Uninstall intercept
Blocked at OS level through Android's PackageManagerService. The system rejects the request before it reaches a dialog.
Anchor is a two-app system: Anchor Parent on your phone, Anchor Child on your kid's. A 6-digit pair code links them. Ten layers of bypass-defeat hold the line.
Anchor is a device-level parental control app for Android built around bypass-resistance, not content surveillance. It runs as a two-app system: Anchor Parent on the adult's phone, Anchor Child on the kid's device, linked by a 6-digit pair code. Ten enforcement layers close the bypass routes kids actually try. Device Admin rejects uninstall attempts at the OS level. Force-stop is gated. Schedule enforcement runs on server-truth time, so changing the device clock to skip bedtime does nothing. Tamper events that happen offline are queued with their original timestamps and flushed to the parent app the moment the device reconnects. Anchor does not read messages, photos, keystrokes, or browsing history. Android ships first in V1 (2026); iOS follows in V2 later in 2026. Pricing is a 14-day free trial, then Family at $4.99 per month for up to three children or Family Pro at $9.99 per month for unlimited children. One honest V1 limit: the OS-level uninstall block holds, but parent-side notifications when a child attempts to uninstall are not yet shipped, so the defense works while visibility into the attempt is limited at launch. More at https://www.getanchor.store/.
The reviews are full of the same story. Parents install Family Link, Bark, or Qustodio. The kid figures out the workaround in days. The app stays installed but does nothing. Quiet failure is the default.
Kid long-presses the icon, hits uninstall, confirms. The whole system is gone in under five seconds. Most apps cannot prevent this.
Settings → Apps → Force stop. The background service dies, enforcement disappears, and the parent never knows because the dashboard still says "active."
Bedtime starts at 9:00 PM? Set the device clock to 6:00 AM. The schedule unlocks. This works on every parental control that trusts device time.
Flip airplane mode. The control app cannot phone home, so it fails open or stops enforcing. Kid gets the rest of the night unsupervised.
Every one of these bypasses takes under a minute to learn on TikTok. Anchor was built specifically to close them.
Each layer maps to a real attack vector. End-to-end validated in our Phase C hardening cycle: uninstall blocked at the OS, force-stop gated by Device Admin, server time defeats clock tampering, pair state survives reboot, offline tamper events queue and flush with original timestamps.
Blocked at OS level through Android's PackageManagerService. The system rejects the request before it reaches a dialog.
Device Admin policy gates force-stop behind your parent passcode. Kid cannot kill the service without you.
Anchor monitors its own permissions every second. Revocation re-prompts immediately and surfaces in the parent feed.
Foreground service restarts within seconds when terminated. Validated against Phase C kill-and-recover scripts.
Schedule enforcement uses our backend's clock, not the phone's. Spoofing the device time changes nothing.
Parent passcode is hashed with Argon2id and lockouts ramp on retry. Brute force is not in the budget.
The parent-child pairing lives in encrypted storage and reloads on boot. Reboot does not unlink Anchor.
The 6-digit code resolves to an encrypted JWT signed by our backend. Spoofed codes never validate.
Anchor requests OEM-specific battery exemptions during setup so the service stays alive on Samsung, Xiaomi, OnePlus, and friends.
Enforcement keeps running offline. Tamper events queue locally and flush to the parent app on reconnect, original timestamps preserved.
Anchor is built for the 90% of parental control work that matters: deciding what runs and when, and knowing when something is off.
Bedtime, school hours, study windows. Recurring weekly schedules with one-off overrides for sick days and weekends.
Three policies per app: always-block, always-allow, or scheduled. Apply across the kid's whole library in seconds.
Force-stop, permission revocation, clock change, offline disconnect. Each event is surfaced in the parent feed in real time when the device is online.
Run 1, 2, 3, or unlimited children from one parent dashboard. Each kid gets their own schedule and app policy. One pair code per device.
Grant a temporary access window with one tap. Set the duration, share the unlock code, and Anchor re-locks automatically when it expires.
Which apps were opened and for how long. Foreground-only. We do not capture what your kid types, photos, browsing, or chat content.
One subscription covers your whole family. We charge for enforcement, not for reading your kid's messages.
Try Anchor on one kid, no card required.
After 14 days, choose Family or Family Pro to continue.
Everything most families need.
For larger families and stronger control.
12 spots. Lifetime free Family Pro. A 15-day feedback commitment in return. Here is exactly what you get and what we ask back.
12 spots. First-come, first-served. Enter your name and email below.
When Closed Testing opens, the first 12 founders get a sideload invite by email, before public launch.
Founders pay nothing, ever. Lifetime access to Family Pro: unlimited children, all features, every current and future v1.x release. No monthly fee, no expiration, no renewal, for the lifetime of the product.
In return, founders commit to sharing feedback within 15 days of receiving their Closed Testing invite. Real feedback from real parents is how we ship v1.0 right.
Two fields. Lifetime free Family Pro for the first 12 founders. You'll be the first to know when Closed Testing opens.
We'll email you the moment Closed Testing opens. Watch for a note from support@getanchor.store.
Lifetime free Family Pro for the first 12 founders. Feedback expected within 15 days of your invite. No spam, unsubscribe anytime.
PackageManagerService sees Anchor as a Device Admin and refuses to remove it. The kid cannot uninstall without your parent passcode, full stop. (V1 blocks the uninstall itself; richer parent-side visibility on uninstall attempts ships in a follow-up release.)The whole pitch of Bark and Qustodio is that they read your kid's messages and tell you what's inside. Anchor doesn't. The data we collect is the minimum needed to enforce the schedule you set.
We never see message text, photos, browsing, keystrokes, microphone, or camera. Foreground app name and duration only.
JWT pairing tokens are encrypted on the wire. Parent passcodes use Argon2id. Pair state lives in Android's encrypted storage.
Anchor Child is for use under parental direction. No third-party advertising SDKs, no behavioural tracking, no data resale. Ever.
Unpair a child and the associated activity wipes from our backend within 30 days. Account deletion is a one-tap operation, not a support ticket.
Anchor V1 ships on Android in 2026. Founders Offer closes after 12 sign-ups. Get on the list.
No spam. One email when V1 ships. Unsubscribe in one click.