Privacy Policy

This Privacy Policy explains how On Guard ("we," "our," or "us") collects, uses, and protects your information when you use our digital discipline and privacy protection service.

1. Information We Collect

We collect account information needed to provide the Service, such as your email address and username. We also collect limited website usage information described in Sections 8 and 9. We do not collect your screen content or create a personal history of the sites and apps you use.

2. Local Processing

AI content detection, blocking decisions, and personal data analysis occur entirely on your device. No screenshots, screen content, or browsing history are transmitted to our servers. The one narrow exception is the redirect described in Section 3: when On Guard redirects you, the flagged site's host or the name of the app you were in appears in the address of the hosted block or better-choices page, and is not stored or linked to your account.

3. Android Accessibility Service

On Android, On Guard runs its defense through Android's Accessibility service. Before you enable it, the app shows a disclosure and asks for your agreement; the service stays off until you turn it on in Android Settings, and you can turn it off there at any time. Your allies will know if you do.

Through that service, On Guard takes screenshots of your screen (each checked by a detection model that runs entirely on your device), reads the web address shown in your browser's address bar (reduced to the site's host), and reads the name of the app in the foreground. When explicit content is detected, On Guard can act on your behalf: it redirects the browser off the site by entering a block page address or closing the tab, and, when you tap "Move on," it sends your browser to On Guard's page of better choices, or dismisses the app you are in from your recent apps and returns you to your home screen before offering that page. The block page and the better-choices page are hosted by On Guard; the flagged site's host, or the name of the app you were in, appears in those page addresses so the page can respond, and is not stored or linked to your account.

All of this happens on your device, in memory. Screen images are discarded immediately after they are checked. No screen content, screenshot, or browsing history is uploaded, stored, sold, or shared. If you push past a warning, your ally receives a short text saying that it happened, never what it was.

4. Data Storage

Your personal data and digital habits are stored locally on your device only. Any account data we store is limited to basic account info necessary for service access.

5. Data Sharing

We do not sell your personal information. We disclose limited account and service data to providers that operate On Guard, including Firebase for account services, RevenueCat for subscription management, Stripe for desktop payment processing, and Twilio for the opt-in accountability messages described below. We also use Google for website analytics and Cloudflare for abuse prevention through Turnstile. These providers process information under their applicable terms and privacy policies to provide those services. We do not disclose your screen content to them.

6. Data Security

We implement appropriate security measures. Since most processing occurs locally, you remain responsible for the security of your device and local data.

7. Your Rights

You have the right to access, update, or delete your account information. See our data deletion page.

8. Cookies and Website Analytics

We use Google Analytics to understand website traffic and interactions, such as page views, button clicks, downloads, and account-flow events. Google Analytics may use cookies or similar technologies. We configure it so the page address and referrer sent with an event are limited to the website origin and path. Query strings and fragments are removed, and certain sensitive routes do not send page-view events. We do not intentionally send Google Analytics your email address, screen content, or query-string values. Google may process other information associated with an analytics request under its own privacy policy.

9. Third-Party Services

We use Cloudflare Turnstile on forms and email/password account flows to help distinguish people from automated abuse. Cloudflare is contacted only when a page displays a Turnstile challenge. When it does, Cloudflare may process information associated with that request under its own privacy policy. On Guard sends the resulting challenge token for server-side verification.

Purchases are handled through RevenueCat, our billing platform: on iPhone and Android via App Store or Google Play billing, and on the web via RevenueCat Web Billing, whose payments are processed by Stripe. The desktop app opens the branded checkout at stayonguard.app/checkout, and invited members can sign up and check out directly at stayonguard.app/join. We send RevenueCat the signed-in account identifier, selected plan, your account email address, any promo code applied, and checkout attribution; payment details are entered directly into Stripe's secure embedded form and are not received by On Guard servers. We also use Firebase Authentication for sign-in, including optional Google and Apple sign-in. These services have their own privacy policies. On Guard does not intentionally send them your screen content or browsing history.

10. SMS / Text Messaging

On Guard offers an opt-in SMS accountability program. If you become an ally for an On Guard member, you may receive ally check-in text messages at the mobile number you verify. These texts only prompt you to check in with the member; they never include images, URLs, browsing history, or any detail of what the member was doing.

• Consent. You opt in by verifying your mobile number and confirming acceptance on the ally invitation page. Consent to receive texts is not a condition of any purchase.
• Message frequency. Varies, up to 3 messages a day.
• Rates. Message and data rates may apply.
• Opt out. Reply STOP to cancel or HELP for help at any time. You can also withdraw consent in the product.

We do not sell or share your mobile phone number or SMS opt-in information with third parties for marketing purposes. Phone numbers are used solely to operate the accountability messaging you opted into, and are processed by our SMS provider (Twilio) only to deliver those messages. No mobile information is shared with third parties or affiliates for their own marketing.

11. Data Retention

We retain account information only as long as necessary to provide the Service. Local data on your device is retained until you delete it or uninstall the Service.

12. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect information from children.

13. Changes

We may update this Privacy Policy. We'll notify you of material changes.

14. Contact

Questions? Reach out to team@stayonguard.app or via /contact.