Privacy Policy
In short: DigiTogether is a parental-control and digital-wellbeing app. A parent installs it on their own phone and on their child's phone. We collect only what the app needs to keep the child safe and to show the parent their child's digital activity. We do not read message text, SMS or call logs, we do not show ads, and we never sell anyone's data. You can delete your account and all of your family's data from the app at any time.
1. Who we are
DigiTogether (the "App") is provided by Kundan Kumar, trading as DigiTogether, Bengaluru, Karnataka, India ("we", "us"). We decide how and why the personal data described below is processed.
Contact for privacy questions, requests and grievances: privacy@digitogether.com.
2. Who this policy is about
- Parents and guardians who create a DigiTogether account and manage their children's settings.
- Children whose phone is set up in child mode by their parent or guardian.
DigiTogether is designed to be set up and controlled by a parent or legal guardian. A child's phone can only be linked to a family by entering the child's PIN, which the parent sets. By linking a child's phone, the parent confirms that they are the child's parent or legal guardian and that they consent to the processing described in this policy for that child. DigiTogether must not be used to monitor adults, or anyone without the authority to do so.
3. What we collect
3.1 From the parent
| Data | Why |
|---|---|
| Name and email address; your Google account name and email if you sign in with Google; your password (handled by our authentication provider, which stores it in hashed form) | To create and secure your account |
| Children's names, optional avatar, the child PIN (stored only as a one-way bcrypt hash on our server), app rules, bedtime and study-mode schedules, safe zones, blocked websites and categories, rewards, challenges and praise you create | To apply the rules you choose on your child's phone |
| Approved contacts you enter (name, phone number, relationship) | To mark which contacts your child may reach |
| Push notification token for your phone | To send you alerts and requests from your child |
| Subscription status (if you subscribe) | To unlock paid features |
3.2 From the child's phone
The app shows a persistent notification while it is running, so it is always visible on the child's phone. Each item below is collected only after the related permission is granted on that phone, and the app explains each permission before asking for it.
| Data | How | Why |
|---|---|---|
| Which apps are used and for how long; the list of apps the child can open | Usage access | Screen time, app limits, blocking |
| Precise location, including in the background, and battery level | Location permission | Live map, location history, safe-zone arrival and departure alerts |
| Names of websites visited or blocked (domain names only, for example "example.com" — not the pages or their content) | An on-device web filter (Android VPN service) that checks website names | Safe browsing and the parent's web activity view |
| Titles and channels of YouTube videos watched, and YouTube search terms | Accessibility service, reading the YouTube app's screen only — no other app | YouTube activity and content-safety alerts |
| Which app showed a notification, and when. For chat apps (such as WhatsApp or Instagram): who a message is from, its type (text, photo, voice, call) and time — never the message text | Notification access | Notification counts per app; alerts about messages from unknown contacts |
| Alerts generated on the phone, such as a concerning keyword found in a message (the alert names the keyword; the message itself does not leave the phone) | On-device check | Safety alerts to the parent |
| Quests, XP, coins, streaks, virtual pet, reward requests, "waves" to approved contacts, requests for more time or to leave child mode | Use of the app | The game and reward features, and parent–child requests |
| Daily and weekly screen-time summaries | Generated from usage data | Reports for the parent |
| An anonymous account ID for the phone, a push notification token, and PIN-entry attempts | Automatically | Linking the phone to the family, sending settings changes, preventing PIN guessing |
3.3 Technical and usage data (parent and child phones)
- Crash reports (device model, OS version, app version, the crash details) to fix problems.
- Product analytics: which screens and features are used, and events such as sign-in. They are linked to your account by an anonymous ID only — never your name, email address, or your child's or contacts' names.
3.4 What we do not collect
- The text of messages or notifications, SMS, or call logs.
- Your phone's contact list (only the approved contacts a parent types in).
- Photos taken with the in-app camera — they stay on the phone.
- The device's advertising ID. DigiTogether shows no ads.
4. How we use data
- To provide the App's features to the parent and child, as described above.
- To send alerts, requests and settings changes between the parent's and the child's phones.
- To secure accounts, prevent abuse (for example PIN guessing) and fix errors.
- To understand which features are used so we can improve the App.
- To manage subscriptions and to comply with the law.
We do not use children's data for advertising, and we do not sell or rent personal data to anyone.
5. Who we share data with
Within a family, the child's activity is visible to the parent account that set up the child. Outside the family, we share data only with service providers that process it for us:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication and server functions — stores the account and family data | India (Mumbai) |
| Google Firebase (Cloud Messaging, Crashlytics, Analytics) | Push notifications, crash reports, usage analytics | May be outside India |
| Mixpanel | Product analytics | May be outside India |
| Google Maps | Showing locations and safe zones on a map | May be outside India |
| Google Sign-In | Signing in with a Google account (optional) | May be outside India |
| RevenueCat and Google Play Billing | Subscriptions and purchases | May be outside India |
We may also disclose data if required by law, to protect a person's safety, or as part of a business transfer (in which case this policy continues to apply).
6. How long we keep data
- Notification records (which app, and when): 30 days.
- All other account and family data: while the account exists. To delete one child and all of their data without deleting your account, open that child's settings in the App and choose Remove; it takes effect right away.
- When you delete your account, your profile, your children's profiles and all of their data, and the children's phone accounts are deleted from our database immediately. Copies may remain in our hosting provider's encrypted backups for a short period until those backups expire.
- Crash and analytics data are kept by those providers according to their retention settings.
7. How we protect data
- All data is sent over encrypted connections (HTTPS).
- Database access rules ensure a parent can see only their own children, and a child's phone only its own child.
- The child PIN is checked only on our server and stored only as a bcrypt hash; repeated wrong guesses are blocked.
- Sensitive actions (such as approving rewards or deleting an account) are checked on the server, not only in the app.
No system is perfectly secure, but we work to protect your data and will inform affected users and authorities of a personal-data breach as required by law.
8. Your rights and choices
Under India's Digital Personal Data Protection Act, 2023, and other applicable laws, you can:
- Access the data held about you and your children — most of it is visible in the App.
- Correct it — edit names and settings in the App, or contact us.
- Erase it — delete your whole account in the App (how to delete your account), or remove a single child and all of their data from that child's settings.
- Withdraw consent — remove permissions on the child's phone, leave child mode on it, or ask us to delete the child's data. Some features stop working without the related data.
- Nominate another person to exercise these rights in the event of death or incapacity.
- Raise a grievance with us at privacy@digitogether.com. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
For requests by email, write from the email address on your account so we can verify you. We aim to respond within 30 days.
9. Children
DigiTogether processes children's data only on the instructions and with the consent of their parent or guardian, only to provide parental controls and digital-wellbeing features, and never for advertising. If you believe a child's phone was linked without a parent's or guardian's consent, contact us and we will delete that data.
10. Changes to this policy
We will update this page when our practices change and change the "Last updated" date above. If a change is significant, we will also tell you in the App before it takes effect.
11. Contact
Kundan Kumar, trading as DigiTogether
Bengaluru, Karnataka, India
Email: privacy@digitogether.com