🔒 Afg DNS Privacy First

Privacy Policy

Developer Contact: esmatullahsangary@gmail.com App Version: 1.6

📅 Effective Date: October 13, 2025 | Last Updated: July 2026

📖 Overview

Afg DNS is a privacy-focused Android application that allows users to securely route their DNS queries through trusted public DNS providers. The app uses Android's built-in VPN framework to change DNS settings locally on your device. It does not provide a full VPN connection, tunnel your internet traffic, or collect any personal data.

🔐 Data Collection

Afg DNS does NOT collect, store, share, or sell any personal or non-personal user data. All DNS queries are processed locally on your device and sent directly to your selected DNS provider. No information is logged, recorded, or transmitted to any third-party servers by this application.

Note: Third-party advertising networks (Yandex Ads and Google AdMob) may collect certain data as described in the Advertising section below. This data is handled by those networks according to their own privacy policies.

📱 Permissions Used

Afg DNS requires the following permissions to function properly. Each permission is explained below:

🌐 INTERNET Required to connect to DNS servers (Google DNS, Cloudflare, AdGuard, etc.) for domain name resolution. This is essential for the app's core functionality.

🔒 BIND_VPN_SERVICE Creates a local VPN connection on your device that routes DNS queries securely through your chosen DNS provider. Important: This VPN runs entirely on your device and does not tunnel your internet traffic or redirect your data to external servers.

🔄 FOREGROUND_SERVICE Allows the DNS service to run in the background while showing a persistent notification, ensuring the DNS protection remains active even when the app is not visible.

⚙️ FOREGROUND_SERVICE_SPECIAL_USE Used specifically for VPN functionality, allowing the DNS service to run as a foreground service with special use case designation for VPN operations.

📡 ACCESS_NETWORK_STATE Checks your current network connection status (WiFi, Mobile Data) to properly start, maintain, or stop DNS routing based on network availability.

🚀 RECEIVE_BOOT_COMPLETED Optional Feature – Enables the "Auto-Start on Boot" feature. If you enable this setting, the app will automatically start DNS protection when your device boots up. You can disable this feature at any time within app settings.

📋 QUERY_ALL_PACKAGES VPN Exclusion Feature – Enumerates all installed apps so you can choose which ones bypass the VPN tunnel. This is used exclusively for the app-based VPN exclusion feature in SettingsActivity.java:131-141. It lists all installed apps with a launcher intent, letting you pick which apps should bypass the DNS tunnel. Without this permission, PackageManager.queryIntentActivities() only returns apps visible to the calling app, which on API 30+ excludes most installed apps. This is a legitimate use case for a firewall/VPN app that manages per-app tunnel exclusion.

🛡️ App‑Based VPN Exclusion

The QUERY_ALL_PACKAGES permission powers the VPN exclusion feature. In SettingsActivity.java:131-141, the app lists every installed application with a launcher intent, giving you full control over which apps bypass the VPN tunnel. This is essential for a VPN/firewall app that needs to manage per‑app routing. All data is processed locally — no app list is ever sent off your device.

🎯 DNS Providers

Afg DNS supports multiple public DNS providers. You can choose from:

Cloudflare DNS (1.1.1.1) – Focus on speed and privacy
Google DNS (8.8.8.8) – Reliable and fast resolution
AdGuard DNS (94.140.14.14) – Blocks ads and trackers
CleanBrowsing (185.228.168.168) – Family-friendly content filtering
Quad9 (9.9.9.9) – Security-focused with threat blocking
Custom DNS – Add your own DNS servers

Each provider has its own privacy policy. We recommend reviewing their respective policies before use.

📢 Advertising

Afg DNS may display advertisements through Yandex Ads and Google AdMob. Important information about ads:

Yandex Ads

We use Yandex Ads to serve advertisements. Yandex may collect and process the following information to deliver and personalize ads:

Device identifiers (e.g., Android Advertising ID)
IP address – used for geolocation and ad targeting
Device and network data – model, OS version, carrier, language, screen size, network type
Ad interaction – impressions, clicks, and other engagement metrics

All data collected by Yandex Ads is handled in accordance with the Yandex Privacy Policy. We do not have access to personally identifiable information (PII) from Yandex; we receive only aggregated reports.

You can opt out of interest-based advertising from Yandex by adjusting your device settings (e.g., resetting your advertising ID or enabling "Opt out of Ads Personalization" in Google settings).

Google AdMob

We also use Google AdMob, which may collect similar data (device identifiers, IP, network info, ad interactions) as described in Google’s Privacy Policy. AdMob data is used for ad personalization and campaign performance.

❌ No personal information is collected by Afg DNS itself for advertising purposes.
📱 Ad-related data is processed exclusively by the third‑party ad networks according to their own policies.
🎯 Users can opt out of personalized advertising through their device settings (Google Ads settings) or via Yandex’s opt‑out mechanisms.

⚙️ User Control

You have complete control over Afg DNS:

✅ Start or stop DNS protection at any time with one tap
✅ Enable/disable Auto-Start on Boot feature
✅ Choose from multiple DNS providers
✅ Test DNS speeds to find the fastest provider for your location
✅ Add custom DNS servers
✅ Per‑App VPN Exclusion – Choose which apps bypass the VPN tunnel
✅ Uninstalling the app completely removes all functionality and settings

🔧 Technical Details

How Afg DNS works:

The app creates a local VPN interface that only handles DNS queries
Regular internet traffic continues to use your normal network connection
DNS queries are encrypted when using providers that support DNS-over-TLS or DNS-over-HTTPS
The VPN service runs locally with zero data collection or external routing
The VPN exclusion feature uses QUERY_ALL_PACKAGES to let you select which apps bypass the tunnel – all processed locally

📜 Legal Basis

This privacy policy complies with:

GDPR (General Data Protection Regulation) – EU users
CCPA (California Consumer Privacy Act) – California residents
Google Play Developer Policy – For transparent data handling
COPPA (Children's Online Privacy Protection Act) – Users under 13

📧 Contact Us

If you have any questions, concerns, or feedback about this privacy policy or the Afg DNS app, please contact us:

📨 esmatullahsangary@gmail.com

Developer: Esmatullah Sangary

🔄 Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal reasons. Any updates will be posted within the app and on this page. The "Last Updated" date at the top of this policy will be revised accordingly.

Continued use of the app after changes indicates your acceptance of the updated policy.

            📌 Summary of Key Points:

            ✅ Zero Data Collection by Afg DNS – We don't collect any personal information

            ✅ Local VPN Only – No internet traffic is routed through external servers

            ✅ Full User Control – Start/stop protection anytime, plus per‑app exclusion

            ✅ Third‑Party Ads – Yandex Ads and Google AdMob may collect device data as per their policies

            ✅ Open Communication – Contact us with any questions

🔒 Your privacy is our priority. Afg DNS is committed to protecting your data.