Majd HQ ← Home
Privacy Policy

Your family’s privacy,
kept on your phone.

How Majd Shield handles your information: what stays on the device, the little that leaves it, and what we never do.

Majd Shield for Android · Last updated October 7, 2026
Filtered on your phoneWe do not see the sites you visit.
No ads, no trackingNo accounts, no analytics. We never sell or share data.
End-to-end encryptedLinked phones talk in messages we cannot read.
Rules, not historyParents see rules and status, never browsing, messages or location.

Who we are

Majd Shield is made by Majd HQ, an independent developer in Edmonton, Alberta, Canada. Questions about this policy: info@majdhq.com.

What stays on your phone

These are stored only on the device and are never sent to us:

  • Your PIN (stored as a one-way hash, not the PIN itself).
  • Your settings: filters, schedules, app rules and daily limits, prayer settings, language.
  • The list of recently blocked sites and the count of blocked requests.
  • Screen time per app, read from Android's own usage statistics, used to apply daily limits and shown only on this phone.
  • The record of attempts to switch protection off, and error logs used by the Diagnostics screen.

Uninstalling the app or clearing its storage deletes all of it.

How the filter works

Majd Shield uses Android's VPN feature to look at the names of websites your phone asks for (DNS requests). This happens inside the app on your phone. It is not a VPN to a server: your traffic is not routed through us, and the app does not read the content of pages, messages or apps.

A website name that is not blocked is looked up with Cloudflare's family DNS service (1.1.1.3), which also blocks malware and adult sites. Cloudflare receives the website names that need looking up, as any DNS service does, and handles them under its own privacy policy. Majd Shield sends no other information with them.

The app downloads updated block lists from GitHub (the public StevenBlack hosts lists). This is a plain download; nothing about you is sent.

Information that leaves your phone

WhatSent toWhy
Website names to look upCloudflare family DNSSo sites that are allowed can open
A city name you type, or its map coordinatesOpen-Meteo (open-meteo.com)To find your city for prayer times and to show the temperature. Prayer times themselves are worked out on the phone.
Encrypted family messages (only if you link a parent's phone or an accountability partner)The ntfy.sh relaySo the phones can reach each other
Purchase details (Play Store version only)Google PlayTo handle a Premium subscription. Google processes the payment; we never see your card.

Family and accountability partner

Linking is optional. When a parent's phone (or an accountability partner) is linked, the phones exchange short messages through a public relay (ntfy.sh). Each message is encrypted with AES-256-GCM using a key created during pairing, which only the linked phones hold. The relay sees random channel names and scrambled text; it cannot read them, and neither can we. The relay keeps messages for up to 12 hours.

What the protected phone shares with the linked phone:

  • Its status: protection on or off, paused, whether a permission was switched off, and the app version.
  • The rules in force: filters, schedules, daily limit and time left today, salah lock.
  • The names of installed apps and the rule for each (so a parent can set app rules). Not how long they were used.
  • An alert if protection is switched off or removed.

It never shares browsing history, sites visited, app usage times, messages, photos, contacts or location. The child can see the same rules on their own phone.

To unlink, remove the link in the app on either phone. The pairing key is then deleted from that phone.

Permissions the app asks for

  • VPN: to filter website names on the phone, as described above.
  • Usage access: to know which app is open, for app blocking, daily limits and the salah lock. This stays on the phone.
  • Display over other apps: to show the lock screen at prayer times, bedtime or when a limit is reached.
  • Device admin: to stop the app from being uninstalled without the PIN.
  • Camera: only to scan the pairing code when linking a parent's phone. No pictures are saved or sent.
  • Notifications, exact alarms, start at boot: to keep protection running and to remind at prayer times.

Children

Majd Shield is set up and controlled by a parent or the phone's adult owner, behind a PIN. The app does not ask children for personal information, and nothing about the child is sent to us. The only things that leave the phone are those listed above.

What we do not do

  • No advertising and no advertising ID.
  • No analytics, crash reporting services or tracking tools.
  • No selling, renting or sharing of personal information.
  • No user accounts and no server of our own holding your data.

Your choices

  • Turn protection off, unlink a family phone, or clear the lists in Settings (behind the PIN).
  • Delete everything by uninstalling the app.
  • Because we keep no data about you on our side, there is nothing for us to access, correct or delete. If you have a question, email us.

Changes to this policy

If this policy changes, the new version will be posted on this page with a new date. A change that sends more information off the phone will also be shown in the app before it takes effect.

Contact

MAJD HQ INC. · Edmonton, Alberta, Canada · info@majdhq.com