Personal Data Policy

Version of 05.10.2026. The Russian version prevails; it follows Federal Law No. 152-FZ “On Personal Data”.

1. Operator

The operator is Individual Entrepreneur Alexander Sergeevich Pryadchenko, TIN 312328719475, OGRNIP 326310000067090, address: 35 Chelyuskintsev St., apt. 29, Belgorod, Belgorod Region, Russia, e-mail tiholab@mail.ru (the “Operator”). The ChildControl service consists of the parent app, the child app, a server and this website.

2. Whose data and which

Parents (legal guardians): login, password (stored only as an irreversible hash), name or nickname, interface language, the date and version of this consent, technical session data; if provided — e-mail, phone number and Telegram ID (for sign-in and access recovery); on the Pro plan — the parent's location, only if the parent turned on “Share my location with the family” (turning it off deletes this data).

Children — only as set up by the parent: the child's login and name or nickname, PIN (hash), limit and schedule settings, phone model and Android version, list of installed apps, daily app usage time, protection events, requests for more time; on Plus and Pro plans, with the permission granted on the phone, the phone's last location (coordinates and accuracy); on the Pro plan (family locator) — the phone's location history for the last 30 days and the allowed zones set by the parent (to alert when the child leaves a zone).

We do not collect: messages, calls, photos or videos, browser history, screen contents, contacts, ID or payment data.

3. Purposes and legal grounds

• Providing the parental control service — performance of the Terms of Use to which the parent is a party, and the parent's consent.
• A child's data is processed with the consent of their legal guardian (the parent), given at sign-up and when linking the child's phone.
• Service security (brute-force protection, log of attempts to disable protection) — the Operator's legitimate interest.

4. Storage location and retention

Databases containing personal data of citizens of the Russian Federation are hosted on servers located in the Russian Federation. All families are stored on the server in Russia. The Operator's server in the Netherlands stores no family data: Telegram messages only pass through it (section 5). Personal data is transferred abroad only in this one case. Location history (family locator) is kept for 30 days and deleted automatically. Usage statistics, the last location and alerts are kept for no longer than 12 months; other data until the family is deleted. A family and all its data can be deleted in the parent app (Settings → Delete family) or on request by e-mail; deletion is completed within 30 days.

5. Disclosure

Data is available only to the parents of the respective family and to authorised support staff of the Operator. Data is never sold or disclosed to third parties except as required by law.

If a parent linked their own Telegram, sign-in codes, alerts (for example, when the child leaves an allowed zone) and weekly reports (the child's name, screen time, the most used apps) are sent to them by the bot in Telegram. Telegram is not reachable from servers in Russia, so these messages, as well as the phone number when linking with “Share phone number”, pass in transit, without being stored, through the Operator's server in the Netherlands to Telegram (Telegram FZ-LLC, United Arab Emirates). This is a cross-border transfer of personal data (Art. 12 of Law No. 152-FZ), including to a country that may not ensure adequate protection of data subjects' rights; it happens only with the parent's consent given by linking Telegram. If Telegram is not linked, no data leaves Russia. The weekly report can be turned off in the parent app; Telegram can be unlinked on request by e-mail.

When an app crashes, a technical report is sent to the server: the error text, app version, phone model and Android version — without any data of children or parents. Such reports are kept for 90 days.

Anonymised app statistics are processed by AppMetrica (Yandex LLC, servers in Russia): launches and sessions, app and Android version, phone model, crashes and some actions without content (for example, "time added"). Logins, names, messages, location and advertising identifiers are not sent to AppMetrica. Statistics can be turned off in the app: in the parent app — Settings → "Anonymous statistics", on the child's phone — Settings → "Anonymous statistics".

6. Security

Traffic between the apps and the server is encrypted (TLS). Passwords and PINs are stored only as PBKDF2 hashes. The child app openly shows that parental control is installed.

7. Your rights

You may request information about the processing of your and your child's data, ask for correction, blocking or deletion, and withdraw consent (by deleting the family or writing to the Operator). Requests are answered within 10 business days.

8. Website

The website uses no advertising or analytics cookies. The chosen language is saved in the browser's local storage.