Your Data Stays on Your Device

01. Our Privacy Commitment

Monitor Screen Time & Digital Wellbeing ("Monitor", "we", "us", or "our") was built with a strict Local-First Architecture. We believe your digital habits, screen time statistics, and security PINs belong solely to you.

02. Data We Process Locally

To provide core Digital Wellbeing features (such as daily usage tracking, focus scores, and app lock controls), Monitor processes the following data exclusively on your device:

• Application Package Usage Stats: Querying Android UsageStatsManager to calculate daily, weekly, and monthly screen time per installed application.
• Security PIN & Biometrics: Storing a SHA-256 cryptographic hash of your security PIN in local storage. Biometric authentication (fingerprint/face) is handled directly by Android's native BiometricPrompt hardware API.
• Unlock History Logs: Recording local logs of app unlocks for your personal review.
• App Limit Configurations: Saving user-defined time limits and lock state preferences per package.

03. Prominent Disclosure: Accessibility Service

Explicit Purpose: When enabled, Monitor's Accessibility Service detects when a user-restricted application is brought to the foreground and presents the secure lock screen overlay.

• No Window Content Reading: Declared with android:canRetrieveWindowContent="false". Monitor cannot read text, messages, passwords, or UI content on screen.
• No Data Collection: Accessibility events are never recorded, saved to files, or transmitted off your device.
• User Controlled: You can enable or disable this service at any time via Android System Settings.

04. System Permissions Disclosed

Monitor requests specific Android permissions solely to perform user-configured features:

• Usage Access (PACKAGE_USAGE_STATS): Required to detect active app usage durations and generate screen time metrics.
• Display Over Other Apps (SYSTEM_ALERT_WINDOW): Required to render the app lock screen over locked applications.
• Uninstall Protection (BIND_DEVICE_ADMIN): Optional. Used to prevent unauthorized uninstallation of parental controls.
• Post Notifications (POST_NOTIFICATIONS): Required to send 85% and 100% daily time limit alert notifications.
• Ignore Battery Optimizations: Required to keep background limit monitoring active during device sleep.

05. Third-Party Services

Monitor integrates a minimal set of industry-standard third-party SDKs to support ads and weather forecasts:

• Google AdMob: Serves banner, interstitial, and rewarded video ads. Google AdMob may process non-personally identifiable device identifiers (e.g. Advertising ID) in accordance with Google's Privacy Policy.
• Open-Meteo & OpenStreetMap Nominatim: Used to fetch live local weather forecasts. Your coarse location (IP address or GPS coordinates) is transmitted anonymously to fetch temperature data and is never stored.

06. Data Control & Deletion Rights

Because all data is stored locally on your device, you maintain 100% control over your data at all times:

• Clear History: Tap "Clear History & Unlock Logs" in Monitor Settings to erase all logged open events.
• Complete Reset: Tap "Reset All App Data" in Monitor Settings to purge all cached data, PINs, and custom app limits.
• App Uninstallation: Uninstalling Monitor permanently removes all local data files created by the app.

07. Children's Privacy (COPPA & GDPR)

Monitor does not knowingly collect or solicit personal data from children under the age of 13. As a local-first Digital Wellbeing utility, all data remains strictly on the child's or parent's device.

08. Contact Information

If you have any questions or feedback regarding this Privacy Policy or Monitor's security architecture, please contact us at: