Hagiazomai · Being Made Holy

The filter

Two layers, because one is not enough

Each layer covers what the other misses. Hagiazomai turns on the first for you and walks you through the second.

Apple's own filter

Blocks adult websites in Safari and in apps that use Safari to show web pages. It also turns off private browsing.

A DNS filter

Works in every app and on every network, Wi-Fi and cellular. It blocks adult sites, sites that mix adult content in, and the proxy and VPN sites used to get around filters, and it turns on SafeSearch. It is run by CleanBrowsing.

Checked, not assumed

Hagiazomai checks both layers every time it runs. If one is off it says so plainly, shows how to turn it back on, and tells your partner.

Your rules

You decide what is blocked

Everything is chosen in Apple's own picker. Hagiazomai never learns which apps you picked. It only holds a token iOS gives it.

Block whole categories, such as Social or Entertainment.
Let single apps through a blocked category.
Block single apps whatever their category. This list always wins.
Daily limits for chosen apps, and a downtime window when everything is blocked except the apps you let through.
Blocking takes effect at once. Unblocking waits 24 hours and can be cancelled. A decision made at a weak moment gets a day to be reconsidered.

Partners

Someone who knows

A partner is a friend you trust. He is told when something changes, never what you were doing.

Pair in person. One phone shows a code, the other scans it. Both show the same four words, which you read aloud to confirm.
He holds the Screen Time passcode. At pairing your partner sets it on your phone and keeps it, so Screen Time settings cannot be changed without him.
He is told when a filter turns off, when a rule starts loosening and when it applies, when you tap Close on a blocked app, and when the phone's clock is moved.
He is never told which app, which site, which category, or how long you used anything. The app could not tell him if it tried.
Silence is a signal too. If your phone has not checked in for two days, he sees that.

Alerts are end-to-end encrypted. They pass through Apple's iCloud as ciphertext that only your partner's phone can open. We run no server and hold no keys. You can be someone's partner as well as having one.

Honest about its limits

What it cannot do

You can always undo restrictions you put on your own phone. Hagiazomai does not pretend otherwise. It makes undoing them slow and visible.

It cannot filter adult content inside an app that carries its own. Block those apps with your rules.
It cannot see or remove content already downloaded.
A VPN that brings its own DNS goes around the DNS filter.
If the app is deleted or its Screen Time access is removed, it may not get the chance to report it. Your partner sees the missing check-ins.
iOS counts the minutes for daily limits, and it can be a few minutes early or late.

The name

hah-gee-AH-zo-my

ἁγιάζομαι

Greek for "I am being made holy." It is the present passive of the verb in Hebrews 10:14: the work is God's, and it is still going on. The app is a tool for that road, not the road.

Download

Coming to the App Store

Hagiazomai is in testing and will be free on the App Store for iPhone. It needs iOS 26.4 or later.

Support

Questions and help

Write to john@jjlarson.com. If something is blocked and you need a way out: deleting the app, or turning off its Screen Time access in Settings, removes everything it applied.