Privacy Policy

The short version

A parent installs Singularity: Parent Control, creates an account and sets the family rules. The child's device runs Singularity: Child Control, which has no login of its own and only works once a parent pairs it.

We collect what is needed to run parental controls and nothing more. We never read messages, never open photos, never use the camera or microphone, never record keystrokes and never take screenshots. There is no advertising, analytics or crash-reporting SDK in either app, so no third-party tracker gets anything. We do not sell or rent your data, and we do not use it for advertising or to train AI models.

On an Android child device we collect app usage, installed apps, blocked-website names and — when you turn it on — location. On an iPhone or iPad child device we collect only basic device status, because enforcement is not built for iOS yet.

You can delete everything at any time from Settings > Delete Account.

Who we are

These apps are published by Reasonify Technology Private Limited, a company incorporated in India (Apple Team ID F8FGJCGBKJ). We are the data controller (under the GDPR and UK GDPR) and the Data Fiduciary (under India's Digital Personal Data Protection Act, 2023) for the data described here.

Our primary market is India, and the apps are also available to users elsewhere. You can reach us at contactus@reasonify.in about anything in this policy, including privacy requests and grievances.

The two apps, and how pairing works

• Singularity: Parent Control (com.reasonify.parentcontrol, iOS and Android) — installed by a parent. It creates the account and sets the rules.
• Singularity: Child Control (com.reasonify.childcontrol, iOS and Android) — installed on a child's device. It has no login at all.

The child app is linked to a parent account only by a 6-character pairing code generated in the parent app. The code is valid for 10 minutes and can be used once. A child who installs the app on their own cannot connect it to anyone, and the app does nothing until a parent pairs it.

What we collect

From the parent, at registration

• Email address, stored in lowercase
• Password, stored only as a scrypt hash with a unique random 16-byte salt. The plaintext password is never stored and never written to our logs.
• Country — free text, optional
• Display name, derived automatically from the first part of your email address

About each child, entered by the parent

• First name
• Grade or class
• Age band — under 8, 8–12, or 13–17

From the child's device — this differs by platform

Data created by using the apps

• "Ask for more time" requests — the app requested, the number of minutes, and an optional free-text reason written by the child (maximum 200 characters)
• Activity log — every change made to the family rules: who made it, what changed, and when
• Saved places (geofences) — name, coordinates and radius
• Co-parent invitations and roles — admin or viewer

What we never collect

These are hard limits in how the apps are built, not preferences we might change quietly:

• We never read, store or show message content — no chats, emails or SMS.
• We never access photos, the camera, the microphone or contacts.
• We never record the content of web pages. Only the domain names that were blocked.
• We never record keystrokes and we never take screenshots of the child's device.
• There is no advertising SDK, no analytics SDK and no crash-reporting SDK in either app. No third-party tracker receives any data.
• We do not use the advertising identifier (IDFA on iOS, AAID on Android).
• We never sell or rent personal data to anyone.
• We do not use personal data for advertising, and we do not use it to train AI models.

Why we collect each category, and our legal basis

Where our basis is consent, the parent can withdraw it at any time by switching the feature off or deleting the account. Withdrawing consent does not affect processing already carried out.

How long we keep data

How we protect it

• All network traffic uses HTTPS/TLS. Plain HTTP is blocked by App Transport Security on iOS.
• Passwords are hashed with scrypt and a per-user random salt. They are never reversible.
• Session tokens are stored on our servers only as SHA-256 hashes.
• On the device, session tokens and the app-lock PIN are kept in the iOS Keychain or Android Keystore, never in plain storage.
• Refresh tokens rotate on every use. If an old one is replayed we treat it as theft and revoke the whole session immediately.
• Sign-in is rate limited to 5 failed attempts per email and IP address per 15 minutes. Pairing is rate limited to 10 failed attempts per IP address per minute.
• The parent app can be locked behind a PIN.

No system is perfectly secure, and we do not claim otherwise. If a breach affects your data, we will notify you and the relevant authority as the law requires.

Third parties

Only two parties ever handle this data: us, on our own backend servers, and OpenStreetMap, for map images.

When a parent opens the Location screen, the map tiles are loaded from tile.openstreetmap.org. OpenStreetMap therefore receives the parent device's IP address and the map area requested. No account data and no child data is sent to them.

No other third party receives any data. We have no advertising, analytics or crash-reporting partners.

Children, and parental consent

These apps are built for families, and a parent is always the account holder and in control of the data about their children.

• At registration the parent ticks an explicit consent checkbox confirming they agree to the processing of family data for parental-control purposes.
• The child app always shows the child a status screen explaining what is active on their device.
• A child cannot pair their own device. Only a parent can, using a single-use code.

This is not a covert surveillance tool, and we will not help you use it as one. It is designed for limits a family has agreed openly. We strongly encourage every parent to tell their child what has been switched on and why — it works better, and it is the right thing to do.

India — Digital Personal Data Protection Act, 2023

India is our primary market. We process children's personal data only with the verifiable consent of a parent or lawful guardian, obtained in the parent app at registration. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children, and we do not process children's data in any way likely to harm their wellbeing. As Data Principals, parents may access, correct, update and erase their data, nominate another person to act for them, and raise a grievance with us at contactus@reasonify.in. We respond within the time the Act allows.

EU, EEA and UK — GDPR and UK GDPR

We are the controller. Our lawful bases are set out in the table above — consent for the monitoring features, and contract for running the service you signed up to. You have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing, as well as to withdraw consent at any time. You may also lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office in the UK.

United States — COPPA

The service is initiated and controlled by a parent, who provides consent before any data about a child is collected. Parents can review the data we hold about their child, delete it, and refuse any further collection by unpairing the device or deleting the account — all from inside the app. We collect no more from a child than is needed for the parental-control features the parent has switched on, and we never condition a child's use of the app on providing more data than that.

California — CCPA and CPRA

We do not sell your personal information, and we never have. We also do not share it for cross-context behavioural advertising. California residents may request to know what we collect, request deletion or correction, and we will not discriminate against you for exercising any of these rights. Because we run no advertising or analytics, there is no "Do Not Sell or Share My Personal Information" opt-out to offer — there is nothing to opt out of.

Apple App Store and Google Play families requirements

Both apps are built to the children's and families policies of the App Store and Google Play: no advertising SDK, no third-party analytics, no advertising identifier, data collection limited to the parental-control purpose, parent-held consent, and account deletion available inside the app without contacting us.

Your rights, and exactly where to use them

Deleting the account is permanent and immediate. It erases the parent account, every child profile, every paired device link, all location history, all usage reports, all alerts, the activity log and every co-parent's access. We cannot recover any of it afterwards.

Delete your account and data

You can delete your Singularity: Parent Control account and everything stored with it at any time. There are two ways to do it, and the first needs no contact with us at all.

1. In the app — immediate

1. Open Singularity: Parent Control.
2. Go to Settings.
3. Scroll to the bottom and tap Delete Account.
4. Enter your account password.
5. Confirm.

Deletion happens immediately. Any paired child device stops being controlled within seconds and returns to its unpaired state, as though the app had just been installed.

2. By email

For people who have uninstalled the app or cannot sign in:

• Email contactus@reasonify.in from the address on the account.
• Use the subject line “Account deletion request”.
• Include the signup email address in the message.

We may ask you to confirm ownership of that address first. We complete verified requests within 30 days, usually within a few working days.

Those are the only two ways to delete an account. There is no web form, no self-service portal and no support phone number.

What gets deleted

Both routes delete the same thing — the whole account, not a part of it:

• The parent account, including the email address and password hash
• Every child profile — name, grade and age band
• Every paired device link, so no device stays connected
• All location history and saved places
• All screen-time and usage reports
• All blocked-website activity
• All notifications and alerts
• The activity log
• Every co-parent's access to the account
• All sign-in sessions on every signed-in device

What we keep afterwards

Nothing. Deleting the account is permanent, and we keep no copy of your family's data once it is done. We cannot recover any of it afterwards, so please export anything you want before you delete.

Deleting only some data

If you want to clear part of your history without closing the account, you can do that in the app at any time: Location screen > Delete history, Web Filter > Clear, or Child profile > Unpair this device to disconnect a single device.

International transfers

We are based in India and operate our own backend servers. If you use the apps from outside the country where those servers are located — including from the EEA or the UK — your personal data is transferred there so we can provide the service you asked for. Where the law requires a transfer safeguard, we rely on your explicit consent and on the transfer being necessary to perform our contract with you.

Changes to this policy

We may update this policy as the apps change. The "Last updated" date at the top always shows the current version. If we make a material change — in particular, if we ever begin collecting something from a child's device that we do not collect today — we will tell you in the app before it takes effect.

How to contact us

Reasonify Technology Private Limited
Email: contactus@reasonify.in

Write to us for a copy of your data, to raise a grievance, or to ask anything about this policy. We respond within 30 days, usually within a few working days.