd Shield sends no other information with them.
The app downloads updated block lists from GitHub (the public StevenBlack hosts lists). This is a plain download; nothing about you is sent.
Information that leaves your phone
| What | Sent to | Why |
|---|---|---|
| Website names to look up | Cloudflare family DNS | So sites that are allowed can open |
| A city name you type, or its map coordinates | Open-Meteo (open-meteo.com) | To find your city for prayer times and to show the temperature. Prayer times themselves are worked out on the phone. |
| Encrypted family messages (only if you link a parent's phone or an accountability partner) | The ntfy.sh relay | So the phones can reach each other |
| Purchase details (Play Store version only) | Google Play | To handle a Premium subscription. Google processes the payment; we never see your card. |
Family and accountability partner
Linking is optional. When a parent's phone (or an accountability partner) is linked, the phones exchange short messages through a public relay (ntfy.sh). Each message is encrypted with AES-256-GCM using a key created during pairing, which only the linked phones hold. The relay sees random channel names and scrambled text; it cannot read them, and neither can we. The relay keeps messages for up to 12 hours.
What the protected phone shares with the linked phone:
- Its status: protection on or off, paused, whether a permission was switched off, and the app version.
- The rules in force: filters, schedules, daily limit and time left today, salah lock.
- The names of installed apps and the rule for each (so a parent can set app rules). Not how long they were used.
- An alert if protection is switched off or removed.
It never shares browsing history, sites visited, app usage times, messages, photos, contacts or location. The child can see the same rules on their own phone.
To unlink, remove the link in the app on either phone. The pairing key is then deleted from that phone.
Permissions the app asks for
- VPN: to filter website names on the phone, as described above.
- Usage access: to know which app is open, for app blocking, daily limits and the salah lock. This stays on the phone.
- Display over other apps: to show the lock screen at prayer times, bedtime or when a limit is reached.
- Device admin: to stop the app from being uninstalled without the PIN.
- Camera: only to scan the pairing code when linking a parent's phone. No pictures are saved or sent.
- Notifications, exact alarms, start at boot: to keep protection running and to remind at prayer times.
Children
Majd Shield is set up and controlled by a parent or the phone's adult owner, behind a PIN. The app does not ask children for personal information, and nothing about the child is sent to us. The only things that leave the phone are those listed above.
What we do not do
- No advertising and no advertising ID.
- No analytics, crash reporting services or tracking tools.
- No selling, renting or sharing of personal information.
- No user accounts and no server of our own holding your data.
Your choices
- Turn protection off, unlink a family phone, or clear the lists in Settings (behind the PIN).
- Delete everything by uninstalling the app.
- Because we keep no data about you on our side, there is nothing for us to access, correct or delete. If you have a question, email us.
Changes to this policy
If this policy changes, the new version will be posted on this page with a new date. A change that sends more information off the phone will also be shown in the app before it takes effect.
Contact
Majd HQ · Edmonton, Alberta, Canada · kawaleh19@gmail.com