Privacy and data

Lava Security is designed so routine domain filtering happens locally on your device. Lava Security LLC does not receive your routine browsing history or a stream of domains your device contacts. The app does still make some network requests to keep your protection data current (see below), but those are not used by Lava as a browsing-history feed.

No. Routine domain filtering happens locally on your iPhone, and Lava Security LLC does not receive your routine browsing history or a stream of domains your device contacts. Activity counts and any optional local domain history stay on your device for your own diagnostics, where you can view them under Activity.

Filtering decisions are made on your device, but the app may contact Lava Security servers to fetch catalog metadata and safety guardrail metadata, and when you enable a third-party blocklist it fetches that list directly from its upstream source URL or a custom URL you entered. These requests help update protection data and are not used by Lava as a browsing-history feed. You can review your filter sources under Filters.

Bug reports are designed to avoid including your browsing history by default, so you can send the standard report safely. Leave out anything you do not want us to see, because if you choose to add a domain, screenshot, or other sensitive detail to a support message, we will receive it. When in doubt, email support@lavasecurity.app and describe the issue without pasting sensitive data.

Local activity counts and optional local domain history live only on your device and stay there until you clear them or remove the app. You can clear them anytime from Clear Local Logs, or review your options under Privacy & Data.

For data on your iPhone, clear it yourself using Clear Local Logs. To request deletion of support messages or account-related data associated with your email address, contact legal@lavasecurity.app.