Parental Control Privacy Policy

Developer: RB Apps · Effective 16 October 2026

Parental Control ("the app") helps a parent or guardian look after their own child's phone: set app blocks and time limits, filter websites, screen incoming calls, see how the phone is used and, if the parent switches it on, see where the phone is. This policy explains what the app collects, why, who can see it and how to delete it. The app shows no ads, and we do not sell personal data.

How the app works

The same app is installed on two phones. On the parent's phone the parent signs in with an email address and password. On the child's phone the app is set up as "My child's phone" and linked to the parent with a short one-time code. The child's phone always shows what is switched on. The app is intended for use on a child's phone by that child's parent or legal guardian, and must not be used to watch another adult without their knowledge and consent.

Information we collect

Parent's phone

• Email address and password for the parent account (handled by Google Firebase Authentication; we never see the password).

Child's phone (only after it is linked to a parent)

• App usage and screen time: which apps are installed and how long each is used each day, read through Android's Usage Access permission, so the parent can set limits.
• App opened: Android's Accessibility service tells the app which app has just come to the front, so it can show a block screen when a limit, bedtime or block applies. It does not read what is on the screen, text you type, passwords or messages, and we do not collect or share such content.
• Rules and requests: the rules the parent sets (blocked apps, limits, bedtime, blocked websites), and requests the child sends asking for more time.
• Web filter: a local VPN service on the phone checks website names (DNS look-ups) against the parent's block list. Blocked names get no answer; other look-ups are passed to a family-safe public DNS service chosen in the app's settings. Website names are not uploaded to our servers or kept in a history.
• Location (only if the parent switches on Location sharing and the child accepts): when the parent turns on Share location for this phone, the child's phone first shows a clear explanation and asks for location permission (including “Allow all the time” so it can keep working when the app is closed). While it is on, the app runs a foreground service with a notice that is always visible, and sends the phone's position (latitude, longitude, accuracy and time) to the linked parent roughly every few minutes. Only the most recent position is kept; each update replaces the previous one and no location history is stored. Turning Share location off, or removing the location permission, stops the updates.
• Saved places: places the parent adds (a name, a position and a radius). The child's phone watches for arriving at or leaving them and records a short event such as “arrived at School” with the time, which the parent can see.
• Ring this phone: the parent can ask the child's phone to ring loudly so it can be found. The request is a single time stamp; the phone plays an alarm and shows a visible notice with a Stop button.
• Call screening (only if the parent switches it on): the app compares the number of an incoming call with the parent's allow-list and rejects numbers that are not on it. Caller numbers are checked on the phone and are not uploaded; the app never hears or records calls. The allow-list the parent enters is stored with the child's rules.
• Push notifications: each phone's Firebase Cloud Messaging token, so the parent can be told about requests and events.
• Device integrity: the app uses Firebase App Check with Google Play Integrity so that Google's servers can confirm requests come from the genuine app on a genuine device. This sends device and app integrity signals to Google.
• Device details: a device name chosen during setup, the phone model, last-seen time, and whether the permissions the app needs are switched on.
• Anonymous sign-in: the child's phone signs in to Firebase anonymously; no name, email or phone number is collected from the child.

How we use it

Only to provide the features above to the linked parent: enforcing rules on the child's phone, showing the parent screen time and requests, and keeping the two phones in sync. We do not use it for advertising, profiling or analytics, and we do not sell or rent it.

Who it is shared with

• The linked parent account (and a second parent the first parent invites) can see the child device's data described above, including its location if Location sharing is on.
• Google Firebase (Authentication, Cloud Firestore, Cloud Messaging and App Check) and Google Play services (location and Play Integrity) store and deliver this data for us as our service providers, under the Google Privacy Policy and Firebase privacy terms. Data travels over encrypted connections.
• The public DNS service you pick for the web filter receives the website names that are not blocked.
• Nobody else. We may disclose information if the law requires it.

Local data

Settings, the parent PIN and the child's rules are also stored on the phone itself. Backups are turned off.

Retention and deletion

• Delete your account in the app: on the parent's phone open My family and tap Delete account, then enter your password. This deletes the parent account and all data stored for every linked child device (rules, requests, events and app list).
• Remove one child device: open the device in the app and choose to remove it; that device's stored data, including its last known location, is deleted.
• Request deletion by email: write to support@arbeelabs.com from the parent's email address and we will delete the account and data within 30 days. This also works if you can no longer open the app.
• One-time linking codes (and invitations for a second parent) expire within 30 minutes.
• Uninstalling the app from the child's phone removes the data stored on that phone.

Permissions the app asks for

• Usage access: to measure screen time and app use.
• Accessibility service: to know which app is opened, for blocks, limits and bedtime. Switching it on is always your choice, after a clear explanation in the app.
• Device administrator: to stop the app being uninstalled without a parent and to let a parent lock the screen.
• VPN (local): for the website filter; traffic is not sent through our servers.
• Location (precise, approximate and background): only used for Location sharing and saved places, after the parent turns them on and the child accepts. The location foreground service shows a notice that cannot be hidden while it runs.
• Call screening: Android's call-screening role, only if the parent switches call screening on.
• Foreground services (location and media playback): to keep location sharing running and to play the “ring this phone” alarm.
• Notifications: to show the always-visible status notices, and push messages to the parent.
• Internet: to sync with the parent's account. Boot completed: to restart protection after a reboot.

Children

The app is used on a child's phone only under the control of the child's parent or guardian, who sets it up and consents to the data above. The child's device does not receive ads and is not asked for personal details. A parent who wants a child's data deleted can use the options above at any time.

Security

Data is sent over encrypted connections and protected by Firebase security rules so that only the child's own device and its linked parent can read it. No system is perfectly secure, so please use a strong password and a PIN your child can't guess.

Changes to this policy

If our practices change we will update this page and the effective date above.

Contact

Questions or requests: support@arbeelabs.com.