Hardcore lock
No early cancellation. Ending a pledge — or switching off any protection: the guard, the DNS filter, a blocklist entry, the uninstall lock, even erasing your data — costs a 24-hour cooling-off first.
For the Philippines · free, no account
Online sabong, colour games, jili apps and casino trips are engineered to keep you playing. Tigil lets you decide once, while you are calm — and makes the next impulse much harder to act on.
The problem
You are not up against a personal weakness. Every colour game, every online sabong app and every jili machine has a team paid to keep you playing — variable rewards, near-misses, one-tap top-ups, payday pushes.
So willpower alone is not the product. Tigil is built for 1am: the moment when the impulse is in charge and the clear-headed version of you is asleep.
“The best time to decide was before the urge. Take the pledge now, while you are calm.”
How it works
The first layer is the one that counts: a decision made calmly. The two behind it make it expensive to undo.
Pick the categories you are banning, how long it runs, and optionally a witness. Type your commitment phrase. Once it is sealed, the pledge cannot be edited.
Sealed with SHA-256 plus a device secret that never leaves the keystore.
On Android the Guard covers banned apps with a deterrent screen and answers gambling lookups with “not found” — including while Tigil itself is closed.
An in-app DNS filter: no third-party app to configure.
An urge is a wave; it crests and falls, usually inside 20 minutes. Every one you surf is logged, and the journal turns it into triggers you can plan around.
Every tool logs urge strength before and after.
Inside the app
Everything here exists for one reason: making a relapse cost more than the impulse.
No early cancellation. Ending a pledge — or switching off any protection: the guard, the DNS filter, a blocklist entry, the uninstall lock, even erasing your data — costs a 24-hour cooling-off first.
A native blocker: watches the foreground app and covers banned ones with a deterrent plus a “breathe instead” button that opens the breathing exercise.
A split VPN that captures nothing but DNS: listed domains get NXDOMAIN, everything else is forwarded over DNS-over-HTTPS. No traffic is tunnelled anywhere else.
Optional subscription to an open, daily-updated list of known gambling sites (HaGeZi or StevenBlack), covering the short-lived .com.ph mirrors no hand-kept list can track.
While a hardcore pledge is active, Tigil cannot be removed by a long-press, and the system shows your own warning before the lock is revoked. Every revocation hits the ledger.
4-7-8 breathing, a 15-minute delay-and-substitute timer, a call-a-person list and a quick journal. Each round records urge level before and after.
Mood, urge strength and trigger tags, turned into top triggers, a coping rate and an urge-by-weekday chart in your own local time.
Release needs wall time and a trusted monotonic accumulator to agree. Setting the phone clock forward gains you nothing.
Tagalog covers every control, prompt, journal note and the native block screen — Flutter's own dialog strings follow the same switch. Long-form guides ship in English first.
Stated honestly
You should know this before you trust the app. We would rather be honest than promise a lock we cannot deliver.
Privacy
No accounts, no servers, no analytics package anywhere in the dependency tree. Your urges, notes and streaks never leave the device — because a record of your worst nights should not be anybody's business but yours.
Settings offers a JSON export so the record belongs to you. The only outbound intent is a tel: dial of a crisis hotline that you tap.
| Journal, urges, streaks | Never leaves the device. |
|---|---|
| Account / sign-in | None. There is nothing to register. |
| Analytics / ads | Zero. Not in the dependencies. |
| Community list download | A plain HTTPS request for a public file, once a day. Nothing about you is sent. |
| DNS filter (if switched on) | Hostnames you look up go, encrypted, to the resolver you chose. Tigil keeps no log; the counter stays on-device. |
| Hotline call | The system dialer, when you tap it. |
Help
An app is not a person. If gambling is hurting you or someone you love, these Philippine lines are staffed, confidential and free.
The second-best time is right now, while you are calm — not mid-urge.
Build 1.0.0+1 · 53.7 MB — worth downloading on Wi-Fi.
Because this is an APK rather than a store listing, your phone will ask you to allow installs from this source once, in the browser or file manager you used to download it. Nothing else about installing it is unusual: no account, no payment, no setup on our side — we have no servers to set up.
Questions
Because gambling lives in the impulse, and a 24-hour window is the only thing in the app that outlasts one. It is not a punishment; it is the delay that lets the clear-headed version of you vote again.
The same door is used for cancelling a pledge, turning off the guard, deleting a blocklist entry, revoking the uninstall lock and erasing all data. That is the lock working, not a bug.
No. Tigil is free, with no ads and no accounts, and every feature is available to everyone. There is an optional in-app tip that goes directly to the developer as a person-to-person transfer — it unlocks nothing, least of all the lock.
You can, and we say so plainly above. No app can stop a factory reset or a rooted device.
But every escape route leaves a trace. Revoking the device admin writes a ledger event — admin_removed_during_pledge — and puts an urge-tagged note in your journal. A relapse stops being invisible, and that is often the thing that changes your mind.
Your pledge carries a SHA-256 digest over its canonical JSON plus a random device secret that never leaves the keystore. The seal is mirrored in two places, so editing either copy mismatches. A mismatch shows a banner and marks the streak unverified — it never wipes your data.
Optional. But recovery research is blunt about it: a pledge someone else knows about survives bad nights better. The witness is stored on your device only — Tigil never contacts them, because it has no server to do it with.
The mechanism is generic, but the list is not: the curated seed targets sabong, colour games, jili, PJG and short-lived .com.ph mirrors, and the crisis lines are Philippine. The pledge and toolkit travel; the blocklist and hotlines do not.