Privacy Policy – Kana Sentinel
Last updated 23 August 2026
In short
- Kana Sentinel filters ads, trackers, and malicious domains on your phone. It does not route your traffic through a remote server.
- Your browsing/DNS history is stored only on your device. We have no server that receives it, and no way to see it.
- The only things that leave your device: DNS lookups (to Quad9, to resolve them) and blocklist downloads (from GitHub).
- No ads, no analytics, no trackers of our own. We don’t know who you are unless you contact us.
- Subscriptions are handled entirely by Google Play Billing — we never see your payment details.
- You can delete everything Sentinel has stored, on-device, at any time from Settings.
What Kana Sentinel is
Kana Sentinel is an Android app that blocks ads, trackers, malware, and (optionally) adult
content by filtering DNS lookups — the “which server does this domain point to” step that
happens before any app or browser can load anything. It uses Android’s VpnService
permission to do this, but it is not a VPN in the traditional sense: it does
not encrypt or reroute your general internet traffic, and it has no remote server of its own
that your traffic passes through. The VPN permission is used only to intercept DNS queries
locally on the device and decide whether to allow, block, or redirect each one.
When you turn Protection on, Android shows its own system dialog asking you to approve a VPN connection. Approving it lets Sentinel see which domain each app on your phone is trying to reach — not the content of what loads afterward.
What stays on your device
Everything below is stored locally in Sentinel’s own app storage and is never uploaded anywhere:
| Data | What it’s for |
|---|---|
| Connection log — domain, requesting app, timestamp, and whether it was allowed or blocked | Powers the live activity feed and history reports |
| Custom allow/block rules you add | Lets you override the default blocklists for specific domains |
| Per-app firewall settings | Remembers which apps you’ve cut off from the network |
| Blocklist files | The actual ad/tracker/malware domain lists, downloaded and cached locally |
| App preferences — theme, category toggles, App Lock on/off | Your settings, so they persist between sessions |
Uninstalling the app deletes all of it. None of it is included in Android backups — Sentinel explicitly opts out of both cloud backup and device-to-device transfer, given how sensitive a DNS history is.
What leaves your device
Three things, and nothing else:
-
DNS resolution. A lookup for a domain Sentinel has decided to allow is
sent to Quad9’s encrypted DNS resolver (
dns.quad9.net) so it can actually be resolved to an address — the same step every phone, browser, and app already performs to load anything. Sentinel does not log this beyond what’s described above; we have no visibility into it ourselves. -
Blocklist downloads. The ad/tracker/malware/adult-content domain lists
Sentinel filters against are downloaded from public repositories on GitHub
(
raw.githubusercontent.com). This is one-way — nothing about your device is sent as part of that download beyond a standard HTTP request. - Subscription purchases. If you subscribe to Kana Sentinel Pro, that transaction goes entirely through Google Play Billing. See “Subscriptions & billing” below.
No account required. Sentinel has no login, no user account, and no server of its own that identifies you.
Permissions, and why
| Permission | Why Sentinel asks for it |
|---|---|
VPN (VpnService) | Runs the local, on-device DNS filter described above. |
| See installed apps | Powers the per-app firewall and attributes each DNS lookup to the app that made it. |
| Notifications | Shows the persistent “Protection is active” status notification Android requires for a running VPN service. |
| Run at startup | Restarts protection automatically after your phone reboots, if it was on before. |
| Ignore battery optimizations | Optional — some phones aggressively kill background VPN connections; this keeps protection running reliably. |
| Biometric / device credential | Only if you turn on App Lock (Pro). Authentication happens entirely within Android’s own biometric system — Sentinel never receives your fingerprint, face data, or PIN, only a yes/no result. |
Subscriptions & billing
Kana Sentinel is free to use for ad blocking. A Pro subscription unlocks the rest (tracker, malware, and adult-content blocking; Safe Search; the per-app firewall; full history reports; custom rules; suspicious-domain review; Link Shield; and App Lock).
Every purchase is handled by Google Play Billing. Sentinel never sees, stores, or has access to your card details or any other payment information — that relationship is entirely between you and Google. You can view, manage, or cancel your subscription at any time from Settings inside the app, which links directly to your subscription page in the Play Store.
Deleting your data
Open Settings inside the app and look for Your data:
- Clear connection log — deletes just the logged DNS history.
- Delete all app data — deletes the connection log, history reports, custom rules, and per-app firewall settings. Your subscription is unaffected, since it lives with Google Play, not on your device.
Uninstalling the app removes everything else Sentinel ever stored.
Sharing & sale of data
We do not sell, rent, or share your data with anyone, because we don’t have any of it to share — it stays on your device. Sentinel contains no ad SDK, no analytics SDK, and no third-party tracking library of any kind.
Children
Kana Sentinel is not directed at children and is not designed for use by children without a parent or guardian setting it up on their behalf. We do not knowingly collect personal information from children.
Changes to this policy
If how Sentinel uses the VPN permission or handles data ever changes, this page will be updated and the “last updated” date above will change accordingly. Material changes affecting the VPN disclosure will also be re-presented in the app for your agreement, the same way it was shown the first time you set up protection.
Contact
Questions about this policy or how Kana Sentinel handles data: kanastudio.in/contact
Kana Sentinel is developed by KanaStudio. This policy applies to the version of Kana Sentinel distributed on Google Play.