Privacy Policy

Parental Control — last updated October 19, 2026

What the app does

Parental Control lets a parent set screen time limits for a child and lets the child's Android device enforce them. The same app runs in two modes. In parent mode it is used by an adult to configure limits and review usage. In child mode it is installed on the child's device by the parent, measures how long each app is used, and blocks apps once a limit is reached. Limits can be shared across several of the child's devices, which is why usage is sent to our server rather than kept only on the device.

Who is responsible

The app and the server behind it are operated by TRL Tech, Denmark, which is the data controller. The parent decides which children and devices are added, and is responsible for informing the child that the device is monitored.

Data we collect from the parent

• Google account info — name, email address, and the Google account identifier, used to sign in and to own the child profiles.
• Email and password sign-up — if you register with an email address instead of Google, we store the email address, your password only as a hash, and whether the email address has been verified.
• Firebase Cloud Messaging token — the push address of the parent's device, used to notify the parent about time requests and alerts.

Subscriptions

After the 30-day Trial, full access requires a monthly subscription, the Unlock, billed through Google Play. To manage it we store:

• the purchase token and product id from Google Play,
• the subscription state and its expiry and renewal times,
• when your Trial started and ends.

When you buy, your Parent id is sent to Google as the obfuscated account id. It is a plain id that Google cannot link to your name or email address through us. Card and payment details are handled only by Google Play. We never see them.

Data we collect from the child's device

• Child profile name — a display name chosen by the parent. We do not ask for the child's real name, email address, date of birth, or any other identifier, and the child does not create an account or log in.
• App usage — which app package was in the foreground and for how many seconds, together with the time period it falls in. This is what the limits are calculated from.
• Installed applications — the package name, display label, and version of the apps installed on the device, so the parent can sort them into groups and set limits on them.
• Device information — a device name, model, Android version, and time zone, used to distinguish several devices belonging to the same child and to apply limits in the correct local day.
• Firebase Cloud Messaging token — the push address of the child's device, used to deliver policy and bonus-time changes immediately.
• Event log — timestamped records of enforcement-relevant events: an app being blocked, a budget running out, the service being stopped, permissions being switched off, the device clock being changed, the device restarting, and bonus time being granted. These exist so the parent can see whether enforcement is actually working.

What we deliberately do not collect

The app uses Android's accessibility service on the child's device. It is configured to receive only window-change events, and reads only the package name and the screen class name of the app that came to the foreground. It does not read the contents of the screen, text that is typed, messages, passwords, or web pages.

We do not collect location, contacts, call logs, SMS, photos, microphone or camera input, browsing history, or the content of anything used on the device. We do not use advertising identifiers, and the app contains no advertising or analytics SDKs.

Monitoring is visible on the child's device

The app is not hidden. In child mode it shows its own icon, runs a foreground service with a permanent notification stating that screen time is being monitored, and displays remaining time and block screens to the child. It does not disguise itself as another app.

How we use the data

The data is used only to operate the app: to calculate remaining screen time, to block apps whose limit is reached, to keep limits consistent across the child's devices, to show the parent what has been used, and to send the push notifications the app depends on. We do not use it for advertising, profiling, or analytics, and we do not use it to train machine-learning models.

Where the data is stored

• All data is stored on servers rented from Hetzner Online GmbH in Germany (Falkenstein and Nuremberg). It stays inside the EU.
• All traffic between the apps and our server is encrypted with HTTPS.
• We do not sell, rent, or share the data with third parties, and we do not disclose it to anyone other than the parent who owns the child profile, except where we are legally required to.

Third-party services

• Google Sign-In — parent authentication. Subject to Google's Privacy Policy.
• Firebase Cloud Messaging — push notifications to the parent and child devices. Subject to Firebase's Privacy Policy.
• Google Play — Google Play Billing and the Google Play Developer API, used to sell and verify the subscription. Subject to Google's Privacy Policy.
• Hetzner Online GmbH — server hosting in the EU. Subject to Hetzner's Privacy Policy.

These are processors acting on our behalf. No other party receives the data.

How long we keep it

• Raw usage records, the event log, time requests and installed-app lists are deleted after 6 months. The newest installed-app list for each device is kept.
• Daily totals are deleted 24 months after their period ends.
• Backups are kept for at most 30 days, so deleted data has left our backups within 30 days.

When a parent deletes a child profile in the app, everything belonging to that child is deleted from our database immediately, and the child's devices lose access. When a parent account is deleted, all of its child profiles, purchase records and the Trial are deleted with it.

Pairing codes expire shortly after they are issued. Authentication tokens expire and are removed on a schedule.

Your rights

Under the GDPR you can request access to the data we hold, correction of it, deletion of it, or a copy of it in a portable form, and you can object to our processing of it. A parent exercises these rights on behalf of their child.

You can delete your whole account yourself in the app: open Settings and choose Delete account. If you cannot use the app, write to the address below and we will respond within one month.

Deleting your account does not cancel your Google Play subscription. Cancel it in Google Play subscriptions.

If you believe we handle your data incorrectly, you can complain to the Danish Data Protection Agency (Datatilsynet, datatilsynet.dk).

Children

The app is set up and controlled by a parent or guardian, who is the account holder. Child mode runs on a minor's device and collects the data listed above about the use of that device. It is collected on the instruction of the parent, who is responsible for telling the child that the device is monitored. We do not knowingly collect data about a child from anyone other than the parent who added them, and a child never creates an account with us.

Changes to this policy

If we change this policy we will update the date at the top of this page, and the app shows a notice when the date changes. The terms of service apply to use of the app.

Contact

For questions about this policy, or to request access to or deletion of your data, contact:

Email: dev@trl-tech.dk