diff --git a/clients/android/app/build.gradle b/clients/android/app/build.gradle
index 3f2e070..3c2c11a 100644
--- a/clients/android/app/build.gradle
+++ b/clients/android/app/build.gradle
@@ -30,8 +30,8 @@ android {
         applicationId "su.cin.rapvpn"
         minSdk 26
         targetSdk 35
-        versionCode 193
-        versionName "0.2.193"
+        versionCode 194
+        versionName "0.2.194"
         buildConfigField "String", "DEFAULT_BACKEND_URL", "\"${normalizeGradleString(defaultBackendUrl)}\""
         buildConfigField "String", "DEFAULT_CLUSTER_ID", "\"${normalizeGradleString(defaultClusterId)}\""
         buildConfigField "String", "DEFAULT_ORGANIZATION_ID", "\"${normalizeGradleString(defaultOrganizationId)}\""
diff --git a/clients/android/app/src/main/java/su/cin/rapvpn/RapDiagnosticService.java b/clients/android/app/src/main/java/su/cin/rapvpn/RapDiagnosticService.java
index 801c682..6f3c683 100644
--- a/clients/android/app/src/main/java/su/cin/rapvpn/RapDiagnosticService.java
+++ b/clients/android/app/src/main/java/su/cin/rapvpn/RapDiagnosticService.java
@@ -481,7 +481,7 @@ public class RapDiagnosticService extends Service {
         } else {
             result = "unknown command " + type;
         }
-        if (isRecoverableVPNProbe(type) && looksLikeVPNStall(result)) {
+        if (isRecoverableVPNProbe(type) && params.optBoolean("allow_recovery", false) && looksLikeVPNStall(result)) {
             String firstResult = result;
             String recovery = controlledRestartVPNRuntime(client, clusterId);
             String ready = waitForVPNRuntimeReady(RECOVERY_RUNTIME_READY_TIMEOUT_MS);