Privacy
The short version: we collect what the service needs to work — account details, your rules, and aggregate screen-time minutes. Never browsing content, never location, no ads, no trackers.
1. Who we are
Scrintime is operated by IERO, United Kingdom ("we", "us"). We are the data controller for the personal data described here. Contact us any time via the contact form.
2. What we collect
Your account: name, email address, a securely hashed password (or your Google sign-in), your device PIN (stored hashed), and your appearance preferences. Your devices and rules: the device names you choose, the rules and schedules you configure, child profile names you add, device online status and the app version each device runs. Screen-time data: the Windows app reports minutes of use per rule per day — aggregate counters only. We do not collect browsing history, page content, messages, screenshots, keystrokes or location. Billing: handled by Stripe; we store your subscription status and plan, never card numbers. Support: messages you send through the contact form.
3. Children's data
The screen-time minutes above may relate to your children when you assign devices to them. We designed the service to collect the minimum needed: aggregate daily minutes, never content or activity detail. As the parent or guardian you control this data — you can rename or delete child profiles and devices at any time, which removes the associated records. We encourage you to tell your children that their screen time is managed; the Windows app shows a visible icon while it is active.
4. Why we process it (lawful bases)
We process account and device data to provide the service you signed up for (contract); billing records to meet tax and accounting duties (legal obligation); and service telemetry such as client versions and error logs to keep the service secure and working (legitimate interests). We do not sell personal data, run advertising, or use tracking cookies — the only cookies are the one that keeps you signed in and the one that remembers your preferences.
5. Who processes data for us
We use a small set of processors to run Scrintime: Vercel (hosting, plus cookieless aggregate page analytics that cannot identify you), Supabase (database, EU region), Stripe (payments), Resend (transactional email), Google reCAPTCHA (abuse prevention on public forms) and DiceBear (generating your avatar image from a random seed). Each receives only what its role requires. Where a processor is outside the UK/EEA, transfers are covered by standard contractual clauses or an adequacy decision.
6. How long we keep it
Your data is kept while your account is active. Screen-time and activity records are automatically deleted after 90 days. Deleting a device or child profile removes its rules and usage history. If your account is deleted — by you, or after termination — it is retained for a 30-day grace period (so an accidental deletion can be undone) and then permanently erased. Contact-form messages are kept for as long as needed to handle your enquiry.
7. Your rights
Under UK GDPR you can ask for access to your data, correction, deletion, restriction, portability, and you can object to processing based on legitimate interests. Write to us via the contact form and we will respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
8. Changes
If we change this policy we will post the new version here and, for significant changes, tell you by email. This version is effective 13 July 2026.