NengioOblio One — Privacy Policy
In case of discrepancies, the Italian version prevails. In caso di divergenze tra le versioni fa fede quella italiana.
Data controller: Robertino Brunaldi, individual developer — supporto@nengio.app
In short. Oblio One works entirely on your phone. The developer has no servers and does not receive your data: calls, contacts and text messages stay on the device. We receive something from you only if you choose to write to us or send us the diagnostic log.
1. What we do not collect. Oblio One does not transmit, upload to the cloud or share with us or anyone else: the numbers in your contacts; who calls you and your call log; the content of your text messages; location data, telemetry, advertising identifiers or device fingerprints.
The app opens no network connections of its own and contains no networking, analytics or advertising libraries. The installed package still lists the INTERNET and ACCESS_NETWORK_STATE permissions: they are added by the Google Play Billing library, used only to buy the PRO version. None of the data handled by Oblio One goes through that channel.
2. Permissions and why they are needed (everything happens on the phone)
- Contacts (
READ_CONTACTS): to recognise whether a call or text comes from a contact («Block unknown callers»); to match against your rules a text whose notification shows the contact's name instead of the number; to let you pick a number from your contacts when you add a rule. The app does not copy your contacts: it stores only the number you choose to add, with the name as a label. Without this permission the app cannot tell contacts from unknown callers. - Call screening (
CallScreeningService): sees the number of the incoming call and decides, before it rings, whether to let it through according to your rules. - Notifications (
POST_NOTIFICATIONS): to tell you about a block, a suspicious text or the status of the service. - Notification access (
NotificationListenerService): used only by the SMS shield, to read the notifications of incoming texts and apply the rules in section 3. - Vibration (
VIBRATE): the short vibration when you tap some buttons. - Widget (optional): if you add it to your home screen, it shows whether the filter is on and how many calls it blocked today, and lets you pause or resume it. It reads the app's data on the phone and shows no numbers.
3. SMS shield and anti-smishing. Oblio One does not block or delete text messages: it acts on their notification. If the sender is blocked or not in your contacts, the notification is hidden and replaced with a warning; the message stays in your Messages app. To spot scams, the app analyses the text of the incoming message in memory, looking for suspicious links (shortened addresses, IP addresses, misleading domains) and words typical of scams; if the message contains a suspicious link it warns you, for example with fake couriers, banks or public services. The text of your messages is never stored, logged or transmitted: once the notification has been assessed, it is not kept.
4. Where the data is and how it is protected. The numbers in your rules (Block, Trusted, Groups, prefixes, SMS rules), the emergency numbers and the block history are stored in a database encrypted with SQLCipher (AES-256) in the app's private storage. The key is generated on the phone and kept in the Android Keystore; it never leaves the device. Settings (mode, days and hours of the profiles, language) and the technical logs in section 6 are kept in the app's private storage, outside the encrypted database, and contain no phone numbers. If you turn on PIN protection (PRO), the PIN and recovery code are not stored in plain text: only a salted hash is kept. Since version 2.10.5 this is PBKDF2-HMAC-SHA256, which repeats the calculation 100,000 times: anyone who obtained a copy of the phone's data would need 100,000 times longer for each attempt to guess the PIN or the code. A PIN set earlier is converted the first time it is entered correctly, the recovery code the next time the PIN is changed. The developer has no way to access this data.
You can delete everything with «Delete all data» in App Info (it asks for confirmation and, if set, the PIN), or by uninstalling the app or clearing its data in Android settings.
5. Buying the PRO version. It is a one-time purchase handled by Google Play, under Google's privacy policy (policies.google.com/privacy); Google processes payment data as an independent controller. Oblio One receives only the result of the purchase and stores it on the phone, so PRO features keep working without a connection.
6. Diagnostic logs (on the phone only). To help you, the app keeps three short technical logs: the latest purchase attempts (Google Play results and codes, purchase status, last five digits of the order ID; last forty events); the SMS shield connection (connection and disconnection times, reconnections, notification access removed or restored; last thirty events); the call filter (for the last twenty-five calls: time, outcome and reason as a short code, active mode and profile). They contain no phone numbers, names, labels, message texts or your Google account. They stay on the phone and are never sent automatically: you can read them in App Info → Diagnostics, and you decide whether to send them to support with your email app. They are deleted with «Delete all data».
7. When you write to us. If you write to support (supporto@nengio.app) or send us the diagnostic log, we use your address, your message and the log only to reply and resolve your request. Email reaches a Gmail inbox, partly through Cloudflare's email forwarding: Cloudflare processes the data on behalf of the controller, Google as an independent controller; both take part in the EU-U.S. Data Privacy Framework. We keep messages and diagnostic logs for no more than 90 days after the request is closed, unless the law requires otherwise. Legal basis: your request (Art. 6(1)(b) GDPR).
8. Your rights. For the data you send us, you can ask for access, rectification, erasure, restriction and portability, and object to processing (Arts. 15–21 GDPR), by writing to supporto@nengio.app. The data that stays on your phone is under your direct control, as described in section 4. You have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the country where you live.
9. No ads, no profiling. We do not sell data, use advertising libraries or tracking tools, or make automated decisions about you.
10. Children. The app is suitable for everyone (PEGI 3). Since it collects no one's data, children included, there is no specific processing that concerns them.
11. Changes and contact. When this policy changes, the date at the top changes too. Questions: supporto@nengio.app.