Privacy Policy
This Privacy Policy describes how the ChallengeTime child app processes information on a parent-managed child device to provide screen-time, challenge and safety features.
Last updated: October 3, 2026
Your Parent’s Authorization
A parent or legal guardian, or another authorized adult, must connect this device to a family account. The adult reviews the full privacy policy and authorizes child-data processing before a pairing code can be created.
Information the Child App Processes
- Device identifiers and account identifiers required to link the device to a family account.
- Launcher-visible app names and identifiers, app-usage duration, and foreground-app information needed to apply screen-time rules and app blocking.
- Camera images or challenge submission media when the child completes challenges that require photos. Workout camera frames are analyzed on the device unless an image is explicitly submitted.
- Questions, answers, and short explanations entered for a parent-enabled AI-checked challenge.
- Challenge, credits, redemptions, and protection-status information needed to operate the reward and monitoring features.
- Technical service data such as messaging tokens and integrity signals used to keep the service working securely.
Protection Reliability Diagnostics
The child app automatically sends technical failure and service-status reports linked to the existing child profile, using authenticated Firebase services. Reports include device model and manufacturer, Android, app and WebView versions, accessibility connection transitions, recent technical events, Android process-exit reasons, and limited ChallengeTime code frame names where available. Reports are used to investigate protection failures. Exception messages, raw traces, messages, passwords, photos, challenge answers and other apps’ contents are not included. No advertising or hardware identifier is added for diagnostics.
Local history contains at most 32 recent events and four process exits from the last seven days. Server snapshots are replaced rather than accumulated; daily cleanup removes snapshots older than seven days, normally within one further day. Local expired data is removed when the app next runs. Removing the child profile or family also removes its server diagnostic snapshot.
אבחון אמינות ההגנה
אפליקציית הילד שולחת באופן אוטומטי דוחות טכניים המשויכים לפרופיל הילד באמצעות שירותי Firebase מאומתים. הדוחות כוללים דגם ויצרן מכשיר, גרסאות Android, האפליקציה ו־WebView, שינויים בחיבור שירות הנגישות, אירועים טכניים, סיבות סיום תהליך ושמות מוגבלים של פונקציות בקוד ChallengeTime, כשזמינים. הם משמשים לחקירת תקלות בהגנה ואינם כוללים הודעות חריגה, עקבות מלאות, הודעות, סיסמאות, תמונות, תשובות לאתגרים או תוכן של אפליקציות אחרות. אין איסוף מזהי פרסום או חומרה לצורך האבחון.
נשמרים עד 32 אירועים וארבעה סיומי תהליך משבעת הימים האחרונים. הדוח בשרת מוחלף ולא מצטבר. ניקוי יומי מוחק דוחות ישנים משבעה ימים, בדרך כלל בתוך יום נוסף. מידע מקומי שפג תוקפו מוסר בהפעלה הבאה. מחיקת פרופיל הילד או המשפחה מסירה גם את הדוח המשויך בשרת.
How the Child App Uses Information
- To enforce parent-configured screen-time limits and blocked-app rules.
- To show challenges, collect challenge submissions, and update credits and unlocked screen time.
- To report child-device status and alerts to the linked parent account.
- To maintain service reliability, safety features, and backend security protections.
How Information Is Shared
Information from the child app is shared with the linked family account so parents can manage the device, review challenges, and receive protection alerts. Infrastructure providers such as Firebase services are used to operate the product.
If a parent turns on AI checking for a challenge, the work needed to check that challenge may be processed by the production-approved AI provider, which may be Google’s Gemini API or OpenAI’s API according to the production configuration. Children are told not to include names, faces, school details, addresses, or other identifying information. Unclear or unsafe-to-grade work is sent to the parent for review instead of being automatically approved.
ChatGPT account age detection and parental controls do not apply to API processing inside ChallengeTime. ChallengeTime therefore applies its own parent authorization, content validation, and review safeguards.
Accessibility and Usage Access
The child app uses Accessibility and Usage Access only for parental-control functions such as identifying visible apps (including floating videos and split-screen windows), enforcing time limits, and restoring monitoring. Android window-content access is used only for app identities, window positions, and the standard action to dismiss blocked floating videos. Blocked windows can be covered by a touch-blocking overlay. Typed text, messages, passwords, and other app content are not inspected; window geometry and accessibility nodes are not uploaded. These capabilities are not used for unrelated automation or advertising purposes.
Data Retention and Security
App-usage statistics are scheduled for deletion after 90 days. Submitted media for completed challenges is scheduled for deletion after 7 days, while media awaiting retry or parent review may be retained for up to 30 days. Other information is retained as needed to operate the family account, maintain challenge and safety records, and support service integrity. Reasonable technical safeguards are used, including authenticated backend access and app integrity protections.
Your Choices
Ask your parent or guardian if you have questions or want information removed. The parent can unlink the device, leave optional AI checking off, and request deletion of the family account and associated data through the parent app or the account-deletion page.