Privacy Policy — ChildLock for Android

Last updated: October 13, 2026

1. Introduction

ChildLock for Android (ai.childlockapp) is a parental-control app operated by EpowerX Labs Private Limited ("EpowerX", "we", "us"). A parent blocks the apps their child shouldn't open and approves the video channels their child may watch. This policy covers the Android app. Using an iPhone? Read the iPhone privacy policy. The short version: no account, no ads, no data sales, and your child's name and watch history stay on your phone.

2. Data we do not collect

• We do not require an account, login, email, or phone number.
• We do not collect your name or your child's name, contacts, location, photos, files, or messages.
• We do not show ads and we do not use the Android advertising ID.
• We do not sell data to anyone.
• We do not receive your payment-card or bank-account details. Google Play processes those directly.

3. Permissions and what stays on the phone

• Usage access — to see which app is in the foreground, so ChildLock knows when a blocked app opens. This happens on the phone; your app usage history is not uploaded.
• Display over other apps — to show the lock screen on top of a blocked app.
• List of installed apps — so you can pick the apps to block.
• Fingerprint — handled by Android's biometric prompt. ChildLock only learns whether the check passed; it never receives fingerprint data.
• Battery optimisation, notifications, start at boot — to keep the blocker running.

Your child's name, approved channels, watch history, and session state are stored in a local database on the phone and are deleted when you uninstall the app.

4. What the app sends

• Channel catalog — the curated channel list is fetched from api.childlock.xyz without any per-user identifier.
• Channel search — your search text is sent to our channel-search service (api.regainapp.ai, operated by EpowerX) to find matching YouTube channels.
• Videos — video lists and thumbnails are loaded from YouTube's public feeds, and videos play through YouTube's embedded player. YouTube (Google) receives these requests under Google's privacy policy.
• App analytics — the app sends usage events to our own self-hosted analytics server (analytics.regainapp.ai): screens opened and buttons tapped, permission status, onboarding steps, session minutes, crash and error messages, the public YouTube IDs and names of channels and videos involved, the package names of apps you choose to block, the child age you selected, and counts. Events carry the Android ID and a random install ID, plus phone model, Android version, app version, and language. They never include your child's name, and they are not used for advertising or shared with any third party.
• Feedback you send — if you send feedback from the app, we receive your message and topic, plus a diagnostics file with the phone model, Android version, app version, permission status, and counts (for example how many children and channels are set up). The diagnostics file never contains your child's name, channels, or watch history.

5. Purchases

If ChildLock offers a paid plan on Android, it is billed by Google Play; we never see your payment-card or bank details. Subscription status may be processed by RevenueCat under a pseudonymous customer ID to deliver and restore your purchase. See RevenueCat's privacy policy.

6. Children's privacy (COPPA)

ChildLock is built for children to use under a parent's control. The parent sets ChildLock up and is the only person we transact with. Your child's name, watch history, and profile stay on the phone. The analytics described in section 4 contain no name, contact details, or advertising identifier, and are used only to operate and improve ChildLock. We do not knowingly collect personal information from children, we show no ads to children, and there are no third-party analytics or tracking in the child-facing experience.

7. Third parties

• Google — Google Play distributes the app and processes payments; YouTube hosts the videos and feeds. See Google's privacy policy.
• RevenueCat — only if you buy a subscription (section 5).
• Jitsu / OpenPanel (self-hosted) — our own first-party analytics infrastructure that receives the app events in section 4. No third-party analytics service receives your data.

8. Your rights

Email privacy@childlock.xyz for access, correction, or deletion requests. Under the GDPR you have the rights of access, rectification, erasure, restriction of processing, data portability, and objection. Under the CCPA you have the right to know, the right to delete, and the right to opt out of the sale of personal information — the last is inapplicable because we do not sell data. Because ChildLock has no accounts, tell us roughly when you used the app and on which phone so we can locate and delete the matching analytics and feedback; uninstalling the app removes everything stored on the phone.

9. Data retention

App analytics events and feedback reports are kept only as long as they are needed to operate and improve ChildLock, and are deleted on request (section 8). Data on your phone is deleted when you uninstall the app. Google retains purchase records under its own policies.

10. Changes to this policy

If we change this policy, we will post the updated version on this page and update the "Last updated" date above. If a change is material and the app is installed, we will surface it via an in-app notice.

11. Contact

Privacy, GDPR, CCPA, copyright, and DMCA notices: privacy@childlock.xyz

EpowerX Labs Private Limited
Plot No. 77, JBR Tech Park, 6th Rd
Whitefield, EPIP Zone
Bangalore, Karnataka 560066
India