Privacy Policy

🛡️ 1. Introduction & Overview

Welcome to Where's My Time, developed by PixelNinjaDev LLC. Your privacy and trust are our highest priorities. This Privacy Policy details how we handle your personal data, app usage information, permissions, and rights when you use our mobile application.

Our fundamental design principle is Local-First Data Storage. Your detailed app usage statistics and screen time habits are processed directly on your device to ensure maximum privacy.

🔒 2. Data Ownership & Local Storage

Where's My Time respects your data ownership:

Local Storage: Your daily usage statistics, screen time metrics, goal limits, and sleep schedules are saved locally on your device via an encrypted SQLite database (Room DB).
Guest Mode: If you use the app without signing into a Google account, your usage data never leaves your physical device under any circumstances.

☁️ 3. Cloud Synchronization & Social Features

When you voluntarily sign in using Google Sign-In or activate cloud social features, limited data is synchronized securely with our Firebase Firestore servers:

Account Information: Your Google display name, email address, and profile photo URL.
Social & Gamification Data: Usernames, friends list, active challenges, level points, unlocked badges, and Global Leaderboard rankings.
Cross-Device Sync: Encrypted aggregated usage summaries for syncing stats across your devices.
Push Notifications (FCM Tokens): Firebase Cloud Messaging tokens used exclusively to send challenge invites, friend requests, and goal notifications.

🔑 4. Prominent Disclosure of Sensitive Permissions

To deliver real-time limit alerts and accurate usage charts, Where's My Time requests specific Android system permissions. We disclose their exact use in compliance with Google Play policies:

ACCESSIBILITY SERVICE API

Accessibility Permission (`BIND_ACCESSIBILITY_SERVICE`)

Purpose: Used exclusively to detect foreground application changes in real-time to trigger immediate screen time limit overlays and goal alerts.

Strict Privacy Commitment: We NEVER read, collect, store, or transmit screen text, typed messages, passwords, personal data, or user input through the Accessibility Service. It operates purely as a foreground window change listener.

✅ Zero Data Collection via Accessibility API

PACKAGE USAGE STATS

Usage Access Permission (`PACKAGE_USAGE_STATS`)

Purpose: Queries official Android system usage statistics to compute and render accurate daily, weekly, and monthly screen time breakdown charts.

Processing: This data is queried locally on-device and is never uploaded to external servers.

POST NOTIFICATIONS

Notification Permission (`POST_NOTIFICATIONS`)

Purpose: Sends local push notifications for time limit warnings, daily wellbeing summaries, and social challenge updates from friends.

🤖 5. AI Digital Report & On-Device Processing

Our AI Digital Report feature analyzes your aggregated usage trends to generate personalized digital wellbeing advice and habits recommendations.

All AI analysis logic runs locally on your device. No raw app logs, browsing history, or personal conversations are ever transmitted to third-party AI models.

📢 6. Advertising & Analytics Third-Party SDKs

To support free tier availability, Where's My Time integrates verified third-party SDKs:

Google AdMob: Serves non-intrusive banner, interstitial, and voluntary rewarded video ads. AdMob may collect device identifiers (advertising ID) in accordance with Google's advertising policies.
Google Play Billing: Handles VIP Premium subscriptions ($1.99/mo) and free trial entitlements securely. We do not store or process credit card or financial info directly.
Firebase Analytics & Crashlytics: Collects anonymized crash logs and app performance telemetry to improve app stability.

🗑️ 7. Data Control & Account Deletion Mechanism

In full compliance with Google Play's Account Deletion Policy, Where's My Time provides a transparent, direct, and complete process for users to permanently delete their account and all associated data.

ACCOUNT DELETION IN APP

Delete Your Account Inside the App

You can permanently delete your account directly inside the Where's My Time mobile application at any time by opening:

👤 Profile → Danger Zone → Delete Account

Once requested and confirmed within the app, your account and all associated cloud data are immediately queued for permanent erasure.

📋 What Data Will Be Deleted

When you delete your account, the following data associated with your user identity is permanently and irreversibly removed from our systems:

Firebase Authentication account (credentials & unique UID)
User profile information (display name, email address, profile picture URL)
Screen time history and daily usage analytics
Personalized goals and custom usage limits
AI Reports and digital wellbeing summaries
Friends list and social connections
Friend Requests (both incoming and outgoing)
Challenges (active and historical challenge participation)
Leaderboard records and ranking points
Notifications and device FCM push tokens
Any personal data linked to your account

🛡️ Data Retention

Some anonymous technical logs (such as system error telemetry or security audit logs) may be temporarily retained for a limited period strictly when required for security, fraud prevention, or legal compliance.

These logs contain zero personally identifiable information (PII), are completely anonymized, and cannot be used to identify the user.

⚡ Account Deletion Process

Once your deletion request is confirmed:

The deletion is permanent and final.
The user is automatically signed out across all devices.
The account and deleted data cannot be recovered under any circumstances.

Need Help?

If you cannot access the app or have questions regarding account deletion, you can request manual account deletion by contacting support at contact@pixelninjadev.com or clicking the button below:

🗑️ Delete Your Account

👶 8. Children's Privacy

Where's My Time is designed for general audiences aged 13 and above. We do not knowingly collect or solicit personal information from children under 13. If we discover that a child under 13 has provided personal data, we will immediately delete it from our servers.