NoFlow

Privacy Policy

Last updated 14 August 2026

Who we are

NoFlow is made by Kevin Accorinti, an individual developer based in Italy. You can reach us at support@noflowapp.com and we answer every message.

What stays on your device

All of the following is stored locally on your iPhone and is never transmitted to us or to anyone else:

• your clean day count, your streak and your milestones
• the letter you write to yourself during setup
• your journal entries
• the phone number you optionally save for your accountability partner
• the answers you give during setup, used to order what the app shows you — the multiple-choice ones (your stated goal, what's held you back, which statements sounded like you) are also sent as an anonymous count, see "Analytics" below; anything you write in your own words, like your letter, never is
• your protection settings and which sites are filtered

Deleting the app removes all of it. There is no copy anywhere else. You can also erase everything from inside the app at any time without deleting it.

Screen Time and Family Controls

To block apps and websites, NoFlow uses Apple's Screen Time frameworks, which you authorise once from inside the app. Two things are worth knowing about how that works:

• Apple gives apps opaque tokens instead of the identity of what you choose to block. When you shield an application, NoFlow receives a meaningless identifier, not the name of the app. We literally cannot tell what you have blocked.
• Nothing about your browsing is reported to us — not which pages you visit, which ones get blocked, or how often. The filtering itself happens inside iOS, on your device. One feature does read visited domain names, on your device, to recognise sites to block; see "Sites you've visited" below for exactly what that involves and does not involve.

Sites you've visited

Starting with iOS 26.4, Apple lets an app like NoFlow ask Screen Time for the web domains you've recently visited, so the app can recognise ones it should be blocking even before you type them in by hand. This is exactly what that involves:

• The list of visited domains is read on your device only, through Apple's own Screen Time framework. It never leaves your iPhone, is never sent to us, and no server of ours ever sees it.
• Each domain name is checked against NoFlow's own built-in list of sites, entirely on your device. A domain that doesn't match is discarded immediately — nothing about it is kept, anywhere.
• For a domain that matches, NoFlow keeps only an opaque token for it — the same kind of meaningless identifier described above, not the domain name itself. The plain-text name is never stored. The token is what lets the app show its own screen the next time you reach that site, instead of Apple's generic one.
• This only helps with sites Apple's own filter hasn't already caught on first visit. It adds no visibility into sites you visit and never revisit, or into anything Apple's filter already blocks outright.

This is the one place in NoFlow where anything related to your browsing is read, even briefly and only on your device, which is why it gets its own explanation here instead of being folded into a shorter line above.

Your email

During setup, before you see the paywall, NoFlow offers — never requires — leaving your email for occasional reminders. This is exactly what that involves:

• It is entirely optional. Skipping it costs you nothing inside the app, and we never ask again after that one screen, unless you choose to redo the setup yourself from Settings.
• If you give it, your email goes to GoHighLevel, the service we use to send these reminders. It reaches GoHighLevel directly through a small relay on our own site that exists only to keep our sending credentials off the app itself — that relay does not keep a copy of your email, and your address is never connected to your letter, your journal, your streak, or the sites you've chosen to block, which stay on your device regardless of whether you gave an email.
• We send occasional, gentle messages meant to help — never sold to anyone, never used for advertising, never shared with a third party outside of GoHighLevel running the send. Every email includes an unsubscribe link that actually works, immediately, no questions asked.
• On the App Store, our privacy label reflects this honestly: email address, linked to your identity, collected only if you choose to give it.

Subscriptions

Payments are handled entirely by Apple. If you subscribe, Apple processes the transaction and tells the app one thing only: whether an active subscription exists. We never see your name, your email, your payment details or your address. Apple's own privacy policy governs that transaction.

The widget

The lock screen and home screen widget reads your day count from a shared container on your own device, so it can show the number without opening the app. That container never leaves the phone.

Links to other places

The app links out to Reddit's r/pornfree community and to this website. Those are separate services with their own privacy policies, and we have no control over and no visibility into what happens once you leave NoFlow.

Analytics

NoFlow uses TelemetryDeck, a privacy-focused analytics service, to send a small, fixed set of anonymous signals. This is the complete list of what we measure, nothing more:

• which onboarding screen you're on, so we can fix the ones that lose people
• which setup question you picked — your stated goal, what's held you back, and which statements sounded like you — always your pick from a fixed list on screen, never anything you typed yourself
• whether you completed a purchase, turned protection on, opened the toolkit, finished a rep, chose a rep move, or added a site by hand

Every signal is a screen name, a plan identifier or a count — never your journal, your letter, your accountability partner's number, or which sites you've blocked. TelemetryDeck receives a random device identifier it generates itself, not linked to your Apple ID, your email or anything else that identifies you, and NoFlow silences every signal while it is being tested, so none of this counts real usage until it reaches you. There is no advertising identifier and no advertising of any kind. On the App Store, our privacy label lists these analytics data types (device ID, product interaction and purchase events), all marked as not used for tracking and not linked to your identity, alongside the optional email described above.

Children

NoFlow is made for adults choosing to limit their own access to adult content. It is not intended for children, and we do not knowingly collect anything from anyone, of any age, beyond the email address someone chooses to give us themselves.

Your rights

Regulations such as the GDPR give you the right to access, correct, export and delete the personal data a company holds about you. For everything the app itself handles — your letter, your journal, your streak, your blocklist — the answer is unusual but simple: we hold none of it, it never leaves your device. If you gave us your email, that is the one thing we do hold, and you can remove it instantly through the unsubscribe link in any email, or by writing to support@noflowapp.com.

Changes

If this policy ever changes, the date at the top changes with it. If a change ever meant we started collecting something, we would say so plainly in the app before it took effect, not quietly here.