CLARITY_GUARD_2026

 CLARITY GUARD

Privacy Policy

Effective Date: June 16, 2025   |   Last Updated: June 1, 2026


1. Introduction and App Overview

Welcome to Clarity Guard, developed and maintained by RA Technology ("we," "us," or "our"), a digital-wellbeing and parental-control application published on the Google Play Store. This Privacy Policy describes how Clarity Guard collects, uses, stores, and protects your personal information.


Clarity Guard is designed to help parents, guardians, and individuals reduce digital addiction by:

  • Blocking distracting apps and websites during focus or study sessions

  • Filtering addictive short-form content (Reels, Shorts, TikTok)

  • Preventing unauthorised uninstallation of the app itself

  • Providing weekly digital-usage reports to promote healthier screen habits


⚠️  IMPORTANT: This app is intended for use by adults (parents, guardians, or individuals managing their own screen time). It is NOT intended for use directly by children under 13. No personal data of children is knowingly collected.


2. Data Controller & Contact Information

The data controller responsible for your personal information is:


App Name

Clarity Guard

Developer

RA Technology

Website

https://raftechnologybd.com

Server

raftechnologybd.com (account & premium management)

Support Email

raftechnology7@gmail.com

Package Name

com.raftechnology.clarityguard


3. Personal Data We Collect

We collect the minimum data necessary to operate the app. All data is either stored locally on your device or transmitted securely to our servers only for account and premium-management purposes.


3.1 Account Registration Data (Collected Only If You Create an Account)

Creating an account is optional but required to activate Premium features. When you register, we collect:

  • Email address (Gmail or any email) — used as your unique account identifier

  • Android Device ID (Settings.Secure.ANDROID_ID) — used to bind your premium licence to your device and prevent account sharing

  • Device Model & Name (e.g., Samsung Galaxy M14) — used to display your linked device in your profile and for support purposes

  • Password — stored as a secure SHA-256 salted hash; we never store plain-text passwords

  • OTP verification record — a one-time code sent to your email to verify account ownership during registration


This data is transmitted over HTTPS to our server at raftechnologybd.com

3.2 Google Sign-In Data (If You Choose Google Login)

If you use the "Sign in with Google" option, we receive your Google email address from Firebase Authentication. We do not receive your Google password, contacts, photos, or any other Google account data.


3.3 In-App Purchase Data

Premium plan purchases are processed entirely by Google Play Billing. We receive confirmation of your purchase status (purchased / not purchased) from Google's servers. We do NOT receive your payment card number, billing address, or any financial information.


3.4 Firebase Analytics Data (Anonymous)

We use Google Firebase Analytics to collect anonymous, aggregated usage statistics to improve app performance. This includes:

  • App session duration and screen views

  • Crash reports and ANR events (via Firebase Crashlytics)

  • Device type and Android version (aggregated, not personally identifiable)

Firebase Analytics data is anonymised and cannot be used to identify you personally.


3.5 Firebase Cloud Messaging (FCM) Token

We collect your device's FCM push token to send you service notifications (e.g., account verification, important policy updates). This token is used exclusively for service communication and never for marketing purposes without consent.


3.6 Data Stored Locally On-Device Only (Never Transmitted to Us)

The following data is stored exclusively on your device in local storage (SharedPreferences or SQLite). It is never transmitted to our servers or any third party:

  • App blocklist — which applications you have chosen to block

  • Keyword blocklist — keywords or domain names you have configured for content filtering

  • Blocked domain database — the SQLite database of adult domains used for Premium -mode filtering

  • Scheduled blocking sessions and timers

  • Focus Lock session settings

  • Weekly block statistics (app blocks, keyword blocks, Reels blocks, etc.)

  • PIN / passcode (stored as hashed value; used to protect Settings)

  • Premium status cache (a local copy from Google Play, refreshed on each launch)


4. Android Permissions — Detailed Disclosure

The following table discloses every permission requested by Clarity Guard, its technical name, its purpose, and whether it accesses personal data. This disclosure is provided in accordance with Google Play Developer Policy.


Permission

Purpose

Data Processed

BIND_ACCESSIBILITY_SERVICE

Core feature. Reads only the currently active app's package name and/or the URL displayed in a browser's address bar. Used to detect and block apps or flagged content. Does NOT read passwords, messages, emails, or any personal content.

Active app name / URL only — no personal content

BIND_DEVICE_ADMIN

Premium feature: App Protection. Grants the app Device Administrator rights so it can prevent its own uninstallation and data clearing by an addicted user. Must be explicitly granted by the user in Android Settings. Can be revoked at any time via the app's PIN-protected Settings screen.

No data collected. Device-control command only.

SYSTEM_ALERT_WINDOW(Display Over Other Apps)

Displays blocking overlay dialogs and Focus Lock overlays on top of blocked apps. No content from other apps is read or captured.

No data collected. Display-only permission.

QUERY_ALL_PACKAGES

Required to display the full list of installed applications so users can select which apps to block. The list never leaves the device.

Local only — installed app names/icons.

SCHEDULE_EXACT_ALARM / USE_EXACT_ALARM

Enables scheduled blocking sessions to start and stop at the precise time set by the user (e.g., 9:00 AM to 5:00 PM study block).

No data collected.

POST_NOTIFICATIONS

Sends on-device notifications when a blocking session starts, ends, or when a blocked app is detected.

No data collected.

RECEIVE_BOOT_COMPLETED / LOCKED_BOOT_COMPLETED / QUICKBOOT_POWERON

Automatically restarts the blocking service after the device is rebooted, so protection is continuous.

No data collected.

REQUEST_IGNORE_BATTERY_OPTIMIZATIONS

Prevents the Android system from killing the accessibility service in the background, ensuring blocking is reliable across all OEM devices (Samsung, Xiaomi, Oppo, Vivo, etc.).

No data collected.

INTERNET + ACCESS_NETWORK_STATE

Used for: (a) account registration and login; (b) premium licence verification; (c) domain blocklist updates from our server; (d) Firebase services; (e) serving advertisements to free-tier users.

Account & premium data (see §3). Ad data via third-party SDKs (see §7).

com.google.android.gms.permission.AD_ID (Advertising ID)

Used by Meta Audience Network to serve contextually relevant advertisements to free-tier users. This is an anonymous, resettable device identifier. Users can opt out in Android Settings > Privacy > Ads.

Anonymous Ad ID only — resettable.

WAKE_LOCK

Keeps the device processor partially active during background blocking checks to prevent service interruption.

No data collected.

FOREGROUND_SERVICE (dataSync / specialUse)

Allows the app's KeepAliveService and AppBlockerService2 to run as persistent foreground services, displaying an ongoing notification so users are aware the service is active.

No data collected.


5. Features — What Each Feature Does and What Data It Uses

5.1 App Blocker (Free)

Allows you to select applications to block. The Accessibility Service checks the package name of the foreground application against your local blocklist. No app content is read.

Data used: Locally stored app blocklist. No server transmission.

5.2 Scheduled Blocking (Free)

Lets you set recurring time-based schedules (e.g., Mon–Fri 9AM–5PM) during which blocking is automatically active. Uses Android's Exact Alarm API.

Data used: Schedule settings stored locally only.

5.3 Keyword & Domain Blocking (Premium)

When enabled, the Accessibility Service reads the URL visible in your browser's address bar. This URL is compared against:

  • Your manually configured keyword list

  • The server-synced adult domain database, stored on-device)

If a match is found, the browser is closed and a block dialog is shown. The URL is compared in real time on-device. The URL is NEVER logged, stored, or transmitted.


⚠️  IMPORTANT: The Keyword Blocker reads ONLY the URL displayed in the browser's address bar to check it against your configured blocklist. It does NOT read web page content, form inputs, passwords, or any other screen text. This is verified by code review of the AppBlockerService2 class.


5.4 App Protection / Uninstall Protection (Premium)

This is the most powerful permission in the app. When you enable "App Protection":

  • Device Administrator rights are requested (you must grant this in Android Settings)

  • The app then monitors system settings screens to prevent:

    • Uninstallation of Clarity Guard

    • Clearing of app data (Clear Storage / Clear Data)

    • Turning off the Accessibility Service for Clarity Guard

    • Creating new user accounts (multi-user) on the device

    • Factory reset from Settings (as a bypass prevention measure)

Purpose: This feature is designed for parents who set up the app on a child's device to prevent the child from bypassing protections. It is NOT intended to monitor others without their consent.

Disabling: App Protection can always be disabled by the account holder using the PIN-protected Settings screen within Clarity Guard.


⚠️  IMPORTANT: App Protection uses Device Administrator API for child-safety and digital-wellbeing purposes only. It does not enable remote monitoring, location tracking, keylogging, or data exfiltration of any kind. Its sole purpose is to prevent circumvention of the parental control features.


5.5 Social Media Content Blocking (Premium)

The following addictive content formats are blocked by monitoring on-screen UI element properties using the Accessibility Service:

  • Facebook Reels (com.facebook.katana)

  • Facebook Lite Reels (com.facebook.lite)

  • Instagram Reels (com.instagram.android)

  • YouTube Shorts (com.google.android.youtube)

  • TikTok (com.zhiliaoapp.musically and regional variants)

The blocker identifies the Reels/Shorts interface by checking UI element IDs and descriptions — NOT by reading any video content, captions, comments, or user data. When detected, it navigates back or closes the content.

5.6 Telegram Content Blocking (Premium)

Blocks adult content groups and addictive Telegram search results by checking group names and search hint text visible in the UI. Does NOT read private messages, contacts, or any private Telegram data.

5.7 Focus Lock / Mobile Lock (Premium)

A timer-based lock that prevents the user from leaving a designated app or the Clarity Guard app during a focus session. Uses the SYSTEM_ALERT_WINDOW permission to display an overlay. No data is collected; all session data is local.

5.8 Weekly Report (Free — Statistics Only)

Generates a weekly on-device summary of block events categorised by type (app blocks, keyword blocks, Reels blocks, etc.). All statistics are computed and stored locally using SharedPreferences. They are never transmitted to our servers.

5.9 Keyword Filtering Watchdog (Premium — Protective Function Only)

In Premium mode, the app runs a watchdog service to ensure the keyword filtering-based domain filter remains active. The Accessibility Service monitors for attempts to open keyword filtering- settings and displays a warning screen. This is not a general-purpose keyword filtering-; it is solely used to protect the domain-blocking filter from being disabled.


6. Account Management and Premium Purchases

6.1 Account Purpose

An account is required exclusively to manage your Premium licence across device restarts and to enable support to verify your purchase. Your email and Device ID are used to bind the Premium licence to your specific device.

6.2 Data Stored on Our Servers

The following personal data is stored on our secure server (raftechnologybd.com):

  • Your email address

  • Android Device ID (SHA-256 hashed version also stored for privacy-safe comparison)

  • Device model and name

  • Account creation date and premium status flag

We do NOT store: your blocklists, schedules, browsing activity, blocked URLs, app usage history, or any content from your device.

6.3 In-App Purchases

Premium access is purchased via Google Play Billing using the product ID. All payment processing is handled by Google. We receive only a purchase confirmation token. Your financial data never passes through our servers.

6.4 Your Right to Data Deletion

You may request complete deletion of your account data at any time by contacting our support team:


Email: raftechnology7@gmail.com

Subject line: "Account Data Deletion Request"

We will process deletion requests within 30 days and confirm completion by email. Upon deletion, your email, Device ID, and all associated server-side records will be permanently removed from our database.


7. Third-Party Services and SDKs

The following third-party services are integrated into Clarity Guard. Each service operates under its own privacy policy. We encourage you to review them.


Service

Provider

Purpose

Data Collected

Firebase Authentication

Google LLC

User login & account verification via email/OTP and Google Sign-In

Email address, authentication tokens

Firebase Analytics

Google LLC

Anonymous app-usage analytics and crash reporting

Anonymous device and session data

Firebase Cloud Messaging

Google LLC

Push notifications for service alerts

FCM device token

Firebase Realtime Database

Google LLC

App configuration and remote settings

Anonymous configuration data

Firebase In-App Messaging

Google LLC

Displaying in-app service messages

Anonymous session data

Meta Audience Network

Meta Platforms Inc.

Serving display advertisements to free-tier users

Advertising ID (anonymous, resettable)

Google Play Billing

Google LLC

Processing in-app premium purchases

Purchase tokens (no financial data)

Google UMP (Consent SDK)

Google LLC

GDPR/CCPA consent management for ad personalisation

User consent preferences

Google Credential Manager

Google LLC

Google Sign-In integration

Google email address (on sign-in only)

Volley (HTTP library)

Google LLC

HTTPS communication with our account server

Account data as described in §3


Third-Party Privacy Policies:

  • Google / Firebase: https://policies.google.com/privacy

  • Meta Audience Network: https://www.facebook.com/about/privacy


8. How We Use Your Personal Data


Data

Purpose

Legal Basis (GDPR)

Email address

Account creation, OTP verification, login, deletion requests

Contractual necessity

Device ID

Premium licence binding, duplicate account prevention

Legitimate interest

Device model / name

Support assistance, multi-device display

Contractual necessity

FCM token

Service notifications only

Legitimate interest

Firebase Analytics (anonymous)

App improvement, crash diagnosis

Legitimate interest

Advertising ID

Serving relevant ads to free-tier users

Consent (UMP dialog)


We do NOT use your data for: selling to third parties, targeted behavioural advertising beyond ad network SDK operations, profiling, or any purpose not listed above.


9. Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:

  • With third-party SDK providers as described in Section 7 (Firebase, Meta, Google Play), solely for the operational purposes described

  • With law enforcement or regulatory authorities if required by applicable law, a court order, or to protect the rights, property, or safety of our users or the public

  • In connection with a merger, acquisition, or sale of assets — in which case users will be notified via email or in-app notification prior to any transfer


10. Data Security

We take reasonable technical and organisational measures to protect your personal data:

  • All data is transmitted over HTTPS (TLS 1.2+)

  • Passwords are never stored in plain text — only salted SHA-256 hashes are stored

  • Device IDs are stored in hashed form for privacy-safe comparison

  • Local app data (blocklists, schedules) is stored in Android's private app storage, inaccessible to other apps

  • Our server infrastructure is maintained by RA Technology with access controls limiting who can view account records

No method of internet transmission or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.


11. Data Retention

  • Account data is retained for as long as your account is active or as needed to provide services

  • Upon account deletion request, server-side data is permanently erased within 30 days

  • Local on-device data is deleted when you uninstall the app (subject to Android system backup policies)

  • Firebase Analytics data is retained as per Google's retention settings (default 2 months to 14 months)

  • Advertisement-related data is retained as per Meta and Google's respective policies


12. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:


Right

How to Exercise It

Right of Access

Email raftechnology7@gmail.com — we will provide a copy of your stored data within 30 days

Right to Deletion

Email with subject "Account Data Deletion Request" — processed within 30 days

Right to Rectification

Login to your account and update your profile, or email support

Opt-Out of Ads

Go to Android Settings > Privacy > Ads > Delete Advertising ID, or purchase the Premium plan to remove all ads

Revoke Device Admin

Settings > Clarity Guard > Protected Settings > Disable App Protection (PIN required)

Disable Accessibility

Android Settings > Accessibility > Installed Apps > Clarity Guard > Disable (PIN may be required if App Protection is enabled)


13. Children's Privacy

⚠️  IMPORTANT: Clarity Guard is a tool FOR parents and guardians to use to manage their children's device usage. The app itself is NOT directed at children and is not intended to be operated by a child. Parents should set up and operate the app on behalf of their children.


We do not knowingly collect personal information from children under 13 years of age. If you are a parent and believe we have inadvertently collected data from a child, please contact us immediately at raftechnology7@gmail.com and we will promptly delete such information.

Clarity Guard complies with the Children's Online Privacy Protection Act (COPPA) to the extent applicable under U.S. law and equivalent regulations in other jurisdictions.


14. International Data Transfers

Clarity Guard is primarily operated and used in Bangladesh. Our server is hosted at raftechnologybd.com. Third-party services (Firebase, Meta, Google Play) are operated by their respective providers and may store data on servers located outside Bangladesh, including in the United States and the European Union.

By using Clarity Guard and creating an account, you consent to the transfer of your data to our servers and to the servers of our third-party service providers as described in this policy.


15. Google Play Data Safety Section — Summary

The following summarises what is disclosed in the Google Play Data Safety form for this app. This section is provided as a convenience; the full policy above governs.


Data Type

Collected?

Purpose

Email address

Yes (if registered)

Account management

Device or other IDs (Android ID)

Yes (if registered)

Licence binding

App interactions (Firebase Analytics)

Yes (anonymous)

App improvement

Crash logs (Firebase Crashlytics)

Yes (anonymous)

Bug fixing

Advertising ID

Yes (free tier)

Ads personalisation

Installed apps list

No — stays on device

Local blocking only

Browsing history / URLs

No — not stored/transmitted

Real-time check only

Messages / contacts / photos

Never

Not applicable

Location

Never

Not applicable


Data is encrypted in transit: Yes (HTTPS/TLS)

You can request data deletion: Yes — email raftechnology7@gmail.com


16. Accessibility Service — Google Play Prominent Disclosure

Google Play Policy requires a prominent disclosure for apps using Accessibility Service. The following disclosure is also shown in-app during onboarding.


⚠️  IMPORTANT: Clarity Guard uses the Accessibility Service to: (a) detect when a blocked app is in the foreground; (b) read the URL shown in a browser's address bar to check it against your configured keyword/domain blocklist; (c) navigate back or close restricted content on Facebook, Instagram, YouTube, TikTok, and Telegram. This service does NOT read any personal data such as passwords, messages, emails, contacts, financial information, or page content. All processing occurs on-device in real time. No data is stored or transmitted.


17. Device Administrator (Device Policy Controller) — Disclosure

When you enable the "App Protection" feature, Clarity Guard requests Device Administrator rights. This is required under the Android Device Admin API to prevent circumvention of parental controls. Specifically, Device Admin is used ONLY for:

  • Preventing Clarity Guard from being uninstalled by an unauthorised user

  • Blocking attempts to clear Clarity Guard's app data

Device Admin is NOT used for: remote wipe, password enforcement, screen lock policy, location monitoring, email/calendar access, or any MDM (Mobile Device Management) function beyond the two use cases listed above.

You (or the account holder) can disable Device Admin at any time through the PIN-protected Settings screen in Clarity Guard, which will then allow normal uninstallation.


18. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, features, or applicable law. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this document

  • Display an in-app notification on next launch

  • For significant changes affecting data collection, send an email notification to registered users

Continued use of the app after changes are posted constitutes acceptance of the updated policy. If you do not agree with the changes, you must discontinue use of the app and request account deletion.


19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:


Email

raftechnology7@gmail.com

Website

https://raftechnologybd.com

Support Chat

In-app Support Chat (App → Support tab)

Response Time

Within 7 business days



© 2026 RA Technology. All rights reserved. | Clarity Guard | com.raftechnology.clarityguard