This disclosure explains how MindLock's Content Filter feature uses Android's VPN Service permission. We provide this disclosure in addition to our Privacy Policy because VPN functionality is a sensitive capability that deserves full transparency.
MindLock's Content Filter uses a local VPN on your device. Here is exactly what it does and does not do:
Intercepts DNS queries
When your device makes a DNS request (a request to translate a website name like "example.com" into an IP address), our local VPN intercepts it before it leaves your device.
Checks against our blocked domain list
We compare the requested domain against a list of known adult content domains stored locally on your device. This list includes domains like pornhub.com, xvideos.com, and others.
Blocks matched domains
If the domain is on our blocked list, our local VPN returns an empty response (NXDOMAIN), effectively making that website unreachable.
Forwards all other DNS requests to Cloudflare Family DNS
For all non-blocked domains, DNS queries are forwarded to Cloudflare's Family DNS resolver at 1.1.1.3. This is a free, publicly available DNS service operated by Cloudflare Inc. that additionally blocks adult content categories at the DNS level. Cloudflare's privacy policy is available at https://www.cloudflare.com/privacypolicy.
Enforces SafeSearch
Our VPN routes DNS requests for major search engines (Google, Bing, YouTube) to their SafeSearch-enforced endpoints. This means search results automatically exclude adult content, similar to parental control settings.
| It does NOT... | Why this matters |
|---|---|
| Connect to any external VPN server | Your data is not routed through any third-party server |
| Hide your IP address or location | This is not an anonymization tool |
| Encrypt your internet traffic | Standard HTTPS encryption from your apps/browser handles this |
| Slow down your connection significantly | Only DNS requests are intercepted; all actual data traffic passes through normally |
| Log which websites you visit | No browsing history is created by our VPN |
| Send any browsing data to us | Zero data transmission to MindLock servers |
| Block non-DNS traffic | HTTPS content is not read or inspected |
| Affect any apps when Content Filter is OFF | The VPN is only active when you toggle it ON |
For users who want to understand the technical implementation:
Your device makes DNS request for "example.com"
│
▼
MindLock VPN intercepts (local TUN device)
│
┌─────┴─────┐
│ │
Blocked? Not blocked?
│ │
▼ ▼
NXDOMAIN Forward to 1.1.1.3
response (Cloudflare Family DNS)
returned → DNS response returned
to device to requesting app
Your actual internet data traffic (the content of websites, videos, messages) is NOT intercepted. Only the initial DNS lookup (the "where is this website?" question) is processed by our VPN.
BIND_VPN_SERVICE
Required to create the local VPN tunnel. Without this permission, the Content Filter feature cannot function. This permission cannot be granted silently — Android always shows a system dialog asking you to approve a VPN connection when you enable Content Filter for the first time.
Enabling Content Filter
When you turn on Content Filter in MindLock Settings, Android will show a system dialog: "MindLock wants to set up a VPN connection." You must tap "OK" to proceed. This is Android's built-in consent mechanism.
Disabling Content Filter
You can turn off the Content Filter at any time by:
Before Making Payments
Because some banking and payment apps flag any active VPN (regardless of type) as a security concern, we recommend disabling Content Filter before using UPI, net banking, or other payment apps. App blocking and other MindLock features continue working without Content Filter.
The local VPN processes DNS query packet data to extract domain names. Specifically:
The only data that leaves your device as a result of our VPN is:
Non-blocked DNS queries are forwarded to Cloudflare Family DNS (1.1.1.3 and 1.0.0.3). Cloudflare is an independent company with its own privacy policy.
What Cloudflare sees: The domain names in DNS queries (same as any DNS resolver)
What Cloudflare does: Blocks adult content categories and returns IP addresses for everything else
Cloudflare's data practices: https://www.cloudflare.com/privacypolicy/
You may choose to use a different DNS resolver. Contact us at supportmindlock@gmail.com if you would like to configure a custom DNS resolver with Content Filter.
For questions about our VPN implementation:
Ganesh Rathor
📧 supportmindlock@gmail.com