Legal
Privacy Policy
Last updated: October 19, 2026
What data do we collect?
We only collect the data needed for the service to work:
- Email address — used to create and authenticate your account.
- Device identifiers — name and type (Windows, macOS or Android) of the devices linked to your family, and their last connection, needed to apply screen limits.
- Service usage data — lock commands, schedules, time granted, blocked apps, messages you write for your kids and aggregated app usage statistics, stored in Firebase Realtime Database.
- Parental PIN — stored encrypted (salted hash), never in plain text or in emails.
- Subscription data — plan, status and dates. Payment data is handled by Stripe; ScreenLimits does not store card numbers.
- Communications — invitation emails to family members, notice emails (PIN change, devices added or removed), support emails and any feedback you decide to send us.
- Voice assistant (Premium) — dictation is processed by your browser; only the text of the command reaches our servers, and it is sent to an AI provider to be interpreted. Audio is not stored.
- Approximate country — inferred from your IP address solely to show you prices in your currency.
- Aggregated browsing data — through Google Analytics (pages visited, session length, device type). It contains no personally identifiable information.
What do we use your data for?
- Creating and managing your user account.
- Syncing the limits and status of your family's devices in real time.
- Sending notifications and emails related to the service (invitations, security notices and support).
- Managing the Premium subscription and its billing.
- Interpreting the voice assistant's commands.
- Improving the service through aggregated, anonymous usage analysis.
Legal basis for processing
The processing of your data is based on the performance of the contract (providing the service) for account and device data, and on legitimate interest for aggregated analytics data, in accordance with Article 6 of the GDPR.
Who do we share your data with?
We do not sell or give your data to third parties. We use the following providers to operate the service:
- Google Firebase (authentication and real-time database) — Google LLC, with international transfers covered by standard contractual clauses.
- Google Analytics (anonymous web analytics) — anonymized data, no personal identification.
- Stripe (payments and billing for the Premium subscription) — Stripe Payments Europe, Ltd. and Stripe group entities.
- OpenAI (interpreting the voice assistant's text, Premium only) — OpenAI, L.L.C. Only the text of the command and the names of your devices are sent.
- ipinfo (approximate country from the IP, to show local prices) — IPinfo.io.
- Google (Gmail) (sending the service's emails).
How long do we keep your data?
We keep your data while your account is active. If you delete your account, your personal data will be erased within a maximum of 30 days, unless a legal retention obligation applies.
Browsing data collected by Google Analytics is kept according to Google's retention settings (14 months by default).
Your rights
Under the GDPR, you have the right to:
- Access — request a copy of the data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request the deletion of your data ("right to be forgotten").
- Objection and restriction — object to certain processing or request that it be restricted.
- Portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, contact us at [email protected]. We will reply within a maximum of 30 days.
You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.
Cookies and similar technologies
The website uses essential technical cookies for its operation and Google Analytics analytical cookies to measure traffic in an aggregated and anonymous way.
You can disable analytical cookies by installing the official Google Analytics browser add-on: tools.google.com/dlpage/gaoptout.
Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss or alteration, including encryption in transit (HTTPS) and at rest provided by Firebase.
Changes to this policy
We may update this policy from time to time. We will notify you of relevant changes through the service itself or by email. The date of the last update will always be visible at the top of this page.