How to check it

Last updated: 04/11/2026 · Oblio One 2.10.5 · Atzaculara 0.6.26

In case of discrepancies, the Italian version prevails.

You don't have to take our word for it. This page shows what the two apps actually contain, read from the packages published on Google Play, and how to check it yourself.

In short

• No advertising, analytics or crash-reporting libraries in either app.
• No account and no server of ours: your numbers, rules and usage times stay on your phone.
• The Internet permission is there, in both apps. The Google Play purchasing library adds it, and we explain why below.

The Internet permission, plainly

Oblio One and Atzaculara do not open network connections of their own. The INTERNET permission, together with ACCESS_NETWORK_STATE and BILLING, is added automatically by the Google Play Billing library, which is used only to buy the PRO version. The purchase is handled by Google Play, under Google's privacy policy.

If you analyse the code you will also find a Google component called com.google.android.datatransport: Google uses it to send technical logs to its own servers. We did not add it; it comes with Play Billing, and our apps do not pass your data to it. We mention it here because you should know before you find it.

That is why we don't say "no data ever leaves your phone": your data stays on your phone; Google's purchasing system talks to Google.

Oblio One — permissions

• READ_CONTACTS: to recognise the numbers in your contacts and not block them.
• POST_NOTIFICATIONS: to tell you about a blocked call or a hidden text message.
• VIBRATE: the short vibration when you tap some buttons.
• INTERNET, ACCESS_NETWORK_STATE, BILLING: Google Play Billing, see above.
• CHECK_LICENSE: it is not in the package we upload; Google Play adds it to the copy it distributes. Oblio has Play's "automatic protection" switched on, which blocks unofficial installs and, to do so, checks that the app came from Play.
• DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: an internal Android permission that stops other apps from sending internal messages to Oblio.

Oblio also uses two kinds of access that are not "permissions" but system roles you switch on yourself in the settings: caller ID and spam app (to block calls) and notification access (to hide the notification of unwanted text messages; the message stays in your Messages app). You can turn them off at any time.

Other libraries: SQLCipher, which encrypts the database on your phone.

Atzaculara — permissions

• PACKAGE_USAGE_STATS: to measure the time spent in the apps you choose.
• FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USE, POST_NOTIFICATIONS: the "Atzaculara is active" notification stays visible while the control is on.
• INTERNET, ACCESS_NETWORK_STATE, BILLING: Google Play Billing, see above.
• CHECK_LICENSE and DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION: as for Oblio. Atzaculara also has Play's automatic protection switched on.

Atzaculara also uses the accessibility service, which you switch on yourself: it tells the app which app is open so it can show the pause. It does not read the content of the screen and does not record what you type.

Other libraries: Flutter, the framework the app is built with.

A third-party check: Exodus Privacy

Exodus Privacy is a non-profit association that downloads apps from Google Play and publishes their analysis free of charge: trackers found and permissions.

• Oblio One 2.10.1: 0 trackers, 8 permissions (report of 30/10/2026: the latest version analysed, and 2.10.5 has the same permissions).
• Atzaculara 0.6.24: 0 trackers, 9 permissions (report of 30/10/2026).

Exodus looks at the code, not at the traffic: it tells you which known trackers are present, but on its own it does not prove that no data leaves the phone. That is why every permission is also explained above.

Check it yourself, on your phone

1. Permissions: Settings → Apps → Oblio One (or Atzaculara) → Permissions. You can see what you have granted and remove it.
2. Roles and special access: Settings → Apps → Special app access (the name varies by phone): notification access, accessibility, usage access.
3. Traffic: in the data usage settings (the path varies by phone) you can see how much data each app has used. For ours it is small, and it comes from Google Play Billing, which asks Google Play whether you have bought PRO each time the app opens.
4. Code analysis: look the app up on the Exodus Privacy website.

If you find anything that doesn't match what this page says, write to us: supporto@nengio.app.