Privacy policy

Updated October 13, 2026. blok social is operated by Abraham Arias Perdomo. Contact abeagents@gmail.com.

Your account and friends

We use your email, sign-in provider identifier and chosen username to create and maintain your account. Supabase provides authentication, database and image storage. We store friend requests, accepted friendships, likes and comments to provide the social features. Only you and accepted friends can access your shared photo feed.

Photos and AI verification

When you choose Verify & unlock, your photo is sent to our backend, fal.ai, OpenRouter and Google Gemini to check for outdoor daylight. The AI result can be wrong and does not establish the time the photo was taken; the app also checks your device clock. Verification photos are not added to our shared storage unless you choose Share with friends. Shared images, captions and comments are also checked using these providers for inappropriate content.

We keep the fal credential on our server and request that fal not store request/response payloads. Provider security, abuse-monitoring and retention policies still apply; this is not a promise of zero retention. See fal’s privacy policy, OpenRouter’s privacy policy, Google’s privacy policy, and Supabase’s privacy policy. We ask for your agreement to this provider change before sending content for AI checks.

Memories and blocking

Memories are saved locally on your device. Photos you share are stored in a private cloud bucket. Your app and website blocking selections and schedule are stored on your device. On Android, the accessibility service reads the foreground app and supported browser address bar to enforce the list you select. Address-bar text is processed locally, not saved or sent to our server. On iOS, blocking uses Apple’s Screen Time APIs and your authorization.

Notifications and memories

Private photo completion status is not shared with friends. Local streaks are calculated from accepted Memories on your device. Collages are shared only when you choose a destination in your phone’s share sheet.

Morning and evening reminders are scheduled on your device. If you enable friend notifications, we store your notification preferences, timezone and device push token. Expo, Google and Apple process notification delivery. Push messages use generic activity text rather than your photo or comment contents. You can disable reminders, friend notifications or notification permission in Settings.

Safety and technical data

Reports include the reporter, reported content identifiers, reason and time so we can investigate. Providers may process IP addresses and service logs to deliver and secure the service. We keep photo-check request references, processing stage, outcome and elapsed time for up to 30 days to diagnose failures; these records do not include photos, credentials or model response text. We do not sell personal information or use advertising trackers.

Deletion and retention

Remove a shared photo from the feed to remove its cloud copy. Removing a local Memory alone does not remove a previously shared photo. In Account, Delete account removes the account, shared photos, comments, likes, friendships, buddy status, completion records, device tokens and notification preferences. The app also attempts to remove local Memories on that device; uninstalling removes its local app data. Copies saved by friends cannot be recalled. Provider backups and security logs may remain for their applicable retention periods.

Optional Chrome connection

If you connect Chrome, your selected website domains, schedule, timezone and unlock expiry are stored in our dedicated Supabase backend and read by your connected extension. Your browsing history, visited page contents, app identifiers and Screen Time selection tokens are not uploaded by this feature. The connection code grants read-only access to blocking settings and expires after 180 days. We store its hash on our server. Keep the code private. Generate a new code to replace an old connection, or choose Disconnect Chrome in the phone settings to revoke it. Account deletion removes the server connection. The extension caches settings and its connection token locally; uninstalling the extension removes that local storage. Original blocked-tab addresses stay in browser session storage only to reopen them after unlocking.

Your choices

Uncheck Share with friends before verifying a photo to keep it out of the feed. You can remove friends, block users, report content, revoke camera or Screen Time permissions, or delete your account. For access, correction, privacy questions or help, contact abeagents@gmail.com.