Privacy policy

How family information and Android access are used.

Palitha Detox helps a parent arrange repeating screen-time periods and offline activities for their child. A parent creates and manages the account; children do not need their own accounts.

Account and family information

Supabase processes the parent's email, password authentication and account name. The app does not store the cloud password in its family database. The parent's private family record includes child profiles (age and optional nickname, gender and interests), timing choices, task selections and custom task text, reward goals, progress, scheduled-session events, preferences and a protected parent-PIN verifier. These records are linked to the signed-in parent's user ID. Database policies restrict access to that parent.

The app keeps a private device cache to support continued use during interruptions. Access and refresh tokens are held in app memory; a fresh app start requires parent sign-in unless an existing child session is being resumed. Email confirmation and reset use a device-held PKCE verifier. Photos and parent voice recordings remain in the app's private device storage; they are not included in cloud family snapshots. Running session deadlines remain device-specific.

Android access

Notifications, display-over-apps access, connected Accessibility access and a battery-optimization exemption are required before using the app’s core screen-time features. Parents grant each setting themselves in Android Settings. Account, subscription, privacy and setup screens remain accessible without these settings. If required access is removed or cannot be verified, sessions stop until setup is complete again. During a parent-started offline break, the service receives app-window changes, checks the opening app's identifier and attempts to return to Pip. App identifiers are processed locally and are not uploaded by this service. Screen-content retrieval is disabled. Calls, permission screens, system UI and Android Settings remain available. The service does not read messages, passwords or financial information. Parents can revoke access in Android Settings. Protection is best effort and is not a device-administrator lock.

Display-over-apps access shows break reminders. Notification access shows the running timer; the app also checks that its timer notification channel is enabled. Battery exemption helps the background timer continue. These settings do not guarantee operation against every manufacturer restriction, device restart or force stop. Microphone and camera access are requested only when a parent chooses to record an instruction or take a task photo. Photo selection uses the installed image-picker integration. No SMS, contacts, location or call-log permission is requested. The app records scheduled periods, not measured usage of other apps; the unused usage-access permission has been removed.

Subscriptions and purchase verification

The family plan is a monthly Google Play subscription. Eligible new subscribers can receive a seven-day free trial, followed by the localized monthly price shown before confirmation. The plan renews automatically until cancelled in Google Play. Cancel before the trial ends to avoid the first charge. License-test accounts use accelerated test periods rather than seven real days.

Purchase tokens are sent over HTTPS to our Supabase server, which queries Google Play to verify the plan, expiry, renewal state and trial phase, and acknowledges confirmed purchases. A SHA-256 hash of your parent account ID is supplied to Google Play to bind new purchases to that parent. The server stores the purchase token, token hash, owner ID, subscription state, expiry, phase and verification time in a private billing table; app users cannot read this table directly. Trial and access dates come from Google, not a local countdown. Pending or unverified purchases do not unlock new sessions. An internet connection and the linked parent and Play accounts are needed to verify or restore access.

Sharing and retention

Family records are sent over HTTPS to the configured Supabase project for authentication and storage. Cloud data is hosted in Sydney, Australia. The current app contains no advertising or analytics. Google Play handles subscription checkout, payment methods, recurring payments, cancellation and refunds. The app and its Supabase billing verifier do not receive your full payment-card details. Supabase provides the cloud infrastructure. Your device, speech provider and app store operate under their own privacy policies. A device-selected speech voice may use the device's speech service; built-in English narration and parent recordings are bundled/local audio.

Cloud family records remain until the parent deletes the account. Account deletion requires password confirmation, removes the authenticated Supabase user and associated cloud family row, and removes the account's current-device cache and its unshared local task media. Other devices may retain offline copies until cleared there; original local-only records belonging to a separate family are preserved. The app keeps a private backup before an explicitly chosen local/cloud conflict resolution; backups associated with the deleted account are included in current-device cleanup. Billing ownership records are retained separately after account deletion to prevent purchase replay and support subscription ownership checks. These records include the former parent account ID and purchase information described above. No automatic retention duration is currently configured; contact support about retained billing data. Deleting a Palitha account or uninstalling the app does not cancel Google Play billing. Cancel the subscription in Google Play before deleting your account.

Parent choices

Parents can edit child profiles and preferences, revoke Android access, manage or cancel their Google Play subscription, sign out, and request deletion inside the account screen. The current interface and bundled narration are English. Revoking required Android access makes core features unavailable until setup is completed again. Children use parent-configured activities, with no child account or public social features.