Legal
Terms of use
The product
Keeplatch is an on-device per-app firewall. This app uses Android’s local VPN interface. Traffic stays on the device and is not sent to a remote VPN server. TLS payloads are not opened.
You choose which apps may use Wi-Fi and which may use mobile data. New and reinstalled apps start blocked on Wi-Fi and mobile data. You explicitly allow each network type. Unknown and unsupported flows stay blocked.
Engine limits
IPv4 TCP and UDP that the pinned engine can forward may pass when a rule allows them. IPv6 stays BLOCK_ONLY until a later measured engine says otherwise. Classic UDP DNS query names can drive a live domain decision. CNAME chains and TCP port 53 enforcement are not live. Unmeasured soak, battery, or handover results are not claimed here.
Only one VPN can be active. Another VPN cannot run at the same time. Without system always-on and lockdown, Android restores normal networking if this service stops. Work profiles, tethering, inbound traffic, multicast, and rooted software are outside the V1 guarantee.
Keeplatch needs to see every installed app so each one can have its own Wi-Fi and mobile-data rule. A short allowed-apps query list cannot do that core job.
Access, trial, and renewal
Starting the firewall needs an active trial or subscription. There is no permanently free firewall and no daily allowance of free hours. Without one you can still read how the app works, what it stores and where its limits are, see the prices, restore an earlier purchase and manage your subscription.
Premium access is one subscription with monthly and yearly plans. New customers may start a 7-day trial. Play decides eligibility. The trial is offered once for this subscription, not once per plan.
Free for the first 7 days. Unless you cancel in Google Play before the trial ends, the quoted total is charged and the subscription renews automatically. After the 7-day trial, the selected plan renews automatically at the quoted total. Cancel in Google Play before the trial ends.
Each period renews automatically until you cancel in Google Play. Cancelling stops the next charge — protection keeps working until the period you have already paid for ends. After access ends, protection stops in view; your rules stay on the device.
Internet is not held hostage
Your internet is never cut off to push you into paying. When protection is not active the app simply stops filtering. If you have turned on Android’s always-on VPN with “Block connections without VPN”, that system setting can still cut connectivity when the firewall stops — you can turn it off in Android settings.
Refunds
Purchase disputes and refunds go through Google Play. A refund or revoke ends firewall access.
Privacy
The published privacy policy is at keeplatch.kayastack.com/privacy. Packet payload and package name are never logged. The Play purchase token and subscription status are processed by Google Play and the verification server. This is not all data staying on the device.