Privacy Policy

Last updated: September 19, 2026

SecRAD ("the app") is a security app that blocks phishing and malware sites. This policy explains what data the app processes — and what it does not.

In short

• The sites you visit, your DNS queries and your traffic never leave your device.
• No account; no name, e-mail, phone number or location is collected.
• Our servers only distribute the signed threat list.
• No ads, no data sales, no third-party tracking SDKs.

Data that stays on your device

Blocked-site records (domain, category, time), check counts, your allowlist and settings are stored on your device, deleted automatically after 60 days, and never sent to us. Deleting the app deletes them.

Data sent to our server

Threat list updates: to download the list, the app proves it is a genuine SecRAD copy via Apple's App Attest and receives a short-lived access token. The token does not identify you. The server keeps daily request totals (day, platform, request type); IP addresses are not stored.

False-positive reports: when you tap "Report a false positive", only the domain, category, platform and app version are sent.

Anonymous statistics (optional, off by default): if enabled in Settings, once a day the previous day's total blocked and checked counts are sent. No domains, device or user identifiers.

Pro subscription verification: when you buy Pro, the App Store's signed transaction is sent to our server and verified with Apple. The server does not store it; it only issues a short-lived token stating the subscription is valid.

About the VPN profile

SecRAD installs a local VPN profile using iOS Network Extension. It does not route your traffic to a remote server; filtering happens inside your device. In the free mode only DNS queries pass through the app; in Pro full-protection mode the destination domain of connections is also checked on-device. Content is never read, decrypted or stored.

Third parties

Infrastructure: Cloudflare (list distribution), Apple (App Attest, App Store). The threat list is compiled from public and licensed security sources; these sources never see your data.

Children

The app is rated 4+ and does not knowingly collect data from children.

Your rights and contact

Because no data attributable to you is kept on the server, access/deletion requests concern data on your device — deleting the app suffices. Questions: privacy@secrad.app.

Changes

When this policy changes the date is updated and material changes are announced in the app.