ZoRa (“we”, “our”, or “us”) provides parental control, digital well-being, and cybersecurity filtering solutions designed to shield children from online harm, inappropriate content, and screen addiction.
This Privacy Policy explains how our service operates, the exact nature of data handled, and our unwavering commitment to child privacy and transparency. By installing or utilizing ZoRa, the parent or legal guardian consents to the terms described herein.
🛡️ Strict Parental Supervision
⚡ Real-Time Content Filter
🔐 Zero User Activity Tracking
Under Google Play’s requirements for apps utilizing the Android VpnService API:
🛡️ Local DNS Loopback
Creates a local virtual network adapter on the Android device solely to intercept and filter DNS requests against a curated safety blacklist.
🚫 Anti-Malware / Anti-Adult
Blocks adult websites, malicious phishing links, gambling domains, and unauthorized trackers before the connection is established.
🔒 No MITM or Payload Inspection
Does not decrypt or inspect HTTPS encrypted packet contents (No Man-in-the-Middle certificate installation).
🚫 No Ads / No Tracking
Does not inject advertisements, redirect web traffic for commercial gain, or profile child behavior.
The protective tunnel runs strictly as a utility service under direct parental control and authorization.
A key capability of ZoRa is the Bedtime Curfew & Sleep Guard feature. This tool empowers parents to cultivate healthy sleep habits and eradicate late-night screen addiction:
- Parent-Defined Schedules: Parents establish daily start and end curfew times (e.g., 21:00 to 07:00).
- Automated Network Curtailment: During active curfew hours, the local protective tunnel automatically pauses or blocks internet resolution on the child's device, discouraging disruptive nighttime phone usage.
- Local Schedule Enforcement: Curfew schedules are evaluated locally on device routines or validated against our synchronized server clock (via
/api/accounts/server-time/) to prevent children from altering device clock settings to bypass curfew limits.
- Emergency Access: Emergency services and cellular phone calls are completely unrestricted by the application at all times.
We fundamentally believe that privacy is an absolute human right, especially for children and minors. ZoRa operates under an uncompromising Zero-Log Policy:
- No Browsing Logs: We do NOT log which websites are visited, pages accessed, or videos streamed.
- No Search Queries: Search engine entries and text queries are never captured or recorded.
- No IP Address Archiving: We do not log or store client IP addresses associated with ongoing internet activity.
- No Session Logs: We do not maintain timestamps of internet connection sessions.
❌ No Search Logs
❌ No Browsing History
❌ No Advertising Trackers
❌ No Data Resale
ZoRa strictly complies with the United States Children's Online Privacy Protection Act (COPPA) and the European Union General Data Protection Regulation child safety provisions (GDPR-K):
- No Child Personally Identifiable Information (PII): We do not request, harvest, collect, or store a child's name, email, home address, school location, photographs, audio recordings, or precise GPS coordinates.
- Parental Consent: The application is configured, registered, and authorized solely by the parent or legal guardian. During registration, the parent affirmatively accepts our terms and disclosure.
- Device Hardware UUID: To bind the subscription license and prevent duplicate account creation, the app transmits an anonymized physical Device UUID. This identifier is used exclusively for licensing and security integrity.
To maintain the cybersecurity fortress and ensure children cannot circumvent parental guardrails:
- Device Administrator (BIND_DEVICE_ADMIN): Granted exclusively with parental consent to prevent unauthorized uninstallation or sudden clearing of safety filters without the parental security PIN.
- Notification Access: Used solely to alert the child and parent when safety filters are active, curfew is in effect, or subscription requires renewal.
- Boot Completed: Ensures safety filters and protection resume automatically if the device is rebooted.
All communication between the ZoRa mobile client and our production infrastructure (hosted at https://api.zora-apps.cloud) is safeguarded by bank-grade security protocols:
- TLS 1.3 / 1.2 Cryptography: Modern high-strength ciphers (ECDHE-ECDSA-AES128-GCM-SHA256, DHE-RSA-AES256) enforce complete forward secrecy.
- HSTS & Security Headers: HTTP Strict Transport Security (63,072,000s preload), X-Content-Type-Options: nosniff, and anti-tamper firewalls.
- Secure Password & PIN Storage: Parental PIN codes are never stored in plaintext; they are hashed using salted cryptographic algorithms (Argon2 / PBKDF2).
Parents and legal guardians retain sovereign control over their account and device bindings at all times:
- Right of Inspection: Parents may request verification of any active device subscription data associated with their registered account.
- Right of Erasure / Deletion: Parents may request complete deletion of their account, device registration record, and payment receipt logs by contacting our official support desk. Upon verification, all associated records are permanently wiped within 7 business days.
- Uninstallation: Parents can disable Device Administration and remove the application at any time using their master PIN code.
For assistance, customer support, or inquiries regarding our privacy and child protection practices, connect directly with our verified official channels:
