Your Family's Privacy Matters

KidCurfew does not collect any personal data.

For users of the local timer feature, the application operates entirely offline. No information is transmitted anywhere.

For users of the remote pairing feature, only the minimum data required to relay commands between your paired devices is transmitted — such as lock, unlock, and timer duration instructions. This data is used solely to deliver the command and is not stored, analysed, or shared.

Your fingerprint, face, or other biometric data is processed entirely by your device's built-in security hardware and operating system.

KidCurfew never accesses, reads, stores, or transmits your biometric data. The application receives only a simple authentication result — success or failure — from the operating system.

Your biometric data never leaves your device under any circumstances.

The following information is stored locally on your device only:

• Timer duration preference
• Backup PIN (stored with device-level encryption)
• App setup and configuration status
• Usage session history (for the Usage Tracker feature)
• Remote pairing identifiers
• Timer and session state

All locally stored data is permanently deleted when you uninstall the application.

When you use the remote pairing feature, a secure relay service is used to transmit information between your parent device and the paired child device.

The data involved in this process is:

• A temporary pairing code (expires after 24 hours)
• Command type and timestamp (e.g. lock, unlock, timer duration)
• Device status (locked or unlocked)
• Daily app activity summaries (app names and time spent per app) — only when app activity monitoring is enabled

App activity data is shared exclusively between the paired parent and child devices. It is automatically deleted after 14 days. No names, email addresses, phone numbers, location data, or browsing history is ever collected.

All pairing data is removed when you remove a paired device or sign out.

The remote pairing feature relies on a third-party secure relay service to transmit commands between devices. This service is used only to deliver commands and does not have access to any personal information.

For users of the local timer feature only, no third-party services are used and no network connections are made.

KidCurfew does not use any analytics platforms, advertising networks, crash reporting tools, or data brokers.

KidCurfew is a tool operated by parents and guardians. The application is not directed at children and does not knowingly collect personal information from children.

App activity monitoring is enabled and controlled exclusively by the parent. The data collected is limited to app names and time spent — no personal communications, location, or browsing history is ever collected.

KidCurfew is inherently compliant with COPPA, GDPR, and applicable regional children's privacy legislation.

KidCurfew requests only the permissions required for its stated functionality:

• Display over other apps — to show the lock screen over other applications
• Notifications — to display the timer countdown control
• Foreground Service — to maintain the timer while the app is in the background
• Boot Completed — to restart the timer service after device reboot
• Biometric — to verify parent identity for unlock and pause
• Phone State — to temporarily suspend the lock screen during phone calls
• Schedule Exact Alarm — to trigger the lock screen at the precise end of a timer
• Wake Lock — to keep the timer active when the screen is off
• Device Administrator — to add a layer of protection against unauthorised uninstallation
• Internet — required for the remote pairing feature only
• App Activity Access — required on the child device only, and only when the parent enables app activity monitoring. This permission allows KidCurfew to read which apps have been used and for how long on the child's device, so the parent can view screen time insights. This information is shared only with the paired parent device and is never used for advertising or shared with third parties.

No permissions are used to collect personal data for commercial purposes.

For local operation, there is no server-side risk as no data is transmitted externally.

The backup PIN is stored using device-level encryption. Biometric verification is handled by your device's secure hardware. Commands transmitted during remote pairing are protected in transit and accessible only to the authenticated devices involved in the pairing.

App activity summaries are transmitted securely and are accessible only to the paired parent device.

If we update this Privacy Policy, the revised version will be made available within the application and included in the app update release notes.

Our fundamental commitment will not change: KidCurfew will not collect, sell, or misuse your personal data.