Friction Privacy Policy

Your privacy is fundamental.

It is the core of how Friction is built, not an afterthought.

No data leaves your device

Friction has no server, no backend, and no analytics SDK. All data — your protected app list, open history, intentions, and usage stats — lives exclusively in the app's private storage on your device. It is never uploaded, synced, or shared with anyone, including the developer.

What data Friction stores locally

  • Protected app rules (package name, delay, throttle settings, hard-block hours).
  • Open events: timestamp, app name, whether friction was shown, and any intention text you choose to log.
  • Daily usage records: per-app open counts and session durations.

Intention text is encrypted at rest using Android Keystore (AES-256-GCM). Raw text is never written to disk.

Accessibility & VPN services

Friction uses the Android Accessibility Service to detect which app is in the foreground so it can show the pause screen at the right moment. It uses a local VPN to throttle network speed for selected apps. Neither service reads, intercepts, or stores your screen content, keystrokes, or network payload. The local VPN does not route traffic through any external server.

Permissions we request

  • Usage Access — to detect the foreground app.
  • Accessibility — to receive app-open events reliably.
  • Draw over other apps — to show the pause overlay.
  • VPN — to apply per-app network throttling locally.
  • Notifications — to keep the monitoring service alive while Android requires it.

No permission is used for advertising, tracking, or any purpose beyond the features described in the app.

Deleting your data

You can delete all usage history at any time via Settings → Data & Privacy → Clear all usage data. Uninstalling the app removes every piece of data Friction has ever stored.

Third-party libraries

Friction uses open-source Android libraries (Jetpack, Room, Hilt, Kotlin Coroutines, Material 3). None of these libraries transmit data off-device in this build. No advertising or analytics SDK is included.

Children

Friction does not knowingly collect information from users under the age of 13. Because all data stays on-device and nothing is transmitted, there is no information to collect.

Changes to this policy

If this policy changes in a future version, the updated text will ship with the app update. Continued use after an update constitutes acceptance of any changes.

TL;DR

Friction stores everything locally. It never phones home. You can delete everything at any time.