GrinKin privacy policy

Who we are

GrinKin is developed by Radoje Tesovic, a private individual in Serbia, who is the data controller. Contact: grinkin.app@gmail.com. GrinKin is currently in a private test: only invited families can use it.

What GrinKin does

A parent sets daily screen-time rules and tasks for a child. The child earns extra time by doing tasks. GrinKin Kid closes apps on the child's phone when the time for them is used up, and lets the child send an SOS to the parent. GrinKin Kid is open about this: it shows a notification "GrinKin Kid is on" while its protection runs. GrinKin is built only for parents and their own children. It must not be used to watch anyone else.

What we collect and why

Parent

• Account: e-mail address (sign-in) and a password, which is stored only as a secure hash. Accounts are created by us on request; there is no public sign-up.
• Family membership and the parent's phone registration (a random installation ID and a public key), to keep the account secure.
• Push token from Firebase Cloud Messaging and the app version, to send notifications to the parent's phone.

Child

• A first name or nickname chosen by the parent (no surname, birth date, photo or school) and the family time zone.
• Phone registration: a random installation ID and a public key. We do not collect IMEI, serial number or phone number.
• List of installed apps (app name, package name, app version and whether it is a system app; only apps that appear on the home screen), so the parent can decide which apps are limited. Only the latest list is kept.
• Tasks and routines, the child's short note when handing in a task, the parent's feedback, rewards, points (XP) and levels, extra time, and the result of each time grant.
• Protection status: whether the permissions GrinKin needs are on (for example, if Accessibility was turned off). No app names or usage times are part of it.
• SOS: when the child sends an SOS, the time, state, which parent saw or closed it, battery level, charging state, network type and, if the child allowed location, the precise location with its accuracy, from the moment the SOS starts until it ends (the first point may be the phone's last known position from up to 10 minutes before). Location is encrypted before it is stored, is shown only to the child's parents, and never appears in logs or notifications. GrinKin does not track location at any other time.
• Push token from Firebase Cloud Messaging and the app version, so the phone learns quickly about changes.
• Technical data for trustworthy time: the phone's restart counter (a number), so time limits stay correct after a restart.

What stays on the child's phone

• Which app is open and for how long. GrinKin Kid uses Android's Accessibility service and Usage access only to see the name of the app in front and to count time; on Android's own Settings screens it also compares the screen title with its own name, in memory, to protect its settings. It never reads the content of apps or what the child types. This usage information is not sent to our server or to the parent; only the remaining time and the rules matter.
• Camera frames used to scan the pairing QR code are never stored.

We do not show ads, do not use analytics or tracking SDKs, do not sell data and do not share it for advertising.

Legal basis

We process data to provide the service the parent asked for (contract), and for the child's data on the basis of the parent's consent and the parent's responsibility for the child. The SOS location is processed to protect the child's vital interests and only when the child starts an SOS.

Where data is stored and who helps us

• Hetzner Online GmbH (Germany): our server and encrypted backups, in the EU. Data processing agreement in place.
• Google (Firebase Cloud Messaging): delivers notifications. It receives a push token, a Firebase installation ID, basic app and device information, and short messages that contain only internal IDs, never names or locations.
• Google Play services on the child's phone determine the location during an SOS (Android's location service).
• Google Play and, during the pilot, Firebase App Distribution: app distribution; they know the e-mail addresses of invited testers.

All connections use HTTPS (TLS). Backups are encrypted.

How long we keep data

• SOS records and their encrypted locations: 90 days after the SOS ends.
• Protection status history and alerts: 30 days. Notification records: 30 days.
• Server logs: 14 days (they contain IP addresses of requests).
• Encrypted backups: up to 14 days (daily) and 6 months (monthly), plus the last 10 backups made before each server update (kept by count, so they can be older).
• Account, child profile, tasks and the app lists (the latest list of each phone that was ever paired): while the family uses GrinKin. They are deleted when the family asks or when the test ends.

Your rights and deleting data

A parent can ask for a copy, correction or deletion of the family's data by writing to grinkin.app@gmail.com. We delete the data within 30 days; copies in backups disappear when the backups rotate. Uninstalling GrinKin Kid stops all collection on that phone; to have a phone's data removed from our server, write to us. You may also complain to the data protection authority (in Serbia: Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti).

Children

GrinKin Kid is used by children only after their parent sets it up and pairs the phone. We collect from children only what is listed above and only for the purpose described. Parents can see and delete it.

Changes

We will update this page when the apps change what they collect, and change the version and date above.

Politika privatnosti (srpski)

Aplikacije: GrinKin (za roditelje) i GrinKin Kid (za decu). Verzija 1, važi od 12.11.2026.

Ko smo

GrinKin razvija Radoje Tesovic, fizičko lice iz Srbije, koje je rukovalac podacima. Kontakt: grinkin.app@gmail.com. GrinKin je trenutno u privatnom testu: koriste ga samo pozvane porodice.

Šta GrinKin radi

Roditelj postavlja dnevna pravila za vreme ekrana i zadatke za dete. Dete zarađuje dodatno vreme radeći zadatke. GrinKin Kid zatvara aplikacije na detetovom telefonu kad se vreme za njih potroši i omogućava detetu da pošalje SOS roditelju. GrinKin Kid to radi otvoreno: dok zaštita radi, prikazuje obaveštenje „GrinKin Kid je uključen“. GrinKin je namenjen samo roditeljima i njihovoj deci i ne sme se koristiti za praćenje bilo koga drugog.

Šta prikupljamo i zašto

Roditelj: e-mail adresa za prijavu i lozinka (čuva se samo kao bezbedan heš; naloge pravimo mi na zahtev), članstvo u porodici i registracija roditeljevog telefona (nasumični ID instalacije i javni ključ), push token (Firebase Cloud Messaging) i verzija aplikacije za obaveštenja.

Dete:

• ime ili nadimak koji bira roditelj (bez prezimena, datuma rođenja, fotografije ili škole) i vremenska zona porodice;
• registracija telefona: nasumični ID instalacije i javni ključ (bez IMEI-ja, serijskog broja i broja telefona);
• spisak instaliranih aplikacija (naziv, ime paketa, verzija i da li je sistemska; samo aplikacije sa početnog ekrana), da bi roditelj odlučio koje se ograničavaju; čuva se samo poslednji spisak;
• zadaci i rutine, kratka poruka deteta uz predat zadatak, komentar roditelja, nagrade, poeni (XP) i nivoi, dodatno vreme i rezultat svake dodele vremena;
• stanje zaštite: da li su potrebne dozvole uključene (na primer, da li je Pristupačnost isključena), bez naziva aplikacija i vremena korišćenja;
• SOS: vreme, stanje, koji roditelj ga je video ili zatvorio, nivo baterije, da li se telefon puni, vrsta mreže i, ako je dete dozvolilo lokaciju, precizna lokacija sa tačnošću, od početka do kraja SOS-a (prva tačka može biti poslednji poznati položaj telefona iz najviše 10 minuta pre). Lokacija se šifruje pre čuvanja, vide je samo roditelji deteta i nikad se ne pojavljuje u logovima ni u obaveštenjima. GrinKin ne prati lokaciju u bilo kom drugom trenutku;
• push token (Firebase Cloud Messaging) i verzija aplikacije, da telefon brzo sazna za promene;
• tehnički podatak za pouzdano vreme: brojač ponovnih pokretanja telefona (broj), da ograničenja ostanu tačna posle restarta.

Ostaje samo na detetovom telefonu: koja je aplikacija otvorena i koliko dugo. GrinKin Kid koristi Android uslugu Pristupačnosti i Pristup korišćenju samo da vidi naziv aplikacije u prvom planu i da broji vreme; na Androidovim ekranima Podešavanja još poredi naslov ekrana sa svojim imenom, u memoriji, da zaštiti svoja podešavanja. Nikad ne čita sadržaj aplikacija niti šta dete kuca. Ovi podaci se ne šalju na naš server ni roditelju; važni su samo preostalo vreme i pravila. Snimci kamere pri skeniranju QR koda se ne čuvaju.

Nema reklama, analitike ni SDK-ova za praćenje; podatke ne prodajemo i ne delimo za oglašavanje.

Pravni osnov

Podatke obrađujemo da bismo pružili uslugu koju je roditelj tražio (ugovor), a podatke deteta na osnovu pristanka roditelja i roditeljske odgovornosti. SOS lokacija se obrađuje radi zaštite životno važnih interesa deteta i samo kad dete pokrene SOS.

Gde se podaci čuvaju i ko nam pomaže

Hetzner Online GmbH (Nemačka, EU): server i šifrovane rezervne kopije, uz ugovor o obradi podataka. Google (Firebase Cloud Messaging): dostava obaveštenja; dobija push token, Firebase ID instalacije, osnovne podatke o aplikaciji i uređaju i kratke poruke sa internim ID-jevima, nikad imena ni lokacije. Google Play usluge na detetovom telefonu određuju lokaciju tokom SOS-a. Google Play i, tokom pilota, Firebase App Distribution: distribucija aplikacija; znaju e-mail adrese pozvanih testera. Sve veze idu preko HTTPS-a (TLS), rezervne kopije su šifrovane.

Koliko dugo čuvamo podatke

• SOS zapisi i njihove šifrovane lokacije: 90 dana posle završetka SOS-a.
• Istorija stanja zaštite i upozorenja: 30 dana. Zapisi obaveštenja: 30 dana.
• Serverski logovi: 14 dana (sadrže IP adrese zahteva).
• Šifrovane rezervne kopije: do 14 dana (dnevne) i 6 meseci (mesečne), plus poslednjih 10 kopija napravljenih pre svakog ažuriranja servera (čuvaju se po broju, pa mogu biti starije).
• Nalog, profil deteta, zadaci i spiskovi aplikacija (poslednji spisak svakog telefona koji je ikad uparen): dok porodica koristi GrinKin; brišu se na zahtev porodice ili na kraju testa.

Vaša prava i brisanje podataka

Roditelj može da zatraži kopiju, ispravku ili brisanje podataka porodice na grinkin.app@gmail.com. Podatke brišemo u roku od 30 dana; kopije u rezervnim kopijama nestaju kad se one zamene. Deinstaliranjem GrinKin Kid-a prestaje svako prikupljanje na tom telefonu; da se podaci nekog telefona uklone sa našeg servera, pišite nam. Pritužbu možete podneti Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti.

Deca

Dete koristi GrinKin Kid tek kad ga roditelj podesi i upari telefon. Od dece prikupljamo samo ono što je gore navedeno i samo u opisanu svrhu. Roditelji to mogu da vide i obrišu.

Izmene

Ovu stranicu ažuriramo kad aplikacije promene ono što prikupljaju i menjamo verziju i datum.