Privacy Policy
This Privacy Policy explains how Screen Time Limit (“Screen Time Limit”, “we”, “us”, or “our”) collects, uses, stores, and protects personal data when you use our website, parent portal, Chrome browser extension, and Windows screen-time management software (the “Service”).
Screen Time Limit is designed for parents and guardians who want to manage screen time on computers and other supported devices under their control. Children do not need to create accounts or provide email addresses, phone numbers, or other contact information to use the Service.
1. Who we are
The Service is operated by a private individual based in Cyprus.
Privacy contact: screentime.assist@gmail.com
For purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR), the operator identified above is the controller of the personal data described in this Privacy Policy, except where stated otherwise.
2. Information we collect
2.1 Parent or guardian account information
When you create and use an account, we may collect information such as:
- email address;
- authentication and account identifiers;
- if you choose to sign in with Google: your Google account email address, your name, and a unique Google account identifier;
- account settings; and
- communications you send to us, for example when contacting support.
When you use “Continue with Google”, Google tells us your email address, your name and a unique identifier of your Google account. We receive no other information from your Google account. We do not access your Gmail, contacts, calendar, Drive, or any other Google service.
We do not need a child to create a separate user account.
2.2 Managed child profiles
A parent or guardian may create profiles in the Service to organize devices and screen-time settings. A profile may contain a name, nickname, or other label chosen by the parent.
These profiles are not user accounts. We do not require a child’s email address, phone number, or other contact details. Parents should avoid entering unnecessary personal information into profile names or labels.
2.3 Device and screen-time information
When the Screen Time Limit software is installed on a managed device, we process technical and usage information necessary to provide the Service, such as:
- device identifiers and information used to pair a device with a parent account;
- device and software information necessary for operation, compatibility, security, and troubleshooting;
- session and connectivity information;
- screen-time or device-usage duration;
- screen-time limits, allowed hours, schedules, and temporary time adjustments configured by the parent;
- technical logs necessary to operate, secure, and troubleshoot the Service; and
- technical error reports (stack traces, software and operating-system version, and an opaque device identifier) sent automatically if the software or the web app crashes. They do not include your name, email address, computer name, Windows account name, or the content of your requests.
The purpose of this information is to allow the parent to see and control screen time and to allow the managed device to enforce the settings selected by the parent.
2.4 Screen Time Limit browser extension
The optional Screen Time Limit extension for Google Chrome lets a parent or guardian see their children’s screen time and use quick actions (add time for today, block, allow for today) from the browser toolbar. Sign-in happens on our website, which hands the extension its own session.
- The extension stores the parent’s sign-in session (authentication tokens and account identifier) and a cached copy of each child’s profile name and current screen-time status in the browser’s extension storage on the parent’s device.
- It communicates only with our API at api.screentimelimit.now, to load that status, run the quick actions the parent chooses, and renew the session.
- It does not read or change the content of web pages, does not collect browsing history, and does not track what the parent does in the browser.
- Signing out — in the extension, or on the website, which also signs the extension out — removes this data from the browser. Removing the extension removes it as well.
2.5 Information we do not collect
Screen Time Limit is a screen-time management product, not a general-purpose monitoring or surveillance product. Unless a future feature is introduced and this Privacy Policy is updated accordingly, the Service does not collect:
- the contents of messages or emails;
- passwords or keystrokes;
- the contents of files or documents;
- browsing history or the content of web pages you visit;
- screenshots or screen recordings;
- webcam or microphone recordings;
- precise location data; or
- a child’s email address or phone number.
3. How we use information
We use personal data only for purposes connected with operating and protecting the Service, including to:
- create and maintain the parent or guardian account;
- authenticate users and protect accounts from unauthorized access;
- pair and manage devices;
- calculate and display screen-time usage;
- apply daily limits, allowed hours, schedules, blocks, and temporary time adjustments;
- maintain the security and reliability of the Service;
- diagnose technical problems and provide support;
- communicate important service or account information; and
- comply with applicable legal obligations.
We use the information received from Google only to create your account, to recognise you when you sign in, and to confirm that you own the email address. We do not use it for advertising and we do not share it with third parties.
We currently send only transactional emails: email verification, invitations from a family member, and installation links you request. We do not send marketing email.
We do not sell personal data. We do not use managed-device screen-time information for targeted advertising.
4. Legal bases for processing
Where the GDPR applies, we process personal data on one or more of the following legal bases:
- Performance of a contract — where processing is necessary to provide the Service requested by the parent or guardian, including account management, device pairing, screen-time reporting, and enforcement of configured controls.
- Legitimate interests — where necessary for purposes such as protecting the Service, preventing abuse, maintaining security, diagnosing failures, and improving reliability, provided those interests are not overridden by the rights and interests of affected individuals.
- Legal obligations — where processing is necessary to comply with applicable law.
Where another legal basis is required for a particular processing activity, we will use the appropriate basis and provide any notices or choices required by law.
5. Children and managed devices
Screen Time Limit is set up, configured, and controlled by a parent, guardian, or other authorized adult. The Service does not require children to register directly with us.
A parent may associate one or more managed devices with a child profile. Such a profile is primarily an organizational mechanism that allows the parent to group devices and apply screen-time settings.
Information about the use of a managed device may nevertheless constitute personal data relating to the child or another person using that device. We therefore collect only the information reasonably necessary to provide screen-time management functionality.
Parents and guardians are responsible for using the Service only on devices they are legally authorized to manage and for complying with applicable laws concerning their use of parental-control software.
7. Service providers
We use the following service providers to operate the Service:
- Amazon Web Services — hosting, database, delivery of the website and the Windows installer, and sending email (Amazon SES).
- Sentry (Functional Software, Inc.) — error monitoring for the website, the parent web app, the Windows software, and our servers. Reports contain technical information about a crash (stack trace, software version, operating system, an opaque device or family identifier) and are stored in the European Union (Frankfurt, Germany). We remove names, email addresses, IP addresses, computer names, and request content before sending. Sentry processes data under its own Privacy Policy.
- Google (Sign in with Google) — authenticates you when you choose to sign in with Google. Google processes your data under its own Privacy Policy.
- Google (Gmail) — only for messages sent to our contact address, screentime.assist@gmail.com.
These providers process personal data on our behalf only as necessary to provide their services to us and subject to appropriate contractual and data-protection requirements.
Google user data
Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Where your data is processed
Personal data is stored in the European Economic Area (EEA): the Service runs in the Amazon Web Services region in Frankfurt, Germany. Our error-monitoring provider is a US company; crash reports are stored in the EU, and any transfer relies on appropriate safeguards such as Standard Contractual Clauses. When you sign in with Google, Google processes your data under its own terms.
9. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy:
- Account, child-profile, device, and screen-time data are kept while the account exists, so the parent can see and manage screen time.
- Deleting the account in the parent portal deletes the whole family: all of its parent accounts, child profiles, managed devices, and their screen-time data. This also removes the link between the account and your Google account (the identifier and email address we received from Google).
- Technical logs are kept for 90 days.
- Database backups are kept for 14 days; deleted data disappears from backups as they expire.
We may keep specific information longer only where retention is required by law or necessary to resolve a dispute.
10. Data security
We use technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction, including:
- all traffic between you, the managed device, and the Service is encrypted (HTTPS);
- the database is encrypted at rest;
- device credentials are stored encrypted with AES-256; and
- our servers and database are not reachable directly from the internet.
No online service can guarantee absolute security. We review our safeguards as the Service develops and as risks change.
11. Your data protection rights
Depending on where you live and the law that applies, you may have rights regarding your personal data. Under the GDPR, these may include the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of personal data in certain circumstances;
- request restriction of processing;
- object to certain processing based on legitimate interests;
- receive certain data in a portable format where the right to data portability applies; and
- lodge a complaint with the competent data protection supervisory authority.
Where processing is based on consent, you may also have the right to withdraw that consent at any time without affecting processing that occurred before withdrawal.
To exercise a privacy right, contact us at screentime.assist@gmail.com. We may need to verify your identity before completing a request.
12. Deleting an account or managed device
You can delete your account at any time in the parent portal. This deletes the whole family, as described in Data retention. You can also ask us to delete your data by writing to screentime.assist@gmail.com.
If you signed in with Google, you can also revoke Screen Time Limit’s access at any time in your Google Account at myaccount.google.com/permissions.
Removing a child profile or a managed device stops it from being managed. Its screen-time history stays with your account and is deleted when the account is deleted. Children do not have separate Screen Time Limit accounts.
13. Third-party links
Our website or Service may contain links to third-party websites or services. Their privacy practices are governed by their own privacy policies, and we are not responsible for those practices.
14. Changes to this Privacy Policy
We may update this Privacy Policy as the Service, our providers, or applicable legal requirements change. We will publish the updated version on this page and update the “Last updated” date. Where required, we will provide additional notice of material changes.
15. Contact us
For questions about this Privacy Policy or our handling of personal data, contact us at screentime.assist@gmail.com.