Privacy Policy

Who we are

Christian Adult Blocker (the app) is made and operated by Lightpath Digital, a studio based in Finland. It is a small operation. The developer is credited in the app as Joseph T.

For anything to do with your data, write to hello@christianadultblocker.com. A real person reads it.

Lightpath Digital is the data controller for the information described here.

The short version

In plain words

We do not sell your personal information, and we never have.
The blocker reads your screen only to spot explicit content. That content is never recorded, never stored, and never sent anywhere.
Your journal, check-ins, setbacks and reflections are yours. We do not use them to train our own models.
When you message the companion, your message and relevant context about you are sent to Google Gemini so it can reply.
Deleting your account really deletes it, on the server, including your files.

The rest of this page is the detail behind those five lines. If anything below contradicts them, the detail below is what governs.

What we collect

Your account

Email address and password. Accounts are handled by Supabase, our authentication and database provider. Your password is stored by them in hashed form. We never see it in plain text.
Two-factor authentication, if you switch it on. This stores the secret needed to check your codes.

Your profile

A name or username, if you choose one. It is optional.
A profile picture, if you upload one. It is optional.
Usernames and avatars are reviewed by a person before they are approved, because they are shown to other users in the community. That means a moderator sees the name and image you submit.

What you write in your recovery

This is the heart of the app, and it is the most personal thing in it. Depending on what you use, this can include:

Daily check-ins, including mood, a temptation level from 1 to 10, and any notes you add.
Journal entries.
Relapse and setback logs, including the triggers you record.
Mood entries and weekly reflections.
Your personal list of reasons for doing this.
A signed covenant, including the strokes of the signature you draw with your finger.
Fasting records.
Bible highlights, bookmarks and reading progress, and scripture memory progress.
Your record of urges resisted and victories, and your streak history.

Some of this describes your wellbeing, so we treat it as sensitive. See Your rights for the legal basis we rely on for it.

What you share with other people

Community posts, comments and reactions, and prayer wall requests.
Direct messages, including photos you send in them.
Accountability partner connections. Your partner is notified when you turn your protection off. That is the point of the feature, and it is the behaviour you agree to when you connect with someone.
Your position on the leaderboard and your community standing, if you take part.

What is collected automatically

A push notification token, if you allow notifications, so Firebase Cloud Messaging can reach your device.
An advertising identifier, if you are on the free tier and see ads, used by Google AdMob.
Basic technical information needed to run the service and diagnose faults, such as the app version and error information.
A record of your purchase, if you buy Premium, so we can confirm your entitlement. See Payments and ads.

What you send us directly

Support messages, feedback, bug reports, appeals, and any report you make about another user, including evidence photos you attach.

The blocker and the Accessibility Service

The important disclosure

With your explicit permission, the app uses an Android Accessibility Service to read screen content solely to detect pornographic websites and apps and show a blocking screen. Screen content is never recorded, never stored, and never transmitted. It is checked on your device, in the moment, and discarded.

We do not collect your browsing history and we do not build a profile of the sites or apps you visit. The app keeps a private, on-device tally of how many attempts were blocked so it can show you your own progress. That tally does not include the site, the search term, or anything you looked at.

Three further protections are optional, off by default, and removable at any time:

Device Admin, for uninstall protection, so the app cannot be removed in a weak moment. You can revoke it in your device settings.
A local content filter, which runs as a VPN on your device. It filters locally. It is not a proxy to our servers, and it is not used to watch what you do.
App disguise, which changes the app icon and name on your home screen so it is not obvious what it is.

You can switch the Accessibility Service off at any time in Android Settings, under Accessibility. If you use an accountability partner, they are told when you do.

The AI companion

The companion is powered by Google Gemini. Your message does not go to Google from your phone. It goes to our own server first, a Supabase Edge Function, which calls Google on your behalf. That is deliberate, so the API key never sits on your device where it could be extracted.

What is sent to Google

To give an answer that actually knows you, we send your message together with relevant context about you. Depending on what you have filled in, that can include:

Your streak and your current plan.
Recent check-ins.
Excerpts from your journal.
Your most recent weekly reflection.
The reasons you wrote down for doing this.
The notes the companion has learned about you.
Anything you explicitly asked the companion to remember.

Google processes this to produce the reply and returns it to us. Google's handling of it is governed by Google's privacy policy. We do not use your entries to train our own models.

What the companion remembers

It keeps two kinds of memory, and they behave differently:

Things it works out about you as you use the app. This inferred profile is removed when you delete your account.
Things you told it to remember. These are listed individually in the app, and you can read them and delete any of them at any time.

Limits and safety

AI use is rate limited per day, per user. This keeps the service running and keeps costs sane.
Your messages are checked on your device for crisis keywords, so the app can put help in front of you if you are in danger. That check happens locally.

Please read this one

The companion is not a therapist, not a counsellor, and not a crisis service. It is not a substitute for professional help. It can be wrong. If you are in danger, or thinking of harming yourself, please contact your local emergency services or a qualified professional. Please do not wait for an app.

Community, moderation and safety

The community is moderated, because an unmoderated recovery community becomes unsafe very quickly. That means human beings review content that is reported, and it means some of what you post is seen by a moderator.

Anyone can report a post, comment, message or user. A report can include evidence photos.
Moderators review reports and act under an audit log, so moderator actions are recorded and can be reviewed.
Sanctions range from a warning, to a restriction on what you can do, to a ban. There is an appeals process, and you can use it.
Usernames and profile pictures are approved by a person before they go live.

Anything you post publicly, including on the prayer wall and the leaderboard, is visible to other users of the app. Please treat it as public, because it is.

Photos and files

The app can hold four kinds of image: your profile picture, photos you send in direct messages, photos attached to community posts, and evidence you attach to a report or a support request.

These are stored in private storage with per-user access rules, so that a file belonging to your account is not readable by another user's account. Images shared into a conversation or a post are, of course, visible to the people you shared them with, and to moderators if they are reported.

Notifications

The app sends two kinds of notification. Local reminders are scheduled by the app on your device. Push notifications are sent from our server through Firebase Cloud Messaging, which requires a device push token.

If you turn notifications off in your device settings, both stop. You can also turn individual reminders off inside the app.

Payments and ads

Premium

Premium is sold through Google Play Billing. Google takes the payment. The app never sees or stores your card details. Your purchase is verified on our server before Premium is unlocked, and we keep a record that your account is entitled to it.

The free tier shows ads through Google AdMob, which uses an advertising identifier from your device. You can reset or limit that identifier in your Android settings.

Ads are never shown on crisis screens or urge-help screens. If you are reaching for help, you will not be sold to.

How we use your information

To run the features you use, including the blocker, check-ins, the journal, Scripture, the community and the companion.
To personalise your plan and what the companion says to you.
To sync your data to your account so it follows you to a new device.
To keep the community safe, through moderation and enforcement.
To send the notifications you have enabled.
To confirm a Premium purchase and support your subscription.
To show ads on the free tier.
To answer your support messages and appeals.
To protect against fraud, abuse and security threats, and to fix faults.

Storage, sync and security

Your data is stored in your account with Supabase and syncs across your devices, so a new phone does not mean starting over. Files live in private storage.

Data is encrypted in transit.
Access to your rows in the database is restricted by row-level security tied to your account, and storage files are restricted to your own folder.
Your login token is held in your device's secure keystore, not in ordinary app storage.
Access to production data is limited to the people who operate the service. We do not read your private entries as a matter of routine. We would only look at stored content where it is necessary to fix a fault, to deal with a safety report, or where the law requires it.

To be straight with you: the app does not use end-to-end encryption. Your entries are stored in a form the service can read. We would rather say that plainly than imply a protection that is not there. No service can promise perfect security, and we will not pretend otherwise.

Keeping and deleting your data

We keep your information while your account exists, so that your history is there when you open the app.

You get 30 days to change your mind

You can delete your account from inside the app. The moment you do, you disappear: you are hidden from the community, the leaderboard, search and everyone else's messages straight away, and we stop sending you anything. Nothing is erased yet.

You then have 30 days to change your mind. Sign in during that time and you can bring your account back exactly as it was, with your streak, your journal and your history intact. Signing in does not restore it on its own; you have to choose to.

After 30 days it is erased for good, automatically. That erasure is a genuine hard delete carried out on our server: your stored files, your profile row and your login. At that point it cannot be undone.

We built it this way on purpose. People sometimes delete an account on their worst night, and we would rather that did not cost someone a year of their recovery.

Deleting something you posted works a little differently. When you delete a post, a reply or a message, it disappears from the community straight away and no other member can see it again. We keep a copy on our server for up to 90 days, for one reason: so that somebody who already saw it can still report it after you have taken it down. Otherwise anyone could say something cruel and then delete it before it could be reported. While that window lasts, our moderators can read what you deleted if somebody reports it. After 90 days it is erased.

Some things may survive account deletion where we have to keep them: records we are legally required to retain, such as records relating to a purchase, and a minimal record of a moderation or safety decision so that a banned account cannot simply be recreated. Where that happens we keep the least we can for no longer than we need it.

You can also ask us to delete your account by writing to hello@christianadultblocker.com. Step by step instructions are on the delete your account page.

Your rights

Because we are based in Finland, we operate under the EU General Data Protection Regulation. Wherever you live, you can ask us to:

Give you a copy of your data, or send it somewhere else in a portable form.
Correct anything that is wrong.
Delete your data.
Restrict or object to how we use it.
Withdraw a consent you gave, at any time, without it affecting what was lawful before.

Use the controls in the app where you can, or email hello@christianadultblocker.com.

The legal bases we rely on

Performance of a contract, to give you the service you signed up for.
Your consent, for the optional things: the Accessibility Service, notifications, the companion, community participation, and ads personalisation where it applies.
Your explicit consent, for the entries that describe your wellbeing. You give that by choosing to write them, and you can withdraw it by deleting them or your account.
Our legitimate interests, in keeping the community safe, preventing abuse, and keeping the app working.
Legal obligation, where the law requires us to keep or produce something.

If you think we have got this wrong, you can complain to your local data protection authority. In Finland that is the Office of the Data Protection Ombudsman. We would rather you told us first, so we can fix it.

Age and children

You must be 13 or older to use the app. It is written for teenagers and adults, not young children, and we do not knowingly collect information from anyone under 13.

Countries in the European Union set their own age at which a young person can consent to their data being handled without a parent. In Finland that age is 13. Where you live it may be higher, up to 16. If you are under the age set where you live, a parent or guardian needs to give that consent with you.

If you believe a child under 13 has an account, contact us and we will remove it.

International transfers

The providers listed above operate internationally, so your information may be processed in a country other than the one you live in, including outside the European Economic Area. Where that happens, transfers are made under the safeguards those providers put in place, such as the European Commission's standard contractual clauses.

Changes to this policy

The app changes, so this page will too. When it does we update the date at the top. If a change materially affects how your information is used, we will tell you in the app before it takes effect where we reasonably can. Carrying on using the app after a change means you accept the updated policy.

Contact us

Questions, requests, or something that reads wrong to you? Email hello@christianadultblocker.com. We would rather hear it than not.

See also the Terms of Service and how to delete your account.

All legal documents Terms of Service Delete your account Back to top