OATHOath Privacy Policy
Oath blocks adult content on your device. We do not receive your browsing history, DNS requests, visited domains, or search history. This policy explains the limited data we do process.
Effective and last updated: 23 July 2026
This policy applies to the Oath mobile app and the website at takeoath.app. The controller responsible for processing is:
Yasemin Basar, EinzelunternehmenOath uses an on-device VPN service to filter DNS requests. The service checks requested domains against a local blocklist. It does not send your DNS traffic through an Oath server.
We do not collect or transmit:
These items remain on your device and are removed when you reset the app or uninstall it, subject to the normal behavior of your device backups.
Your email address, account identifier, one-time sign-in records, and authentication timestamps. We use these to create and secure your account and restore an active Oath after a reinstall or device change.
Legal basis: performance of our contract and steps requested before entering it.
Your chosen period and strictness, start and end dates, active, completed, or broken status, attempt number, and progress. We use this to provide, enforce, and restore the commitment you requested.
Legal basis: performance of our contract.
Product identifier, hashed purchase token, Google Play order identifier, transaction status, and purchase time. We use this to verify access, restore purchases, and prevent fraud. We do not receive your full card or bank details.
Legal basis: performance of our contract, compliance with legal obligations, and fraud prevention.
A random installation identifier, app version, request timestamps, IP address in server security logs, and limited protection events such as the cause and duration of an enforcement interruption. We do not attach browsing or DNS activity to these events.
Legal basis: performance of our contract and our legitimate interest in keeping Oath secure and reliable.
If you contact us or report a wrongly blocked domain, we process your email, the content of your request, and our response. Please do not include unnecessary intimate or health information.
Legal basis: responding to your request, performance of our contract, and our legitimate interest in improving support and blocklist accuracy.
The website does not use advertising, analytics trackers, contact forms, or nonessential cookies. Fonts and images are served locally.
Our hosting provider may process your IP address, requested page, access time, browser information, and error data in short-lived server logs. This is necessary to deliver and protect the website. The legal basis is our legitimate interest in secure and reliable operation.
Supabase provides authentication, database, and server infrastructure as our processor. The primary Oath project is hosted in the West EU, Ireland region.
Google Play distributes the Android app and processes purchases. Google acts under its own privacy terms for its store, account, payment, fraud-prevention, and platform data. Oath receives only the information needed to verify and restore your purchase.
Netlify hosts takeoath.app and processes the technical requests needed to deliver and protect the website. IONOS provides our email mailbox and delivery infrastructure and processes the communications you send to us.
Website hosting and email providers process technical or communication data on our behalf. We may disclose limited data to professional advisers, authorities, or courts when necessary to comply with law, protect rights and security, or establish and defend legal claims.
We do not sell personal information. We do not share it for cross-context behavioral advertising, use targeted advertising, or allow data brokers to access it.
We use European processing locations where practical. Some providers or their support teams may process data outside the European Economic Area, the United Kingdom, or Switzerland. If required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses, the UK Addendum, or another legally recognized safeguard. You may request information about the safeguards by contacting us.
We limit collection, restrict access, use encrypted connections for data in transit, and use access controls provided by our service providers. No system is completely secure, but we use measures appropriate to the limited and sensitive nature of the service. Please contact us immediately if you believe your Oath account has been compromised.
In the Android app, open Settings, then Account and data, then Delete account. This permanently deletes your Oath account and its associated server-side data. You can also request deletion without the app on our account deletion page or by emailing Delete my Oath account. We may ask you to verify control of the account email before acting on an email request.
If an Oath is active, deleting the account does not stop it or mark it broken. The Oath continues locally on that phone, but it can no longer be restored after reinstall, app-data deletion, or factory reset.
Deleting the app removes data stored only on that device, but it does not delete the server-side account. Use one of the account deletion paths above for a complete account deletion.
Depending on the circumstances, you may request access, correction, deletion, restriction, objection, or portability of your personal data. You may withdraw consent at any time for future processing based on consent. You may also complain to your local supervisory authority. In Austria, this is the Austrian Data Protection Authority.
Depending on your state and whether its law applies to us, you may have rights to know, access, correct, delete, or obtain a copy of personal information, to appeal a denied request, and to receive equal service when exercising a privacy right. Oath does not sell personal information, share it for cross-context behavioral advertising, use it for targeted advertising, or profile you for decisions with legal or similarly significant effects. There is therefore no sale or targeted-advertising opt-out required for Oath's own processing.
We will consider reasonable access, correction, and deletion requests from users worldwide, even where a specific local law does not apply. Send requests to info@takeoath.app. We may verify your identity before disclosing or deleting data.
Oath is intended for people aged 16 and older and is not directed to children under 13. We do not knowingly collect personal information from anyone under 16. If you believe a person under 16 has provided personal information, contact us so we can investigate and delete it where required.
Oath automatically applies the local blocking rules and tracks the commitment period selected by you. These actions provide the service you requested. We do not use automated processing to make decisions about you that produce legal or similarly significant effects, and we do not create advertising profiles.
We will update this policy before materially changing how we process personal data. The current effective date appears at the top. If a change materially affects an active account, we will provide an additional notice where required.
Questions, privacy requests, and complaints can be sent to info@takeoath.app.