ANDROID · DNS FILTERING · RESPONSIBLE PROTECTION

Quiet protection for the things that matter.

MindGuard is a lightweight Android protection app that uses local, domain-level DNS decisions to block configured destinations while allowing ordinary browsing to continue.

See how it works Read the privacy policy

No MindGuard account for core features. No TLS interception. No remote browsing proxy in the current architecture.

MindGuard protectionACTIVE

BUILT FOR CONTROL, NOT SURVEILLANCE

A simple protection layer that stays close to the device.

MindGuard is intentionally narrow in scope. The current app focuses on DNS-level filtering instead of decrypting HTTPS traffic or sending general browsing traffic through a MindGuard proxy.

Local policy decisions

Domain matching is performed locally against the configured not-trusted or blocked-domain policy.

Lightweight network model

The current design avoids TLS interception, tun2socks-style tunnelling, SOCKS proxying, and packet-payload inspection.

Clear user controls

Manage domains, view protection state, and use device-level controls without requiring a MindGuard account.

Optional AI assistance

An optional Gemini integration can classify a predefined candidate list without sending browsing history or page contents.

HOW IT WORKS

A straightforward three-step flow.

Protection starts

Android grants MindGuard a local VPN interface for DNS-level filtering.

The domain is checked

The local decision engine compares the DNS request with the configured policy.

The local decision is applied

A blocked match can receive a local negative DNS response, while allowed or unknown requests can continue normally.

Important limitation: DNS filtering is not full web inspection. Direct-IP connections, some DNS-over-HTTPS or Private DNS implementations, cached results, and other network behaviours may bypass a DNS-only policy.

AUTHORIZED USE

Made for responsible digital protection.

MindGuard is intended for authorized parental-control, self-control, productivity, educational, and research use. Do not install or configure network controls on another person's device without appropriate authorization.