Most "kosher phone" solutions rely on content filters — proxy-based DNS or app-level blocklists. Those work until a determined user installs a VPN, changes DNS, or sideloads an app. Our protection doesn't rely on any of that.
We use Apple's own enterprise device-management protocol (MDM) combined with **Supervised Mode**. This is the same stack Fortune 500 companies use to lock down employee iPhones. The restrictions are encoded at the OS level and survive everything — even a factory reset.
The six layers of enforcement
Browsers Blocked
Safari is fully removed. Chrome, Firefox, Brave, and every other browser cannot be installed. No web browsing surface, period.
App Store Disabled
New app installation is blocked at the OS level. The only apps on the device are the ones on your approved whitelist, pushed by our MDM.
AirDrop & Sharing Blocked
AirDrop, file sharing between devices, and peer-to-peer transfer are turned off. Nothing bypasses the filter by arriving through a neighbor's phone.
VPN & Profile Installation Blocked
New VPN profiles and configuration profiles cannot be installed. The classic "install a VPN to bypass the filter" trick is prevented at the system level.
Factory-Reset Proof
Even after a full erase, the device re-enrolls in our MDM automatically on first boot. Supervised Mode cannot be removed by the user.
Privacy First
We manage the device policy — we don't see your messages, calls, photos, or browsing (there is no browsing). MDM is policy, not surveillance.
What still works
Everything the phone is actually for. Phone calls, iMessage, FaceTime, contacts, calendar, camera, photos, the KolBo portfolio (siddur, zmanim, minyan finder, digital library, shiurim library, more), Google Maps if approved, email if approved, banking apps if approved.
The Kosher iPhone isn't a flip phone in iPhone clothing. It's a real iPhone with carefully curated access.
Why enterprise-grade matters
Consumer content filters — Screen Time, basic DNS filters, app-based blockers — have one thing in common: the user can bypass them. Some take 30 seconds of Googling. Some require a factory reset. All of them can be defeated by a determined adult or curious child.
Supervised Mode via MDM has a different design goal: make policy changes **impossible from the device itself**. The only way to lift a restriction is through the MDM management console — which is controlled by us, not the user.
This is why **Supervised iPhones are used by schools, government agencies, and corporations**. It's the highest level of device lockdown Apple provides. We brought it to the frum home.
Frequently Asked Questions
Can't someone just install a browser from a file?
No. App installation is blocked at the OS level in Supervised Mode. There is no file-based install path — not through iTunes, not through AirDrop, not through any third-party tool.
What about Screen Time? Isn't that already on every iPhone?
Screen Time can be bypassed by anyone with 30 seconds and a web search. It was designed for parental nudging, not enforcement. Supervised Mode is a different tier entirely — it cannot be bypassed without wiping the device, and even that doesn't help (it re-enrolls automatically).
Can I request to add an app?
Yes. Text or call our team, describe what you need, and if approved, we push it to your device the same day via MDM — no interaction required on your side.