Privacy Policy
Effective Date: January 14, 2026
Last Updated: January 14, 2026
At Phonout, we prioritize your privacy and the digital well-being of families. This Privacy Policy explains how we handle your information when you use our app, website (www.phonout.com), or related services, including subscription-based premium features.
We comply with global privacy laws, including:
- • GDPR (EU/UK)
- • CCPA/CPRA (California, USA)
- • COPPA (Children's Online Privacy Protection Act, USA)
- • India's DPDP Act (2023)
- • Other applicable laws worldwide
1. Information We Collect
Data Collection
Phonout collects the following data to function:
On-Device (local only):
- • 4-Digit PIN: Used to unlock during overlay sessions and secure app access. This PIN is stored only on your device and never transmitted.
- • Detox Sessions & Plans: Stored locally for your child's progress.
- • Preferences: Such as interval timers and toggle state history.
Account Information (via Google Authentication):
- • Name: Collected during Google sign-in
- • Email address: Collected during Google sign-in
- • Phone number: Provided separately during registration
- • Profile picture: Optional, collected via Google
- • Google User ID: For account management and authentication
Cloud (Firebase):
- • Toggle State (true/false): Synced with Firebase Realtime Database to control the paired TV app.
- • Parent Account Data: Name, email, phone number, and profile picture stored in Firebase Firestore.
- • Parent Activity Data: Your playlist, queue, and watch history stored in Firebase Firestore for personalized experience.
- • Firebase Analytics: Collects anonymized usage data (e.g., feature engagement, crashes, session counts). This helps us improve performance, not track individuals.
Website:
- • Basic, anonymized analytics (e.g., page visits, with cookie consent).
- • Contact form messages (temporarily processed, not permanently stored).
Google Play Billing:
- • Subscription status (active/inactive) and purchase history for premium features.
- • Payment data is handled exclusively by Google Play. We never store or access payment details, card numbers, or financial information.
2. Permissions We Request and Why
Overlay Permission ("Display over other apps")
Purpose: To display the lock screen overlay when screen time limits are reached.
What it does: Creates a full-screen lock that prevents app access until unlocked with your PIN.
Privacy: This permission does not allow us to see or record what's on your screen.
Usage Stats Access
Purpose: To track screen time and enforce limits.
What it does: Allows Phonout to monitor how long apps are used (locally, on your device only).
Privacy: Usage data never leaves your device.
Foreground Service
Purpose: To keep Phonout running in the background and enforce time limits even when the app is closed.
What it does: Ensures timers and locks remain active.
Privacy: Only used for timer functionality; no data is collected or transmitted.
Internet Access
Purpose: To enable Google sign-in authentication and sync your account data with Firebase.
What it does: Connects to Google's authentication servers and Firebase cloud storage.
Privacy: Only used for authentication and syncing data you explicitly provide.
Notification Permission
Purpose: To notify you when screen time limits are approaching or reached.
What it does: Displays reminders and alerts.
Privacy: Notifications are generated locally; no data is transmitted.
All permissions are requested only when necessary and with clear explanations. You can revoke permissions at any time via device settings, though this may limit app functionality.
3. How We Use Your Data
- • To enable TV pairing and sync toggle states
- • To create and manage your Phonout account
- • To authenticate your identity via Google sign-in
- • To personalize your experience (playlists, queues, watch history)
- • To communicate with you about your account, updates, and support
- • To process subscriptions via Google Play Billing
- • To analyze anonymized usage trends (crashes, feature adoption)
- • To comply with legal obligations
We do NOT:
- • Sell your data to third parties
- • Use your data for targeted advertising
- • Share personal information with advertisers
- • Track your location or browsing outside the app
4. Third-Party Sharing
We share minimal data with trusted providers:
- • Google (Authentication & Services): For account sign-in, we share your name, email, phone number, and profile picture with Google's authentication services. Google processes this data according to their Privacy Policy.
- • Firebase/Google Cloud: For toggle sync, account storage, activity data storage, analytics, and billing validation
- • Google Play Billing: For subscription management (no payment data stored by us)
We do NOT sell, rent, or share your personal data with any other third parties for marketing or advertising purposes.
5. Children's Privacy (COPPA Compliance)
Phonout is designed for parental use and does not knowingly collect personal information from children under 13.
- • The app is intended to be installed and configured by parents/guardians (18+)
- • All data (PIN, sessions, preferences) related to children's device usage is stored locally on the device
- • We do not require children to create accounts or provide personal information
- • Parents control all settings and have full access to locally-stored data
- • If we discover we've inadvertently collected data from a child under 13, we will delete it immediately
6. Age Restriction and Parental Use
Age Requirement: 18+
Phonout is intended for users 18 years and older. By creating an account and using our services, you confirm that you are at least 18 years of age.
Parental Control Tool
Phonout is designed as a parental control and behavior change tool for parents to manage their children's screen time. Parents are responsible for ensuring appropriate use of the app on devices used by minors.
Children's Data Protection
We do NOT collect personal information from children.
- • All detox session data, screen time settings, and child-specific preferences are stored locally on your device and never transmitted to our servers
- • Only parent account information (name, email, phone, profile picture) and parent activity data (playlists, queues, watch history) are stored in the cloud
- • Children do not need to create accounts or provide any personal information
7. Your Rights
Under GDPR, CCPA, DPDP, and similar laws, you may:
- • Access, correct, or delete your personal data
- • Delete your account and all associated cloud data (name, email, phone, profile picture, playlists, queues, watch history)
- • Object to data processing
- • Request data portability
- • Withdraw consent
- • Opt out of marketing communications (if we send any in the future)
To exercise these rights, contact us at contact@knowphone.in. We will respond within 30 days.
Account Deletion: Account deletion will permanently remove all your cloud-stored data within 30 days. Local data (PIN, detox sessions) will remain on your device until you uninstall the app or clear app data.
8. Security Measures
Current: Most data (PIN, sessions, preferences) never leaves your device.
Account & Activity Data: Parent account information and activity data (playlists, queues, watch history) are encrypted in transit (TLS/SSL) and stored in Firebase Firestore with Google's enterprise-grade security.
Firebase/Google: Provides enterprise-grade security for toggle state, analytics, and billing validation.
Future: If we expand, all data will be encrypted in transit and at rest, with regular audits.
9. Data Retention
- • PIN, detox sessions, preferences: Stored locally, user-controlled (never leaves device)
- • Toggle states: Ephemeral, only for active session sync
- • Account data (name, email, phone, profile picture): Retained until account deletion
- • Activity data (playlists, queues, watch history): Retained until account deletion or manual removal
- • Firebase Analytics: Retained in anonymized form per Google's policies
- • Billing records: Managed entirely by Google Play
10. International Data Transfers
Firebase and Google Play services may store data globally. Transfers comply with:
- • GDPR SCCs (Standard Contractual Clauses)
- • CCPA requirements
- • DPDP (India)
11. Cookies and Analytics
- • Website: Minimal cookies for functionality and anonymized analytics
- • Future: EU/UK users will see a cookie consent banner
- • Users can disable cookies, but some site features may not work
12. Third-Party Links
Our app/website may link to external platforms (e.g., Google Play). Their privacy practices are separate from ours , please review their policies.
13. Changes to Policy
We may update this Privacy Policy for compliance or new features. Updates will be posted at www.phonout.com/privacy.
14. Contact Us
Our mission is to reduce screen time addiction while ensuring maximum privacy and security.