1. Who we are
Blocki is an iOS and Android app that lets you hide and lock other apps with a PIN. The data controller, under Brazil's General Data Protection Law (Law No. 13,709/2018, "LGPD"), is Rodrigo Barbosa Ribeiro, who also acts as the data protection officer.
In this policy, "Blocki", "we" and "our" refer to the app and its owner; "you" refers to the person using the app.
2. Data that stays on your device
To work, Blocki stores the following only in your device's local storage. It is never sent to us or to third parties, and we have no access to it:
- Your PIN, kept protected by the system's security features.
- Hidden and locked apps you have chosen.
- Settings, such as icon camouflage, chosen disguise, app restrictions, startup lock and biometric unlock.
- Intruder Capture photos, with date and time, if you turn this feature on.
- Blocki Plus status, as reported by the app store.
Uninstalling Blocki deletes this data from the device. Since we keep no copy, we cannot recover your PIN, photos or settings.
3. Biometrics and system permissions
Biometrics (Face ID, Touch ID or fingerprint): verification is handled by your device's operating system. Blocki only receives a "confirmed" or "not confirmed" answer and never has access to your face or fingerprint.
Blocki asks for permissions only when a feature needs them:
- App usage control (Screen Time on iOS and equivalent permissions on Android): to hide, lock and restrict the apps you choose. Information obtained through this permission is used on the device only.
- Camera and photos (optional): only for Intruder Capture, which takes a photo with the front camera when someone enters a wrong PIN and saves it to the "Blocki" album in your device's photo gallery. The photo stays on the device.
- Notifications (optional): to send local alerts about the app's protection, such as when it is automatically re-enabled. Notifications are generated on the device itself and send no data.
You can revoke any permission at any time in your device settings. Some features stop working without them.
4. Crash reports and usage metrics
When the app crashes or hits an error, a technical report is sent to Sentry, an error monitoring service. The report may include:
- the type of error and where in the code it happened;
- device model, operating system and version, language and Blocki version;
- date and time of the error and a random technical identifier that does not identify you;
- IP address, received by Sentry when the report is sent.
Reports never include your PIN, your list of protected apps, your settings or photos. We use this data only to find and fix bugs, based on our legitimate interest (LGPD art. 7, IX) in keeping the app stable and secure. Reports are automatically deleted within 90 days.
We also use PostHog, a product analytics service, to understand how the app is used and improve it. The metrics are anonymous and may include:
- usage events, such as screens opened and features used;
- device model, operating system and version, language and Blocki version;
- a random installation identifier that does not identify you;
- IP address, received by PostHog when the data is sent.
The metrics never include your PIN, your list of protected apps, your settings or photos, and are not used for advertising. We process this data based on our legitimate interest (LGPD art. 7, IX) in understanding usage and improving the app. Metrics are retained for up to 12 months.
5. Purchases
Blocki Plus is purchased through the App Store (Apple) or Google Play (Google). Payment is handled entirely by the store, under its own privacy policy. We never receive your name, email, card or any other payment details. We only receive the store's confirmation that the purchase was made, so we can unlock the features in the app.
6. Sharing and international transfer
We do not sell, rent or share data for advertising. The only third parties involved are:
- Sentry (Functional Software, Inc., United States): crash reports. Policy: sentry.io/privacy
- PostHog (PostHog, Inc., United States): anonymous usage metrics. Policy: posthog.com/privacy
- Apple and Google: purchase processing, under their own policies.
Because Sentry and PostHog are based in the United States, crash reports and usage metrics are transferred outside Brazil, with the contractual safeguards required by LGPD art. 33. We may also share information when required by law or by order of a competent authority.
7. Security
Local data is protected by the operating system's security features, and crash reports are sent over an encrypted connection. No system is 100% secure: keep your device updated and screen-locked, and don't share your PIN. If a security incident could cause relevant risk or harm, we will notify users and Brazil's National Data Protection Authority (ANPD), as required by law.
8. Your rights
Under the LGPD (art. 18), you may request: confirmation that we process your data, access, correction, anonymization, blocking or deletion, portability, information about sharing and review of processing. You may also object to processing based on legitimate interest.
Since almost everything stays on your device, you control this data yourself: you can change it in the app or delete it by uninstalling Blocki. For any request about crash reports or usage metrics, write to info@blocki.com.br. You may also file a complaint with the ANPD.
9. Children and teenagers
Blocki can be used by people of any age. Children and teenagers should use it with the knowledge and supervision of a parent or guardian. The app does not ask for or collect identifying data, such as name, email or phone number, from any user.
10. Changes to this policy
We may update this policy, for example when the app gains new features. The effective date at the top always shows the current version. Relevant changes, such as collecting a new type of data, will be announced in the app before they take effect.
11. Contact
Privacy questions, requests or complaints: info@blocki.com.br. We reply within 15 days. The Portuguese version of this policy prevails in case of any discrepancy.