Redirect Privacy Policy

Effective date: November 12, 2026

What Redirect is

Redirect is a local-first Android app for self-support, reflection, and optional protection tools. It can provide check-ins, journaling, app guardrails, and on-device DNS filtering.

Data stored on your device

Redirect stores the following in its private app storage:

• Urge events, outcomes, optional triggers, and notes.
• Check-ins, including mood, urge level, factors, and optional notes or support preferences.
• Journal entries and optional links to urge events.
• Weekly reflections: the week, the counts shown when you saved it (pauses and plans used), up to three notes you wrote on pauses that week, and your optional answers.
• If-then plans you write, with the situation, what you plan to do, and how often you used each.
• Which lessons you have finished, and where you stopped in one you have not.
• Reason words you add yourself, for use in pauses, journal entries and plans.
• Your display name, motivation, selected activities, and app preferences.
• The name or label and the message you write for “Someone to message”. No phone number is stored.
• Whether the weekly reminder is on, and the day and time you chose for it.
• Protection settings, guarded app package names, allowed domains, cooldowns, and pending changes.
• A bundled domain-blocklist snapshot and, if you request an update, a downloaded replacement list.
• The time of the most recent DNS lookup, without the name.
• Up to ten technical crash reports, if Redirect stops unexpectedly.

This information is not separately encrypted by Redirect at rest.

Crash reports

If Redirect stops unexpectedly, it writes a technical report to its private app storage. A report contains the error type, the code locations involved, your Android version, and your device model.

The error's own description is never recorded, because it is free text that could contain anything the app was handling at the time. The report is assembled only from the error type and code locations. Reports never contain journal entries, check-ins, urge history, notes, browsing activity, or the contents of any screen.

These reports are never transmitted. Redirect contains no crash-reporting service, no analytics SDK, and no upload mechanism for them. Only the ten most recent are kept; older ones are discarded automatically.

You can view how many are stored, delete them, or share them under Privacy → Diagnostics. Sharing uses Android's own share sheet, so you choose the recipient and can read the report first. If you send one to support, you are choosing to disclose it — it is not collected.

What never leaves your device

Redirect does not transmit your journals, check-ins, urge history, profile, motivation, guarded-app list, allowlist, protection settings, or crash reports to Redirect or an app-managed cloud service.

If you tap Message someone in a pause, Redirect opens Android's share sheet with the message you wrote. You choose the app and the person, and Redirect sends nothing itself.

Redirect does not capture screenshots and has no image-classification feature.

Network traffic that does occur

When DNS protection is active, blocked-domain matching happens on your device. A blocked name is answered on your phone and is not sent anywhere. Redirect does not log or store the names your phone looks up, blocked or not. Other DNS questions are handed to Android's own resolver on your phone's regular connection (Wi-Fi or mobile data), so your Android DNS settings apply, including Private DNS if you have turned it on. Redirect opens no DNS connection of its own and has no fallback resolver; with no connection, or no answer in time, the app simply gets an error. Your network's resolver or your Private DNS provider, and network observers, may receive those DNS questions under their own terms. Redirect does not operate a DNS collection server.

DNS filtering is not comprehensive. Private DNS (DNS-over-HTTPS or DNS-over-TLS), custom resolvers inside apps, IPv6 DNS, and DNS-over-TCP bypass it. Redirect does not inspect or filter images, video, or page content.

If you choose Update now, Redirect downloads the OISD blocklist over HTTPS from nsfw-small.oisd.nl. The host or its CDN may receive ordinary request metadata such as your IP address, request time, and user agent. The request does not contain your journals, check-ins, urge history, allowlist, or DNS-query history.

The optional weekly reminder is a local notification scheduled on your phone. It makes no network request and sends nothing to Redirect or anyone else.

If you create an export, Redirect writes an unencrypted, human-readable JSON file to the destination you select through Android. That destination may be local storage or a provider you choose. After export, the file is outside Redirect's control. Exports include your profile (with the name and message you wrote for someone to message), urge events, check-ins, journal entries, weekly reflections, if-then plans, your own reason words, lesson progress, and protection toggles, but intentionally exclude guarded app package names, allowed domains, and protection-change/cooldown details, because exported files may be shared with a supporter.

Accessibility service

The optional app-guardrail Accessibility service observes the foreground app's package name and can display a pause overlay for apps you selected. It does not read screen text, take screenshots, type, perform gestures, or transmit package information to Redirect.

The Accessibility service can be disabled in Android Settings.

What we don't do

• No user accounts.
• No analytics or advertising SDKs.
• No sale of personal data.
• No app-managed cloud sync.
• No camera, microphone, location, contacts, photos, SMS, or broad-storage access.
• No automatic blocklist refresh; updates occur only when you request one.
• Android app-data backups are disabled in Redirect's manifest.

Data deletion

Delete all data clears Redirect's Room database and preferences, including journals, check-ins, urge events, profile information, allowlists, and protection settings. It also deletes any stored crash reports, which you can additionally delete on their own under Privacy → Diagnostics.

Deletion does not erase JSON files you previously exported or the downloaded blocklist, and it does not revoke Android VPN consent, notification permission, or Accessibility access. Manage exported files through their destination and permissions through Android Settings.

Uninstalling Redirect removes its app-private data under Android's normal uninstall behavior. Backups are disabled.

Children

Redirect is not directed at children under 13.

Changes to this policy

We may update this policy when Redirect's features, data practices, or legal obligations change. The effective date above will be updated when changes are published.

Contact

For privacy questions or requests, contact support@hikmasolutions.co.za.