Rethink DNS + Firewall + VPN is an open-source Android app from Celzero that combines three functions: a firewall, a network monitor and encrypted DNS. The firewall cuts off internet access per app, for example by screen state or a custom list of domains and IP addresses, without root. DNS queries are sent over DNS over HTTPS, Oblivious DoH, DNS over TLS or DNSCrypt to a resolver of your choice; by default this is the Rethink resolver with blocklists against malware and ads. Traffic can also be routed through SOCKS5, HTTP CONNECT or WireGuard. The app is distributed through Google Play, F-Droid and the project website.
Celzero Pvt Ltd is an Indian company, so the provider is based outside the EU. The app is open source under Apache-2.0. According to its privacy policy, the resolver does not log requests. It runs on third-party infrastructure: the stub resolvers on Cloudflare's network and the recursive resolver on Fly.io. If you choose your own resolver, where processing takes place depends on that choice.