TeleBloq Privacy Policy
Last updated: October 28, 2026
This policy explains how TeleBloq handles personal information when you use the Android app (package br.com.natario.telebloq) and this website.
TeleBloq is operated by NATARIO LABS DESENVOLVIMENTO DE PROGRAMAS LTDA, a Brazilian limited liability company registered in the CNPJ (Brazil's national business registry) under no. 67.312.898/0001-04 (“Natario Labs,” “we,” “us,” or “the company”).
As a Brazilian company, we comply with Brazil's General Data Protection Law (Law No. 13,709/2018, the LGPD). If you live in the United States, section 15 explains the rights that some state privacy laws give you.
1. Who is responsible for your data
- Legal name: NATARIO LABS DESENVOLVIMENTO DE PROGRAMAS LTDA
- Trade name: Natario Labs
- Brazilian company registration (CNPJ): 67.312.898/0001-04
- Address: Av. Epitácio Pessoa, 2990, apto 703, Lagoa, Rio de Janeiro/RJ, CEP 22471-003, Brasil
- Contact and privacy: WhatsApp +55 21 99607-6777 or email contato@natariolabs.com.br
2. Who this policy applies to
- people who use the TeleBloq app;
- people who visit this website;
- people who contact us through the channels on this page.
TeleBloq is meant for people 18 or older, or minors represented by a parent or legal guardian. It isn't directed to children or teens, and we don't knowingly collect personal information from minors.
3. What the app does with your data
3.1. Contacts
To decide whether a call rings, TeleBloq checks your contacts when the call comes in and sees whether the number matches a saved contact. This check happens entirely on your phone, using Android's own call screening feature.
The app doesn't copy, store, send or share your contacts. Natario Labs has no server with your contacts.
3.2. Blocked calls, exceptions and preferences
The app keeps, only in your phone's storage:
- the history of blocked calls: the number (when it's identified), the date and time, and why it was blocked (not in your contacts, or a private number), limited to the most recent entries;
- your list of exceptions: numbers you've marked to ring even though they aren't in your contacts;
- your preferences, such as whether to block private numbers, and how long your subscription is valid, so blocking works offline;
- the last 10 calls that reached the app, without the number: the date and time, whether they rang or were blocked, the reason, and the response time, for the Diagnostics screen;
- the app's language, so your phone's alerts come out in the same language.
The app also checks, on your phone, the country of your SIM card (or of the network), to choose the app's language and other settings that depend on the country. This information doesn't leave your phone.
On the Diagnostics screen, in Settings, the app checks on your phone what blocking needs: permissions, battery, notifications, the Android version, your phone's make and model, the default phone app, and whether other caller ID apps are installed (such as Truecaller). None of this leaves your phone unless you tap “Send to support,” which opens WhatsApp with the results and the latest calls (without numbers or contacts), so you can review them before sending.
This data stays on your phone, protected by Android's app isolation. You can clear the history and the exceptions in the app at any time, and uninstalling the app deletes all of it. The “Delete my data” button, in Settings, deletes all of this at once and also asks for your record at RevenueCat to be deleted (section 3.3).
3.3. Subscription and payment
Your subscription is sold and charged by Google Play (Google LLC). Payment details, such as your card number, stay with Google Play only: TeleBloq and Natario Labs never have access to them.
To validate and manage your subscription, the app uses RevenueCat (RevenueCat, Inc.), which receives:
- an anonymous identifier created by the app itself;
- the product you subscribed to, the subscription status (active, canceled, renewing or expired), and its start, renewal and expiration dates;
- the country and currency of the purchase, the app's language (English, Spanish or Portuguese) and the country of your Google Play account, so we can break down downloads and subscriptions by country;
- so it can tell Meta and Google about subscription charges (sections 3.5 and 3.7), the random identifier that Meta's measurement tool creates on your phone and the app instance identifier created by Firebase. Along with them, RevenueCat's tool in the app automatically sends the Android advertising ID, your IP address and your phone's operating system version;
- your phone's notification delivery identifier (section 3.7), so we can notify only you, for example, when Google Play can't charge your subscription;
- which of our notifications you tapped and when, so we know how many people open each one;
- whether your phone lacks the caller ID feature the app uses, so we know how many phones aren't compatible;
- when a purchase doesn't go through (you back out on the Google Play screen, the payment is pending, there's an error, or the subscription doesn't become active), the reason, the time and the plan, so our support team knows what happened;
- the install source tag (section 3.4).
While you have a subscription, or had one in the last 60 days, the app checks its status with RevenueCat every 12 hours, even when the app is closed, using the same anonymous identifier, so blocking doesn't stop when your subscription renews and you haven't opened the app.
RevenueCat doesn't receive your contacts, your call history or your phone number. Its privacy policy is at revenuecat.com/privacy.
3.4. Where your install came from
If you got to Google Play through one of our ads or through our website, Google Play gives the app the tag that was in the link: the campaign name and the ad name or, if there was no ad, the website you came from before ours (for example, instagram.com), or just “site” if you came to us directly. For Meta app install ads, the tag also includes an encrypted Meta code that only identifies the campaign and the ad.
The app reads this tag once per install (if Google Play doesn't respond, it tries again later) and saves it in your RevenueCat record, so we know what brings us subscribers. If it can't read the tag, it only records that it couldn't. We create this tag ourselves, and it doesn't identify you. What Meta, TikTok and Google receive is described in sections 3.5 to 3.7.
3.5. Meta ad measurement
To learn which of our ads on Facebook, Instagram and Meta's other services bring installs and subscriptions, the app includes the ad measurement tool from Meta (Meta Platforms, Inc., the Facebook SDK). This tool sends Meta:
- every time you open the app (the first time counts as an install): the app and its version, the operating system and technical details about your phone (model, language, time zone, carrier, screen size, number of processor cores and storage space), the store the app was installed from, the Android advertising ID, a random identifier created by the tool itself, and the install source reported by Google Play;
- if the Facebook app is installed on your phone, the attribution identifier it provides, which lets Meta link the install to the ad that led to it;
- when the free trial starts, a notice that it started;
- when the subscription screen with the free trial opens, a notice that it opened, with no amount;
- when you subscribe, the product and the subscription price;
- if your phone offers Android's own ad measurement, a notice that the install or the subscription came from an ad, which the system delivers to Meta in aggregate, without saying who you are;
- if your phone offers Android's own ad features, the topics of interest that Android infers from how you use your phone (for example, “sports” or “travel”) and your phone's inclusion in remarketing audiences, which are stored on the phone itself and are used later to choose which ads to show.
Subscription charges on Google Play, including the first one after the free trial and renewals, happen even when the app is closed. That's why RevenueCat (section 3.3) also tells Meta about each charge, on our behalf: the product, the amount charged, and the random identifier that Meta's tool created on your phone.
Neither the tool nor RevenueCat sends Meta your contacts, your call history, your phone number, your name or your email. Meta uses this data to attribute the install and the subscription to the ad that led to them, to improve the delivery of our ads, to show them to people with a profile similar to our subscribers, and to show them again to people who have already installed the app, under Meta's Privacy Policy, where you can also manage your ad preferences.
The advertising ID belongs to Android, not to us: you can delete or reset it at any time in your phone's settings, in the ads section (usually Settings › Google › Ads; the path varies by manufacturer). Without it, Meta still receives the other events. Android's ad features (ad topics, app-suggested ads and ad measurement) are also under your control, usually in Settings › Privacy › Ads › Ad privacy, where you can turn each one off.
3.6. TikTok ad measurement
To learn which of our ads on TikTok bring installs and subscriptions, the app includes the ad measurement tool from TikTok (the TikTok App Events SDK, from the TikTok for Business ad platform). This tool sends TikTok:
- every time you open the app (the first time counts as an install) and when you come back the day after installing it: the app and its version, the operating system and technical details about your phone (model, language, screen size, connection type and IP address), the store the app was installed from, the Android advertising ID, a random identifier created by the tool itself, and the install source reported by Google Play.
The tool doesn't send your contacts, your call history, your phone number, your name or your email. It also has features that record the screens and taps in the app and take screenshots: in TeleBloq, those features are turned off on your phone itself, so nothing on your screen, such as blocked numbers, leaves your phone. TikTok uses this data to attribute the install and the subscription to the ad that led to them, to improve the delivery of our ads, and to show them to people with a profile similar to our subscribers, under TikTok's Privacy Policy. The advertising ID is under your control, as explained in section 3.5.
The start of the free trial and each subscription charge (the first one and renewals, with the product and the amount) are reported to TikTok from our server, based on RevenueCat's data (section 3.3), along with your phone's Android advertising ID. This report doesn't include contacts, calls, phone number, name or email.
Also, every time someone taps one of our ads on TikTok, TikTok tells us the advertising ID of the phone where the ad was tapped, and the campaign and the ad. We keep only a scrambled version of that identifier (a code that can't be turned back into it), for up to 30 days, and compare it with the advertising ID of the phone where TeleBloq was opened (section 3.3), only to know which ad brought the install. We don't use this comparison for anything else or share it with anyone. If your phone's advertising ID is deleted or turned off, the phone isn't counted.
3.7. Google ad measurement and notifications
To learn which of our ads on Google (on Search, YouTube, Google Play, and partner sites and apps) bring installs and subscriptions, the app includes Google Analytics for Firebase (Google LLC). This tool automatically records and sends Google:
- the app's first open, the start of each session and how long the app stays open, app and system updates, and uninstalls: with the app and its version, the operating system and technical details about your phone (model and language), your approximate region, which Google infers from your IP address (the city or state, never your exact address), the Android advertising ID, a random identifier created by the tool itself, and the install source reported by Google Play;
- when the free trial starts, a notice that it started;
- purchases made in the app through Google Play: the product and the subscription price.
Because subscription charges happen even when the app is closed, RevenueCat (section 3.3) also tells Google Analytics, on our behalf, about the start of the free trial and each charge, including the first one after the trial and renewals: the product, the amount charged, and the app instance identifier created by Firebase, which changes if you reinstall the app.
Google Analytics doesn't receive your contacts, your call history, your phone number, your name or your email. Google uses this data to count, in Google Ads, the installs and subscriptions that came from each ad and to improve the delivery of our ads, under the Google Privacy Policy and the page How Google uses information from sites or apps that use our services. The advertising ID is under your control, as explained in section 3.5.
The app can also receive notifications from us, with news and reminders, through Google's Firebase Cloud Messaging. To deliver them, Firebase creates a delivery identifier for the app on your phone, and the app tells Firebase which group your phone is in (subscriber, on a free trial, or not subscribed) and the app's language, only so we can choose who gets each notification. That group doesn't include your name, phone number, contacts or calls. Notifications only appear if you allowed the app's notifications, arrive in the “TeleBloq news” channel, and can be turned off in Android's notification settings without losing the app's alerts.
3.8. What the app doesn't collect
- the content or a recording of your calls: the app never answers a call, it only decides whether it rings;
- messages, texts (SMS), your phone's location (the app doesn't ask for that permission; the approximate region in section 3.7 is inferred by Google from your IP address), the camera, the microphone, files or hardware identifiers;
- usage statistics: apart from the events in sections 3.5 to 3.7, the app doesn't send usage data to anyone.
3.9. This website
This website is hosted on Vercel, which logs technical access data (IP address, browser, date and time) for the hosting service's standard operation and security period. We use Vercel Web Analytics to count visits in aggregate, without cookies and without identifying anyone. This count breaks visits down by source (the ad or website the person came from) and by device type (Android, iPhone or computer), and counts how many people tapped the Google Play button, so we know which ads bring people who install the app.
If you came through a campaign link or from another website, this site keeps, in its own cookie, only the campaign name or that website's address (for example, instagram.com, never the page you visited), so your install carries that source to Google Play. This cookie doesn't identify anyone and expires after 30 days. You can delete or block it in your browser.
4. Android permissions and what they're for
- Contacts (read): to check, on each call, whether the number is in your contacts. Nothing is copied.
- Caller ID & spam app (the system role
ROLE_CALL_SCREENING): lets Android hand each incoming call to the app before it rings, so the app can let it through or decline it. - Notifications: to show the app's alerts (for example, that blocking is off) and the news in section 3.7. It's optional: without it, blocking works the same.
The app doesn't ask for any other permission. You can revoke any of them in Android's settings; without the first two, blocking stops working.
5. How we use data
- to decide, on your phone, whether a call rings or is declined;
- to show you the history of blocked calls and let you allow numbers;
- to validate your subscription and keep the app working while it's active;
- to measure which of our ads bring installs and subscriptions and show them to the people most likely to subscribe (sections 3.5 to 3.7);
- to send news and reminders about the app to people who allowed notifications (section 3.7);
- to provide support when you contact us;
- to meet the legal, tax and accounting obligations of selling the subscription;
- to keep this website secure and working.
Natario Labs doesn't sell personal information for money. The data that Meta, TikTok and Google receive is used only to measure and improve our ads and never includes your contacts, your calls or your phone number. If you live in the United States, section 15 explains how some state laws treat this data and how to opt out.
6. Legal bases
Under Brazil's LGPD, we rely on these legal bases:
- Performance of a contract: validating your subscription and making the app work as you signed up for.
- Consent: the contacts, caller ID and notification permissions, which you give in Android and can withdraw at any time.
- Compliance with legal obligations: the tax and accounting records of the sale.
- Legitimate interest: the security and operation of this website, and measuring and targeting our ads with the data in sections 3.5 to 3.7, never with data from your contacts or your calls. The advertising ID is under your control, in Android's settings.
7. Who we share data with
The only third parties involved are:
- Google LLC (United States): selling, charging and managing the subscription through Google Play, measuring our ads with Google Analytics for Firebase, and delivering the app's notifications with Firebase Cloud Messaging (section 3.7), under Google's privacy policy.
- RevenueCat, Inc. (United States): validating and tracking the subscription, with the data in section 3.3, and telling Meta and Google about subscription charges (sections 3.5 and 3.7).
- Meta Platforms, Inc. (United States): measuring and targeting our ads, with the data in section 3.5.
- TikTok (TikTok for Business): measuring and targeting our ads, with the data in section 3.6.
- Vercel, Inc. (United States): hosting this website.
We may also share data under a court order, at the valid request of a competent authority, to exercise or defend legal rights, or in a corporate transaction, always respecting the rights of the people the data is about.
8. International data transfers
Natario Labs is based in Brazil, and Google, RevenueCat, Meta, TikTok and Vercel may process data in the United States and in other countries. When data crosses borders, we rely on the mechanisms allowed by the LGPD and by the law where you live, such as each provider's contract clauses. Your contacts and calls aren't transferred anywhere, because they don't leave your phone.
9. Security
- the app's data stays in the app's private storage, isolated from other apps by Android;
- all communication with Google, RevenueCat, Meta and TikTok is encrypted in transit (HTTPS);
- the app asks only for the permissions it strictly needs (the principle of least privilege);
- there's no company database with TeleBloq users' data, which removes that point of leakage.
No system is completely secure. If an incident occurs that could pose a significant risk, Natario Labs will take the measures the law requires, including notifying the authorities and the people affected when applicable.
10. Retention and deletion
- call history, exceptions and preferences: they stay on your phone until you clear them in the app or uninstall the app;
- subscription data at RevenueCat and Google Play: kept while the subscription exists and for as long as legal, tax and legal-defense obligations require;
- data sent to Meta, TikTok and Google (sections 3.5 to 3.7): each company keeps it for the periods in its own policy; the “Delete my data” button doesn't reach this data, which Natario Labs doesn't hold;
- the scrambled version of the advertising ID we get from TikTok on each ad tap (section 3.6): up to 30 days;
- this website's technical logs: for the hosting service's standard retention period.
11. Your rights
Under the LGPD, you can ask for:
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of data that's unnecessary or processed unlawfully;
- portability, subject to trade and industrial secrets;
- information about who we share your data with;
- withdrawal of your consent (in the app, by revoking its permissions in Android);
- to file a complaint with Brazil's National Data Protection Authority (ANPD).
If you live in the United States, section 15 also explains the rights that some state laws give you.
To exercise your rights, contact us by WhatsApp +55 21 99607-6777 or email contato@natariolabs.com.br and say it's a privacy request. We may ask for information to confirm that the request is yours. We respond free of charge, within the time the law allows.
To cancel your subscription, use Google Play's subscriptions screen. To delete the data on your phone, use the app's options or uninstall it.
12. Data protection officer
- Name: Thiago Torres Natario (the “encarregado” required by Brazil's LGPD)
- Contact: WhatsApp +55 21 99607-6777 or email contato@natariolabs.com.br
13. Changes to this policy
We may update this policy because of legal or technical changes, or changes to the app. The date at the top of this page shows the current version. Significant changes to how we handle data will be posted here before they take effect and, if they require your consent again, we'll ask for it in the app.
14. Contact
- Legal name: NATARIO LABS DESENVOLVIMENTO DE PROGRAMAS LTDA
- Trade name: Natario Labs
- Brazilian company registration (CNPJ): 67.312.898/0001-04
- Address: Av. Epitácio Pessoa, 2990, apto 703, Lagoa, Rio de Janeiro/RJ, CEP 22471-003, Brasil
- Contact: WhatsApp +55 21 99607-6777 or email contato@natariolabs.com.br
The Terms of Use complement this policy.
15. Additional information for US residents
Some US state privacy laws, such as California's, give residents rights over their personal information. Depending on the state where you live, you may have the right to:
- know what personal information we collect about you, and access it;
- have it deleted;
- have it corrected if it's inaccurate;
- opt out of the “sale” of your personal information, and of its “sharing” or use for targeted advertising.
15.1. Sale and sharing
We don't sell your personal information for money. To measure and target our ads, the app sends events about the install, app use and your subscription, with the Android advertising ID, to Meta, TikTok and Google (sections 3.5 to 3.7). Some state laws treat this as “sharing” personal information or as “targeted advertising.” These events never include your contacts, your calls or your phone number.
15.2. How to opt out
- Delete or reset your advertising ID in your phone's settings (usually Settings › Google › Ads; the path varies by manufacturer). It's the identifier that ad platforms use to recognize your phone across apps: once it's deleted, the app's events no longer include it, and TikTok can no longer match your ad taps to the app (section 3.6).
- Turn off Android's ad features (ad topics, app-suggested ads and ad measurement), usually in Settings › Privacy › Ads › Ad privacy.
- Limit the ads you see in Meta's, TikTok's and Google's own ad settings.
- Email us at contato@natariolabs.com.br with “Opt out” in the subject line.
15.3. How to make a request
To exercise these rights, contact us by WhatsApp +55 21 99607-6777 or email contato@natariolabs.com.br and tell us which right you want to exercise. Because the app doesn't ask for your name or email, we may ask for information to find your data and confirm that the request is yours, such as the Google Play order number (it starts with “GPA.”) on the receipt Google emails you. You can make the request yourself or through an authorized agent.
We'll respond within 45 days. If we need more time (up to another 45 days), we'll tell you why. If we deny your request, you can appeal by replying to our answer, and if we deny your appeal, you can contact your state's attorney general.
To delete the data on your phone and your RevenueCat record at once, you can also use “Delete my data” in Settings.
15.4. No discrimination
We won't charge you a different price or give you a different level of service because you exercised these rights. If you revoke a permission the app needs to work, such as access to your contacts, blocking stops working: that's how the app works, not a penalty.
15.5. Children
TeleBloq isn't directed to children under 13, and we don't knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, contact us and we'll delete it.
15.6. Do Not Track
This website doesn't use advertising cookies or let other companies track you across sites, so it doesn't respond differently to Do Not Track signals from your browser. In the app, Meta, TikTok and Google receive the events described in sections 3.5 to 3.7 and may combine them with other information under their own privacy policies; your choices are the ones in section 15.2.
See also the Terms of Use.