Frequently Asked Questions

Does Kahf Guard read my messages, photos, or personal files?

No access to personal communications or media. The app uses Android's Accessibility Service to detect screen patterns like tab labels and button IDs, not content itself. No permissions requested for contacts, SMS, calls, camera, or file storage.

Can Kahf Guard see my passwords?

No. Android prevents this at OS level by masking password fields. The app's code checks for specific view IDs and URLs only, with strict text-length filters applied.

What data does Kahf Guard collect?

NOT Collected: Screen content/text, Screenshots/recordings, Messages/communications, Passwords/form data, Photos/contacts/call logs, Browsing history/URLs, GPS location, Financial data, Tap coordinates/keystrokes. IS Collected: App usage statistics, Installed apps list, Permission status, DNS filtering settings, Feature usage events, Crash reports, Email & name (account only), Subscription status, Country (via IP, once).

Where is my data stored?

Device-only: Screen analysis (memory only, discarded immediately), blocking statistics, feature toggles, pause data. Server storage: App usage stats, installed apps, permission status, DNS settings, account info — all via encrypted HTTPS.

Does Kahf Guard send my screen content to any server?

Zero screen content transmission. Detection of Shorts, Reels, blocked sites, and keywords happens entirely in device memory. Results are simple 'block/allow' decisions; actual text/UI data never transmitted.

Does Kahf Guard track which websites I visit?

No storage or transmission of browsing history. URL checking against blocklist occurs instantly in phone memory; if no match, URL is immediately discarded.

Does Kahf Guard use a VPN?

No VPN used. Safe Internet configures DNS settings to point to Kahf Guard's DNS servers. DNS filtering affects domain lookups only; actual traffic goes directly from device to websites.

Does Kahf Guard record my taps, swipes, or typing?

No recording of tap coordinates, gestures, or text. Accessibility Service API doesn't provide touch data. Analytics records only named events like 'user enabled a feature,' not interactions.

How long is my data retained?

App usage data: 28 days, then automatically deleted. Account data: retained while account active. Crash reports: 90 days for debugging. Deletion: immediate upon account removal.

Why does Kahf Guard require the Accessibility Service permission?

Only API allowing detection of currently displayed screen content, essential for blocking specific features (Shorts, Reels, blocked websites) rather than entire apps. Same API used by screen readers, password managers, and Google Assistant.

What can the Accessibility Service actually see?

Provides structural 'table of contents' of screen — text labels, element IDs, content descriptions. Cannot see images, videos, or visual content. Checks for specific view IDs and URLs in real time, then discards data immediately.

Does Kahf Guard take screenshots or record my screen?

No. Accessibility Service API cannot provide pixel data, screenshots, or recordings. Screen capture requires MediaProjection API with explicit user confirmation. Kahf Guard doesn't use MediaProjection.

Does Kahf Guard store what it sees on my screen?

No. All analysis processed in memory and immediately discarded. App checks whether condition is met, then discards data. Nothing written to disk or sent to servers.

Does Kahf Guard monitor all the apps on my phone?

No. Only monitors specific apps when their features are enabled: social media (YouTube, Instagram, Facebook, Telegram, WhatsApp), 17 supported browsers, and system apps (Settings, Play Store). Unmonitored app events dropped instantly.

Can I revoke the Accessibility Service permission?

Yes, via Settings > Accessibility > Kahf Guard. Disables content-blocking features but app continues for prayer times. Parents can disable remotely or generate emergency codes.

How does Android protect my passwords from accessibility services?

OS-level automatic masking of password fields. Apps marking input as password field causes Android to return empty/masked text to any accessibility service. No app can override this protection.

Can accessibility services see my photos, videos, or images?

No. Accessibility Service API limitation across all services. Provides text labels and element IDs only — structural information, not pixel/visual data.

Does Kahf Guard have access to my banking apps?

No, for two reasons: Banking apps use FLAG_SECURE OS-level protection blocking accessibility services from reading content. Kahf Guard only monitors its blocking-list apps — banking apps never included.

What can an accessibility service NOT access?

Cannot access: images/videos/visual content, network traffic, files/storage, camera/microphone, GPS location, contacts/SMS/call logs, password fields (OS-masked), FLAG_SECURE app content.

Does Kahf Guard monitor system events?

Listens for limited events solely for protection continuity: boot completion, power state changes — used to check if Accessibility Service is running and restart if needed. Does not monitor calls, SMS, location changes, Wi-Fi, Bluetooth, or app installs.

Why does Kahf Guard need so many permissions?

Accessibility Service: Detect/block content (Shorts, Reels, blocked apps/sites, harmful keywords) — accesses UI labels/structure of monitored apps only. Display Over Other Apps: Show block overlay with Islamic message — no additional access. App Usage Stats: Track app duration for time limits and parental monitoring — app names/duration only. See All Apps: List installed apps for blocking selection — app names/package IDs only. Internet Access: Sync account, restrictions, usage data — nothing on device. Start on Boot: Restart protection after reboot — only triggers restart. Notifications: Alert on blocks and active protection — only sends notifications. Battery Optimization Exemption: Prevent forced service sleep — prevents forced sleep only.

Can I revoke permissions after granting them?

Yes, all permissions revokable anytime via Settings. Revocation disables dependent feature (e.g., revoking Accessibility Service disables content blocking). App notifies if critical permission is missing.

Why does Kahf Guard start automatically when my phone reboots?

Android kills all background services on restart. Without auto-restart, content blocking would silently stop — allowing bypass via restart. Boot process restarts protection service, reschedules prayer times, restores notifications.

Does Kahf Guard back up my data to the cloud?

Android's built-in backup saves app preferences to Google Cloud. Kahf Guard backup includes only feature settings and device identifier — no screen content, messages, browsing history, app usage data, or personal content. Encrypted by Google through account.

What content can Kahf Guard block?

18 blocking features across six categories: Content features: YouTube Shorts, Instagram Reels, Facebook Reels, Telegram Search, WhatsApp Status. Apps: YouTube, Instagram, Facebook, Telegram, WhatsApp (individual toggles plus custom apps). Group blocking: Social Media group with 17 apps (Facebook, Instagram, Twitter, TikTok, Snapchat, Reddit, Pinterest, Discord, others). Websites: Custom domains across 17 browsers. Harmful content: Risky word blocker for adult/gambling terms. System protection: DNS change prevention, uninstall prevention, emergency pause disabling.

What exactly does Kahf Guard detect in each social media app?

YouTube: Detects Shorts player open (view ID check) — cannot see video content, comments, subscriptions, watch history. Instagram: Detects Reels section active (view ID check) — cannot see photos, DMs, stories, follows, explore content. Facebook: Detects Reels/video section active (content descriptions) — cannot see posts, messages, friends, groups, marketplace. Telegram: Detects Search bar open (input field check) — cannot see messages, channels, contacts, files. WhatsApp: Detects Status tab active (tab label check) — cannot see messages, calls, contacts, media.

How does the website blocker work?

Reads currently visible browser URL and checks against personal blocklist in real-time device memory. Match triggers navigation away; non-match results in immediate URL discard — never stored, logged, or transmitted. Works across 17 browsers including Chrome, Firefox, Edge, Brave.

How does the risky word blocker work?

Scans visible social media/browser text for curated explicit adult and gambling terms. Match triggers navigation away. Scanned text processed in memory and immediately discarded — never stored or transmitted.

What happens when content is blocked?

Three simultaneous actions: (1) Navigation via Back/Home button; (2) Full-screen overlay with inspirational Islamic message for ~8 seconds; (3) Haptic feedback vibration.

Can I temporarily pause blocking?

Yes, if Emergency Pause is enabled. Pause all blocking for a set duration from the main screen; blocking resumes automatically at expiration. Parents can disable Emergency Pause entirely.

What are the four custom app blocking modes?

Always Block (constant), Time Limit (X minutes daily then blocked), Schedule (blocked during specific hours), Allowed (explicitly permit within group block).

How does the parental control feature work?

Parent sets up 'Family' on their device, links child's device, then remotely configures all blocking settings (app blocks, website blocks, content filters, screen time limits, schedules) from their phone. Changes push to child's device in real-time.

What can a parent see on the child's device?

Can see: app usage statistics (which apps, duration by hour/day), installed apps list, active permissions, current restriction settings. Cannot see: messages, photos, browsing history, screen content, call logs, personal communications.

How are restriction settings synced to a child's device?

Parent changes setting → saved to servers → Firebase Cloud Messaging push notification sent to child's device → device fetches updated settings → applies immediately (typically seconds).

Can a parent trigger a data sync from a child's device?

Yes. From parent's app, request immediate app usage data and installed apps list sync. Triggers push notification to child's device, which uploads latest data. Parent's app then refreshes.

Can a child bypass the restrictions?

Protections include: uninstall prevention, DNS change prevention, emergency pause disabling, settings redirect. Determined users may find workarounds (factory reset). No software is 100% bypass-proof; designed to require significant effort.

How does the accountability partner feature work?

Adults share app usage statistics with a trusted person (spouse, friend, mentor) without granting control. Partner sees usage data and receives alerts but cannot change settings. Designed for voluntary adult accountability.

How is my data transmitted?

All app-to-server data uses encrypted HTTPS connections (TLS). Data cannot be intercepted or read on the network between device and servers.

Is the Accessibility Service a security risk?

It is a powerful permission requiring careful use. Kahf Guard uses it responsibly: processes events only from a specific monitored app list, applies strict filters, processes all data in memory without disk writing, never transmits screen content to servers.

Can someone remotely access my device through Kahf Guard?

No. No remote access, remote control, or remote viewing. Parental control is limited to configuration changes (apps/websites to block) — cannot view screen, read messages, control device, or access personal content.

Does Kahf Guard contain any backdoors?

No backdoors, hidden data collection, or undisclosed functionality. Everything is documented in this FAQ. Full transparency: collected data disclosed, third-party services documented, required permissions explained.

What third-party services does Kahf Guard use?

PostHog (own servers): receives feature usage events, device ID, email after login — does NOT receive screen content, messages, browsing history. Firebase Analytics (Google): receives usage events, server user ID — does NOT receive screen content (email/name limited). Firebase Crashlytics (Google): receives crash logs, server user ID — does NOT receive email, name, screen content. Facebook SDK (Meta): receives install events, subscription status — does NOT receive screen content (email/name limited).

Why does Kahf Guard use PostHog, and does it record my screen?

PostHog is a product analytics tool on Kahf's own servers. Records named events ('user enabled feature') to understand usage and improve features. No screen recording — session replay explicitly disabled. No typed text recorded or transmitted.

Why does Kahf Guard use the Facebook SDK?

Facebook advertising reaches people needing content protection. SDK measures ad effectiveness. SDK receives: install/open events, subscription status, random Google advertising ID. Screen content, messages, and app activity are never shared with Facebook.

What does Firebase do in Kahf Guard?

(1) Firebase Analytics — records usage events. (2) Firebase Crashlytics — sends crash reports (error type, device model, OS version), not personal data. (3) Firebase Cloud Messaging — Google's standard push notification service for notifying child devices of parent setting changes.

Does Kahf Guard send my IP address to external services?

Public IP lookup services used solely for country detection (prayer times, language selection). Only country name saved locally. IP not stored. Single lookup with local caching.

Does Kahf Guard use session recording or screen replay tools?

No session recording, screen replay, or interaction tracking tool. PostHog session replay explicitly disabled. Analytics records only named events, not screen interactions.

How do I delete my account and data?

Delete via in-app settings: More/Settings > 'Delete Account.' Removes account and all server-associated data immediately.

What happens when I log out?

Device disconnects from account. Local settings (enabled features) remain on device; app stops server syncing. Child devices disconnect from parent management until re-login.

Can I export my data?

Data export not currently available in the app. Request a copy via support@kahf.co for readable format provision.

What are my rights regarding my data?

Right to access, correct, export, and delete personal data at any time. Exercise via in-app settings or support@kahf.co. Full legal policy: Privacy Policy at /privacy-policy/.

Will Kahf Guard drain my battery?

Designed for minimal battery impact. App processes accessibility events from a specific monitored app list only — no continuous background scans. When no monitored app is active, service is essentially idle. Battery impact comparable to other always-on services like notification listeners.

Will Kahf Guard slow down my phone?

No. Content detection logic is highly optimized — each check takes microseconds. No heavy computation, network requests, or disk operations during normal use.

Why does Kahf Guard ask to disable battery optimization?

Android battery optimization can kill background services. If Kahf Guard is killed, content blocking stops silently. Disabling optimization ensures continuous protection — same reason Google Family Link and security apps request exemption.

Why does Kahf Guard show a persistent notification?

Android requires foreground services to display a persistent notification. This indicates active protection and prevents background service termination. Minimize via notification settings if distracting.

What is free and what requires a subscription?

Free Features: Safe Internet (DNS filtering), Basic app blocking (limited), Prayer time auto-silent, App usage statistics, Basic website blocking. Premium Features: Parental Control (remote management), Unlimited app/website blocking, Reels/Shorts/Channels blocking, Auto-silent during Salah (advanced), Unlimited device sync, All upcoming premium features.

What subscription plans are available?

Personal Pack — individuals, all premium features, 1 child device sync, monthly billing. Family Pack — families, all premium features, unlimited device sync, monthly billing. Yearly Pack — annual payment, all premium features, 1 child device sync, best value.

What is the Barakah Pass (Sadaka plan)?

Free plan for financially unable users. Full premium feature access at no cost. Apply via subscription screen: 'I cannot afford it. Help me.' Digital safety accessible regardless of financial situation.

Can I cancel my subscription?

Yes, anytime. Google Play > Subscriptions > Kahf Guard > Cancel; or contact support@kahf.co. Premium access retained through current billing period; no next-cycle charges.

What payment methods are accepted?

Google Play (credit/debit cards, Google Pay, linked payment methods); bKash (Bangladesh users). Additional regional methods possible — check the app subscription screen for options.