Nox Privacy Policy
Effective 22 August 2026
Nox blocks ads, trackers, malware and phishing on your iPhone and iPad. It does this entirely on your device.
Nox has no servers, no accounts and no analytics. We cannot see what you browse, because none of it reaches us.
What Nox collects
Nothing. There is no Nox account, no login, no identifier, and no backend we operate that your device reports to.
Where filtering happens
Nox downloads blocklists and compiles them into a database stored on your device. Every DNS query your device makes is matched against that local database, inside the app's own network extension. Matching happens on the device and the result never leaves it.
This is the whole reason Nox works the way it does: your browsing is not sent anywhere to be checked.
The VPN profile
Nox installs a VPN profile. iOS offers no other way for an app to filter DNS across every app on a non-supervised device.
Your traffic is not routed through any server we run. The profile exists so the system hands DNS queries to Nox's on-device filter. We do not operate a VPN service, we do not proxy your connections, and there is no server of ours in the path.
What does leave your device
Two things, both of which you control.
1. DNS queries Nox does not block
A query Nox allows still has to be answered. Nox forwards it, over encrypted DNS (DoH), to the resolver you choose in Settings. That provider receives the domain and your IP address, and their privacy policy governs what they do with it — not this one.
The choices Nox offers, all named plainly:
| Provider | Endpoint |
|---|---|
| Cloudflare (default) | cloudflare-dns.com |
| Cloudflare (blocks malware) | security.cloudflare-dns.com |
| Quad9 (default secondary) | dns.quad9.net |
dns.google | |
| AdGuard (unfiltered) | unfiltered.adguard-dns.com |
Encrypted DNS means the network you are on — a café, an airport, your mobile carrier — cannot read these queries. Your chosen resolver can. This is true of all DNS on every device; Nox reduces how much reaches them by answering blocked queries itself.
2. Blocklist downloads
To keep filtering current, Nox fetches blocklists from their publishers, and from any URL you add yourself. Those servers see your IP address and which list was requested, as with any file download. Nox sends no identifier, no account, and nothing about your browsing with these requests.
What Nox stores on your device
All of this stays in Nox's private storage. None of it is transmitted.
- Statistics — counts of what was blocked, by category. Numbers only; no domain names.
- Activity log — the domains Nox blocked. Off by default. If you turn it on you choose how long entries are kept (24 hours, 7 or 30 days), and you can clear it at any time.
- Your rules and lists — the domains you allowed or blocked, and the URLs of lists you added.
- Settings — your profile, categories and resolver choice.
Deleting Nox removes all of it. There is no copy anywhere else.
Subscriptions
Purchases are handled entirely by Apple. Nox receives only the result — whether a subscription is currently valid — through Apple's StoreKit. We never see your payment details, and there is no card number, billing address or Apple Account for Nox to store, because none is ever sent to us.
What we never do
- We do not sell, rent or share your data with anyone. There is no data to sell.
- We do not track you across apps or websites, and Nox requests no tracking permission.
- We include no third-party analytics, advertising or attribution SDKs.
- We do not decrypt, inspect or modify your HTTPS traffic. Nox installs no root certificate and performs no interception of any kind.
Children
Nox is safe for all ages and collects no personal information from anyone, including children under 13.
Changes
If this policy changes, the effective date above changes with it, and material changes will be noted in the app's release notes.
Contact
Questions about privacy in Nox: [email protected]