Privacy Policy

Zenward (Android package com.xflashcloud.zenward) is a focus, self-control and parental-control app operated by XFlash. It blocks distracting apps, blocks adult websites, and lets a parent or accountability partner help keep a phone safe. This policy explains what data Zenward collects, why, and the choices you have. Contact: [email protected].

Zenward is intended to be installed and set up by adults: people using it on their own phone, or parents setting it up on their child's phone. A child's phone is only monitored after a parent links it using a code from the parent's own Zenward account.

• Name, email address, account ID — to create and sign in to your account. A linked parent or partner sees your name.
• App usage time (minutes per app) and the list of installed apps — for screen-time reports, app blocking and limits. On a child's phone the linked parent sees this.
• Addresses of adult websites that were blocked — to alert your parent or accountability partner, if you have one.
• Protection events (for example the filter or Accessibility being turned off, or Developer options turned on) — tamper alerts for your linked parent or partner.
• Approximate / precise location — child phones only, and only if the parent turns on Family Map. Shown to the linked parent.
• Messages you send in the app's family / partner chat — to deliver them. Seen by sender and recipient.
• Push notification token — to send alerts to your device. Not shown to anyone.
• Points, streaks, badges, referral codes — for rewards. The leaderboard shows your name and points.

Zenward uses Android's Accessibility service to: see which app is open (to block apps you or your parent chose, and to pause distracting apps at prayer time); read the address bar of web browsers (to block adult websites); and read the text of Android Settings screens, only to notice when someone tries to switch Zenward off. Zenward does not read your messages, chats, passwords or what you type in other apps, and does not record your screen. We ask for your agreement in the app before you turn it on.

Zenward uses Android's VPN feature only to filter website names (DNS lookups). Your browsing traffic, messages and other data do not pass through Zenward. Website names are checked against a list on your phone and then resolved by Cloudflare for Families (1.1.1.3), or by your network's normal DNS if Cloudflare is unreachable. Zenward does not store, sell or share your browsing history.

• Data is stored with Supabase (our database host) and sent over encrypted connections (HTTPS/TLS).
• Push notifications are delivered by Google Firebase Cloud Messaging.
• We do not sell your data, show ads, or share data with advertisers or data brokers.
• Data is shared with other people only as described above — your linked parent, child, or accountability partner — and only after you or they linked the accounts.

We keep your data while your account exists. When you delete your account, your data is deleted from our database immediately (backups expire within 30 days).

In the app: Profile → Delete Account. This deletes your account and all its data. A child's account on a parent-managed phone must be removed by the parent. You can also request deletion without the app: see How to delete your Zenward account.

Zenward is not directed at children for self sign-up. A child's phone is set up and linked by a parent, who controls what is monitored. Parents can unlink a child, or delete the child's account, at any time. The child's phone always shows a notification that it is protected by Zenward.

You can view your data in the app, change your name and settings, unlink parent/partner connections, and delete your account. To ask a question or request a copy of your data, contact us below.

If we change this policy we will update the date above, and tell you in the app for significant changes.

Email: [email protected]